
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/22e5f437-9578-3c3e-918a-b8c8e8331161.roa
File: 22e5f437-9578-3c3e-918a-b8c8e8331161.roa (raw, json)
Hash identifier: NBABNBMFbdn5BJbU26n90KfYQ2L/qulRRzxe09H4uLo=
Subject key identifier: 33:38:B1:F9:40:E6:A7:2A:1F:7F:70:F4:ED:0F:A3:70:D1:10:17:74
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584EB57C503890EF0B3759B25220
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/22e5f437-9578-3c3e-918a-b8c8e8331161.roa
Signing time: Mon 03 Aug 2026 01:00:11 +0000
ROA not before: Mon 03 Aug 2026 01:00:11 +0000
ROA not after: Sun 01 Nov 2026 01:00:11 +0000
asID: 36626
IP address blocks: 2620:74:2a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 20 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b5:7c:50:38:90:ef:0b:37:59:b2:52:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Aug 3 01:00:11 2026 GMT
Not After : Nov 1 01:00:11 2026 GMT
Subject: CN=5cf69c1f-d4b2-4b51-992f-1ae195ecae99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:15:04:1e:98:0d:18:bb:04:c8:40:57:11:24:
3b:bf:31:c0:e2:c6:5e:fa:a5:06:e7:07:aa:d5:63:
8d:8c:b1:fc:2f:a3:9c:2f:d5:35:d6:db:29:29:c9:
26:c0:85:e2:90:82:dc:13:80:5f:6e:1a:c6:ea:3b:
24:8d:36:b7:20:17:b8:12:04:47:4e:05:4c:b3:43:
ec:e8:c5:c8:9f:e7:cf:56:e9:6e:9b:38:9d:0f:43:
54:fe:82:14:7a:99:54:2b:ad:ab:be:5a:2f:7b:a7:
4e:69:4f:0f:da:5f:8f:52:77:f5:4e:c2:6b:30:f4:
5a:3b:53:12:80:b4:2f:2a:94:86:32:dc:dd:8f:be:
e7:8a:4b:a9:7b:19:3e:d8:f2:6c:57:8a:9a:87:1f:
13:93:c3:11:8b:ac:3f:05:69:32:84:fb:bf:6a:57:
9d:89:64:e0:b8:20:0f:90:e8:b6:5c:65:59:98:d8:
4e:7d:2c:e6:02:f4:e0:e5:ca:af:09:75:63:87:0e:
4f:6a:5e:7a:7b:c6:0f:cc:e5:88:ae:dc:1f:c7:47:
f7:eb:98:1c:f6:24:ff:c2:a5:d7:50:d3:ae:37:eb:
ad:ae:47:68:99:5d:18:d5:b9:dd:b0:c8:22:29:e6:
ef:58:39:b0:c0:92:39:e9:79:d8:8c:18:fe:01:99:
38:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:38:B1:F9:40:E6:A7:2A:1F:7F:70:F4:ED:0F:A3:70:D1:10:17:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/22e5f437-9578-3c3e-918a-b8c8e8331161.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:f2:ff:6f:98:1e:1e:6e:58:8c:fd:12:1d:66:9a:81:e9:13:
ed:c2:b6:d8:ad:0b:e6:1f:46:9b:d2:37:aa:93:84:9d:af:d5:
df:f3:73:8b:b3:60:ca:ba:73:2e:8b:0b:36:c8:0c:bb:7a:8b:
bd:a2:b7:e0:7d:9b:ba:2f:a6:2c:84:bf:74:81:60:fa:4b:4f:
7a:bf:3a:7b:0d:e9:46:36:9e:f5:fe:26:35:4b:d6:e5:ee:88:
8c:a7:74:56:07:66:cd:f7:30:a3:43:a6:49:ce:99:06:ae:8c:
65:6f:6b:38:93:15:b1:7f:87:71:8b:5e:60:e1:00:df:30:7f:
5e:52:34:03:3a:32:e7:b7:43:e2:67:a7:64:a3:29:18:72:04:
f5:9c:94:08:e0:4f:41:ac:8e:75:f0:5a:ac:9d:fb:5e:74:ff:
26:08:15:62:ea:95:bf:42:62:62:75:9c:a1:09:45:9d:75:8c:
c1:c5:f0:b5:d6:45:d7:74:2b:52:51:d4:7b:ba:75:50:91:de:
a6:9b:8a:e9:66:04:a8:16:fa:c3:8f:60:1f:44:ad:ab:2e:5e:
f8:31:65:bb:84:5d:10:15:89:36:5f:3d:00:85:a9:b9:ac:a4:
2b:82:0a:b7:75:7f:f6:9f:5e:e8:97:b0:5f:dc:14:8d:2c:8a:
68:77:b3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:55:50 2026 by rpki-client