
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/24d66b91-511e-326a-8078-7ea7d3a8534b.roa
File: 24d66b91-511e-326a-8078-7ea7d3a8534b.roa (raw, json)
Hash identifier: bNKZZlxqDmbsFU/0SK5SuZJlCgdR23gcNw6KE6nd46A=
Subject key identifier: E4:FD:80:E2:52:EB:8A:A1:8D:C4:E8:D4:3C:6A:B3:35:D7:30:72:F1
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584D2379EF6E3A5C0E8D45C34E80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/24d66b91-511e-326a-8078-7ea7d3a8534b.roa
Signing time: Thu 12 Mar 2026 01:00:32 +0000
ROA not before: Thu 12 Mar 2026 01:00:32 +0000
ROA not after: Wed 10 Jun 2026 01:00:32 +0000
asID: 30036
IP address blocks: 2604:2e8c:d800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 13 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:23:79:ef:6e:3a:5c:0e:8d:45:c3:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Mar 12 01:00:32 2026 GMT
Not After : Jun 10 01:00:32 2026 GMT
Subject: CN=e1a1329e-2215-4b79-9f63-2d33284ed889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a7:ee:f5:f1:74:bf:1b:50:93:d3:c6:26:0e:
b9:0e:c5:5a:82:05:dc:a1:70:27:51:91:32:8e:2c:
04:b1:de:19:33:61:5e:80:73:27:bb:9a:f5:a9:ac:
cf:74:b6:35:84:59:30:ec:e7:bf:e0:3f:d7:f0:33:
ac:5b:93:ed:f3:f3:cb:69:3b:11:cc:61:39:2a:f0:
98:85:c2:86:59:84:41:15:6a:51:3d:5c:22:79:1f:
00:77:a3:3c:af:4d:96:4a:4d:9e:99:72:86:9c:8a:
df:46:91:7c:5a:3b:1e:16:01:eb:90:0d:24:b8:5d:
cd:5b:05:4a:e9:27:39:c9:3d:6b:75:5f:e3:9f:6a:
97:08:5a:2f:6c:59:1a:0c:81:09:61:62:6c:50:1f:
1e:09:f7:a0:51:d6:20:ec:e9:0c:c6:1c:26:de:66:
17:ba:03:36:b4:1b:60:13:54:bc:89:5f:98:a1:2f:
cc:c1:bc:68:e8:dc:c5:89:9d:28:b5:61:8d:b1:10:
59:df:cb:c8:7c:3d:6e:8f:28:7d:e5:e1:02:d8:d6:
68:78:d1:0c:20:c2:28:3d:5e:fb:5a:01:00:a8:03:
f1:ca:7b:24:17:36:61:c5:03:05:81:13:60:42:4a:
ea:f4:30:6f:dd:35:96:82:b7:e9:8a:27:30:f1:29:
b3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:FD:80:E2:52:EB:8A:A1:8D:C4:E8:D4:3C:6A:B3:35:D7:30:72:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/24d66b91-511e-326a-8078-7ea7d3a8534b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8c:d800::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:93:ba:a6:40:0c:bf:b1:cf:96:06:ad:8f:43:44:92:8f:6d:
bb:14:b2:81:aa:a1:e7:db:1f:24:9d:f8:f2:de:11:8b:4c:ad:
09:84:87:59:43:8f:ee:26:a8:0c:7a:5c:93:3f:de:af:59:7a:
1e:5f:a1:d1:2a:99:c1:61:ad:7a:29:2d:fb:d9:ce:d2:6a:37:
49:63:f4:66:a1:67:cd:d7:93:78:3c:73:91:ae:b2:33:87:9c:
5c:73:b2:55:3d:d4:f5:3d:be:18:39:bc:2a:a7:61:fd:36:3d:
6b:9c:b4:df:6a:07:c9:74:a5:ff:48:39:69:27:8f:b1:c1:a2:
ba:e2:0d:af:05:3b:02:5b:95:27:12:6c:f0:e0:07:4e:38:73:
3a:ff:d9:0a:af:5b:84:d1:a0:1c:aa:8b:98:f6:6a:45:f4:fd:
40:f8:5c:ab:e7:1b:c3:7d:ad:c5:54:27:0f:2d:ca:36:03:6f:
6b:66:a0:4f:10:8f:92:95:73:2f:e7:9e:91:cc:9a:1d:61:e5:
cc:88:14:6e:c9:ec:a1:2b:4f:cf:e0:95:3a:3b:b4:59:f9:a9:
5f:a8:27:de:96:58:cb:78:c1:a7:51:03:18:3b:bd:df:e6:8f:
9b:24:22:7a:01:4f:68:d9:83:cb:ff:72:d6:9a:7a:d0:3a:8b:
a9:95:4b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 06:37:18 2026 by rpki-client