
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/20190028-ab46-33e5-ae31-a2cce0a03e89.roa
File: 20190028-ab46-33e5-ae31-a2cce0a03e89.roa (raw, json)
Hash identifier: 7eZuN65LcTkxGypzs0pHSU2MsETtLi6MrokddIqeuKc=
Subject key identifier: 16:AA:C0:28:76:EC:50:B1:3B:7F:E6:94:1B:16:26:EA:41:83:35:AE
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584D237A06E541F015DF812A9A00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/20190028-ab46-33e5-ae31-a2cce0a03e89.roa
Signing time: Thu 12 Mar 2026 01:00:32 +0000
ROA not before: Thu 12 Mar 2026 01:00:32 +0000
ROA not after: Wed 10 Jun 2026 01:00:32 +0000
asID: 30036
IP address blocks: 2604:2e8d:9000::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 13 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:23:7a:06:e5:41:f0:15:df:81:2a:9a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Mar 12 01:00:32 2026 GMT
Not After : Jun 10 01:00:32 2026 GMT
Subject: CN=aeb0f746-2cc1-4324-b70d-1889d8b6927b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:73:74:b4:7f:ba:e7:18:c7:cc:9f:ef:9a:f7:
2e:4c:85:d8:4e:9d:e3:23:95:a9:e9:3c:5a:95:75:
cf:c3:eb:f2:ad:d3:a5:d1:4d:aa:6c:51:03:19:e5:
98:e6:c5:9d:6c:67:7b:c9:ac:b8:9f:bb:5e:2d:97:
57:05:e3:5a:87:53:af:00:d6:28:cb:81:02:75:f1:
b9:be:30:92:ff:f4:6d:7c:e9:ea:d9:ec:b4:c9:68:
0d:ed:0b:e8:25:86:ac:61:c9:c5:da:32:f8:cd:95:
2a:f7:5a:40:d4:6f:7d:e3:cc:7b:b4:cb:44:e2:89:
54:06:b7:4e:d9:8c:eb:5c:44:03:04:ee:3d:2c:10:
11:81:c1:e9:93:39:52:0e:35:d8:1c:71:bd:18:5b:
49:55:04:33:83:fe:cc:b3:63:a9:58:81:f0:11:43:
91:f4:2e:f9:77:d5:85:34:89:f3:5e:eb:ef:d6:6e:
88:07:34:25:15:69:58:40:18:e8:7a:5a:e9:36:3b:
9e:2d:e7:8c:86:ac:e2:26:bd:b0:03:32:5f:a0:54:
0c:23:5f:a4:0a:8f:e4:a9:67:05:0a:36:a3:c5:35:
8e:b9:33:47:c9:41:ed:ff:2a:cc:33:8d:a2:21:4c:
90:7b:a5:0c:bd:18:a2:34:98:5f:e7:c3:81:07:c4:
60:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AA:C0:28:76:EC:50:B1:3B:7F:E6:94:1B:16:26:EA:41:83:35:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/20190028-ab46-33e5-ae31-a2cce0a03e89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8d:9000::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:17:8b:9d:3c:56:f5:1e:a0:3c:00:eb:82:39:09:cf:43:5c:
5f:1f:6e:44:0f:73:ba:62:8a:1b:6b:b4:1d:a1:e9:e3:90:5a:
10:b3:18:7c:a8:ba:88:f7:19:2d:d6:b3:fb:51:47:c8:df:4f:
75:b1:7c:96:09:25:fa:92:fc:cf:78:47:69:13:bd:6e:d1:1e:
d4:09:d7:36:80:b1:0f:83:f8:3a:aa:4d:6e:da:e2:0e:81:42:
40:c2:67:d6:37:0f:04:20:e6:3a:72:64:cb:16:74:98:7d:3b:
37:66:41:4b:ec:f4:06:8d:0e:48:d6:65:6f:fd:fc:3b:89:33:
bf:e7:bd:25:24:00:31:bb:ce:05:b8:d3:53:d6:ae:72:79:65:
90:6b:77:d3:cb:d1:57:ca:c6:82:34:5f:7a:f4:88:f9:6a:5e:
76:ad:32:a2:d9:74:fa:9d:2f:eb:13:fb:5f:83:e8:33:1e:05:
ae:fa:22:d2:76:59:81:cb:ba:6f:97:ad:e8:e5:25:29:97:1a:
f0:cc:e1:a7:53:49:33:81:19:f4:76:62:fd:d5:fe:4e:e2:94:
10:10:78:6f:2a:17:b2:af:08:bd:06:42:88:e5:24:14:5e:7b:
a1:d7:d0:13:a6:b5:85:34:16:7b:3e:6c:95:f5:ad:2f:20:d6:
ea:ac:37:7c
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0jegblQfAV34EqmgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk
YWViMGY3NDYtMmNjMS00MzI0LWI3MGQtMTg4OWQ4YjY5MjdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnN0tH+65xjHzJ/vmvcuTIXYTp3jI5Wp6Txa
lXXPw+vyrdOl0U2qbFEDGeWY5sWdbGd7yay4n7teLZdXBeNah1OvANYoy4ECdfG5
vjCS//RtfOnq2ey0yWgN7QvoJYasYcnF2jL4zZUq91pA1G9948x7tMtE4olUBrdO
2YzrXEQDBO49LBARgcHpkzlSDjXYHHG9GFtJVQQzg/7Ms2OpWIHwEUOR9C75d9WF
NInzXuvv1m6IBzQlFWlYQBjoelrpNjueLeeMhqziJr2wAzJfoFQMI1+kCo/kqWcF
CjajxTWOuTNHyUHt/yrMM42iIUyQe6UMvRiiNJhf58OBB8RgxwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFBaqwCh27FCxO3/mlBsWJupBgzWuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjAxOTAwMjgtYWI0Ni0z
M2U1LWFlMzEtYTJjY2UwYTAzZTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujZAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEATxeLnTxW9R6gPADrgjkJz0NcXx9uRA9zumKKG2u0HaHp45BaELMY
fKi6iPcZLdaz+1FHyN9PdbF8lgkl+pL8z3hHaRO9btEe1AnXNoCxD4P4OqpNbtri
DoFCQMJn1jcPBCDmOnJkyxZ0mH07N2ZBS+z0Bo0OSNZlb/38O4kzv+e9JSQAMbvO
BbjTU9aucnllkGt308vRV8rGgjRfevSI+Wpedq0yotl0+p0v6xP7X4PoMx4Frvoi
0nZZgcu6b5et6OUlKZca8Mzhp1NJM4EZ9HZi/dX+TuKUEBB4byoXsq8IvQZCiOUk
FF57odfQE6a1hTQWez5slfWtLyDW6qw3fA==
-----END CERTIFICATE-----
Generated at Thu Mar 12 06:41:03 2026 by rpki-client