
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/63cfb442-e4d5-3cf8-a15b-9742ca5f7b5f.roa
File: 63cfb442-e4d5-3cf8-a15b-9742ca5f7b5f.roa (raw, json)
Hash identifier: yH3CIeV9zcSb28wRZdaAD75/lrMPBMcwYgqrc6wiAiE=
Subject key identifier: 71:63:88:71:B5:C4:36:A7:0E:39:DD:EF:6F:B5:9D:AD:17:A8:FD:8A
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584D143D5874ED8489FBA3E705C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/63cfb442-e4d5-3cf8-a15b-9742ca5f7b5f.roa
Signing time: Fri 06 Mar 2026 14:00:40 +0000
ROA not before: Fri 06 Mar 2026 14:00:40 +0000
ROA not after: Thu 04 Jun 2026 13:00:40 +0000
asID: 30036
IP address blocks: 2604:2e87:fc00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 13 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:14:3d:58:74:ed:84:89:fb:a3:e7:05:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Mar 6 14:00:40 2026 GMT
Not After : Jun 4 13:00:40 2026 GMT
Subject: CN=097cabe6-dbec-45ef-9ed3-707cce45726c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cf:24:50:c3:c3:76:d1:6e:68:af:91:aa:0b:
0b:1e:56:c2:14:a3:18:1b:52:1d:4a:73:a7:94:37:
dd:e5:0b:46:f3:dd:c1:95:97:66:51:ac:31:cf:81:
01:50:24:33:b6:43:3d:85:4c:e9:06:1f:da:e8:c4:
63:18:28:7c:19:7e:87:ac:1b:90:e8:b0:fe:56:2b:
e3:0a:ae:a8:ba:94:9f:90:07:3c:ad:80:bd:05:81:
ed:7c:69:78:44:99:de:ba:df:4b:4b:6e:d8:cf:71:
a3:8d:bb:b1:d5:af:e6:9a:3e:38:51:59:3a:8d:8e:
b2:d1:e4:db:ca:a0:35:cc:92:72:49:8e:a1:39:cd:
7e:db:dd:7e:f7:8b:75:a8:c8:1d:f6:80:4b:4b:eb:
f9:da:e2:31:16:f9:6b:e5:61:0a:0e:6c:29:b5:e6:
20:29:16:23:7c:28:45:65:23:f5:26:50:a5:b2:da:
bb:9c:52:fe:76:49:b5:e6:ef:75:94:7c:67:36:85:
35:64:93:94:96:4d:97:f4:3e:9e:fc:6f:9b:f7:83:
46:b0:aa:06:1d:d9:f7:fe:4b:8d:67:e4:ac:84:f3:
c6:78:c6:b5:0c:9e:2d:d7:bd:7b:28:b8:73:95:92:
56:04:51:e0:b2:65:2f:8a:ee:88:c2:2f:48:b3:79:
13:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:63:88:71:B5:C4:36:A7:0E:39:DD:EF:6F:B5:9D:AD:17:A8:FD:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/63cfb442-e4d5-3cf8-a15b-9742ca5f7b5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e87:fc00::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:3a:03:f5:c4:41:dd:79:82:71:f8:e0:dd:8f:3e:db:e0:e1:
ad:ae:78:75:76:7a:0a:4a:e2:ef:d9:57:88:bc:12:11:56:2e:
8f:35:4b:2b:fd:43:75:63:26:73:e4:8c:45:5f:36:a6:dd:c5:
db:ef:f7:55:c3:45:2f:f9:be:7b:76:e5:2c:7f:67:70:f9:fb:
71:1e:0a:0c:f5:37:54:d0:89:c7:ef:90:c9:a3:e5:da:aa:d9:
c3:bc:56:ed:d3:ec:6e:48:06:52:04:7b:a3:61:0a:0e:1b:ef:
d8:25:1c:24:b5:4d:44:53:1e:f9:ac:29:19:73:25:ce:ef:74:
5b:c0:3f:2a:2f:a4:68:f2:1a:d2:b2:7d:e4:5a:ac:e5:15:0b:
f8:53:29:a3:cd:34:24:10:32:fa:35:4d:f3:be:ed:08:5e:fb:
fb:b5:54:73:48:a0:41:8e:5b:c1:28:00:10:19:60:04:2b:43:
f7:b3:6d:33:03:56:c3:db:73:64:b7:c6:86:6b:7c:d3:e5:33:
64:8a:f1:72:f6:17:c2:a7:6a:19:8b:aa:38:12:c8:d1:6f:22:
e9:c2:f6:fc:fb:c0:bf:69:ca:6d:7f:12:26:24:4e:dd:bf:74:
b0:d0:d3:eb:ba:31:db:c1:70:0b:55:11:98:b2:4c:1a:ec:09:
7c:ca:09:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 06:35:07 2026 by rpki-client