
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37215f57-8a07-4b5a-adb9-c29a44a90e22/ece6d6d0-0581-3372-87cf-d0a923fc28ee.roa
File: ece6d6d0-0581-3372-87cf-d0a923fc28ee.roa (raw, json)
Hash identifier: 0WNreBL0rAe6GAJA/oSmHfcxU9LdzLULjdNWQDApEXI=
Subject key identifier: AF:80:1C:60:D2:2C:C7:BD:51:24:C6:C1:6E:A6:33:2E:EE:C0:FA:50
Certificate issuer: /CN=37215f57-8a07-4b5a-adb9-c29a44a90e22
Certificate serial: 010D0C9F4328584D694500D293B0026E2A45D000
Authority key identifier: B7:D9:6B:25:FB:4E:C5:40:E6:F9:98:D3:8A:44:69:C4:AE:37:AA:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37215f57-8a07-4b5a-adb9-c29a44a90e22.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37215f57-8a07-4b5a-adb9-c29a44a90e22/ece6d6d0-0581-3372-87cf-d0a923fc28ee.roa
Signing time: Mon 06 Apr 2026 01:00:24 +0000
ROA not before: Mon 06 Apr 2026 01:00:24 +0000
ROA not after: Sun 05 Jul 2026 01:00:24 +0000
asID: 13335
IP address blocks: 2602:f997:cff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37215f57-8a07-4b5a-adb9-c29a44a90e22/37215f57-8a07-4b5a-adb9-c29a44a90e22.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37215f57-8a07-4b5a-adb9-c29a44a90e22/37215f57-8a07-4b5a-adb9-c29a44a90e22.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37215f57-8a07-4b5a-adb9-c29a44a90e22.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:69:45:00:d2:93:b0:02:6e:2a:45:d0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37215f57-8a07-4b5a-adb9-c29a44a90e22
Validity
Not Before: Apr 6 01:00:24 2026 GMT
Not After : Jul 5 01:00:24 2026 GMT
Subject: CN=4ae2a0b6-8283-4adb-b1cf-762dbd02ca9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7e:d4:9b:0d:ec:b7:21:3d:ae:7f:e5:e9:54:
08:8c:14:8a:11:04:5b:b5:c7:58:a5:11:25:82:8c:
51:c2:d0:f1:47:65:48:47:1b:a3:f0:c5:db:23:74:
56:25:e3:a0:6c:a4:72:8f:59:87:c5:c3:25:d5:f4:
a9:fd:f5:b1:23:00:55:93:f3:a1:9a:34:41:cd:a0:
29:29:ce:eb:59:3f:e4:0d:13:f4:de:eb:58:fa:ea:
5e:cd:a6:ba:52:c3:bc:c3:6f:6b:17:db:49:4a:dc:
28:8f:4c:05:95:d7:4d:28:9c:87:f0:1d:7e:cc:d8:
e3:1e:ae:df:4a:8a:5b:b5:30:af:66:f7:c7:e4:3e:
39:05:d9:8d:2f:52:03:dc:f7:e3:80:fb:cb:24:5d:
6d:09:3d:3a:7d:20:f3:f7:25:4d:e8:b6:56:04:5a:
e3:61:a5:52:dc:e7:d3:51:75:27:bc:b9:78:ac:92:
e3:22:0e:96:63:ea:90:d5:35:a9:b2:29:dd:46:12:
0e:ef:51:eb:8c:aa:c0:ed:f8:96:4e:a8:d3:0f:f7:
71:9c:13:96:86:31:92:45:12:ef:ea:d9:be:75:cf:
93:34:86:6c:0d:02:77:f7:80:48:5c:b2:94:9b:cd:
73:7d:d8:11:32:de:4a:ad:0b:35:f1:f2:0b:73:f7:
31:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:80:1C:60:D2:2C:C7:BD:51:24:C6:C1:6E:A6:33:2E:EE:C0:FA:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37215f57-8a07-4b5a-adb9-c29a44a90e22/ece6d6d0-0581-3372-87cf-d0a923fc28ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37215f57-8a07-4b5a-adb9-c29a44a90e22/37215f57-8a07-4b5a-adb9-c29a44a90e22.crl
X509v3 Authority Key Identifier:
keyid:B7:D9:6B:25:FB:4E:C5:40:E6:F9:98:D3:8A:44:69:C4:AE:37:AA:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37215f57-8a07-4b5a-adb9-c29a44a90e22.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f997:cff::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:cf:db:3f:66:5e:a6:21:61:43:b6:b6:d4:c7:7f:c3:f7:6c:
48:ce:fb:32:d5:86:d4:43:1e:b7:fc:56:bd:f6:44:82:07:ea:
a1:11:16:fe:e6:57:27:ef:3b:58:1c:4d:2a:c7:5a:37:9b:dd:
8d:d4:1a:77:cf:b9:fd:b6:56:c4:ad:88:08:3e:4b:15:1d:1e:
a0:23:2c:41:48:57:fb:43:8c:95:f4:5d:e1:35:13:1d:1a:17:
ff:45:8c:90:82:46:c2:49:fc:17:f9:d2:5d:d6:c3:28:47:c4:
e0:4a:b8:90:7c:27:41:ff:f6:50:5e:1f:1b:bd:82:35:87:81:
d2:ef:fb:be:ef:44:67:17:03:62:97:5d:95:de:41:e4:9d:8a:
67:86:c6:b5:fc:20:aa:f2:01:30:6f:d9:ca:95:56:84:7e:2a:
c9:92:7b:1b:d8:2c:02:e0:71:ea:04:c5:38:d1:e6:cc:0e:ea:
7e:df:25:64:18:64:d3:fa:53:ee:19:b0:6c:74:94:7e:70:0b:
ed:d8:f3:7a:7b:21:23:2a:34:ac:d9:c9:aa:eb:ed:40:b8:0b:
0b:db:ca:7a:5f:34:c9:d0:ee:43:3c:6e:13:5b:22:12:42:b9:
7b:d3:d5:ee:7e:fa:73:f7:75:8a:36:d5:58:64:82:ba:71:45:
3c:62:9c:cb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1pRQDSk7ACbipF0AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzcyMTVmNTctOGEwNy00YjVhLWFkYjktYzI5YTQ0YTkw
ZTIyMB4XDTI2MDQwNjAxMDAyNFoXDTI2MDcwNTAxMDAyNFowLzEtMCsGA1UEAxMk
NGFlMmEwYjYtODI4My00YWRiLWIxY2YtNzYyZGJkMDJjYTlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3n7Umw3styE9rn/l6VQIjBSKEQRbtcdYpREl
goxRwtDxR2VIRxuj8MXbI3RWJeOgbKRyj1mHxcMl1fSp/fWxIwBVk/OhmjRBzaAp
Kc7rWT/kDRP03utY+upezaa6UsO8w29rF9tJStwoj0wFlddNKJyH8B1+zNjjHq7f
SopbtTCvZvfH5D45BdmNL1ID3PfjgPvLJF1tCT06fSDz9yVN6LZWBFrjYaVS3OfT
UXUnvLl4rJLjIg6WY+qQ1TWpsindRhIO71HrjKrA7fiWTqjTD/dxnBOWhjGSRRLv
6tm+dc+TNIZsDQJ394BIXLKUm81zfdgRMt5KrQs18fILc/cxkQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFK+AHGDSLMe9USTGwW6mMy7uwPpQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8zNzIx
NWY1Ny04YTA3LTRiNWEtYWRiOS1jMjlhNDRhOTBlMjIvZWNlNmQ2ZDAtMDU4MS0z
MzcyLTg3Y2YtZDBhOTIzZmMyOGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMzcyMTVmNTctOGEwNy00YjVhLWFk
YjktYzI5YTQ0YTkwZTIyLzM3MjE1ZjU3LThhMDctNGI1YS1hZGI5LWMyOWE0NGE5
MGUyMi5jcmwwHwYDVR0jBBgwFoAUt9lrJftOxUDm+ZjTikRpxK43qoowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi8zNzIxNWY1Ny04YTA3LTRiNWEtYWRiOS1jMjlh
NDRhOTBlMjIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5lwz/
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABjP2z9mXqYhYUO2ttTHf8P3bEjO+zLVhtRDHrf8Vr32RIIH6qER
Fv7mVyfvO1gcTSrHWjeb3Y3UGnfPuf22VsStiAg+SxUdHqAjLEFIV/tDjJX0XeE1
Ex0aF/9FjJCCRsJJ/Bf50l3WwyhHxOBKuJB8J0H/9lBeHxu9gjWHgdLv+77vRGcX
A2KXXZXeQeSdimeGxrX8IKryATBv2cqVVoR+KsmSexvYLALgceoExTjR5swO6n7f
JWQYZNP6U+4ZsGx0lH5wC+3Y83p7ISMqNKzZyarr7UC4CwvbynpfNMnQ7kM8bhNb
IhJCuXvT1e5++nP3dYo21VhkgrpxRTxinMs=
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:52:43 2026 by rpki-client