
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/396a69fa-b146-38c5-8d03-f7dd0fb98f0e.roa
File: 396a69fa-b146-38c5-8d03-f7dd0fb98f0e.roa (raw, json)
Hash identifier: UXsEzkAnZVbP04ebeYAwpUkdGwqlCNSUs8G53znr3b4=
Subject key identifier: 28:81:DD:91:42:82:CD:38:1B:3E:0C:DB:FC:AF:8C:35:2E:94:D0:36
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584EA78857319A039F13EAFCD600
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/396a69fa-b146-38c5-8d03-f7dd0fb98f0e.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 40647
IP address blocks: 2620:74:2c::31/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 20 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:88:57:31:9a:03:9f:13:ea:fc:d6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=c9f8c71b-c52b-40f6-8b10-a8ca335a9694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:31:b2:de:b8:a8:2e:8c:ea:ff:c8:b0:be:de:
c7:77:de:6a:58:96:0f:a5:8a:8f:7f:0e:38:4f:ff:
65:bc:ff:0e:f7:8f:85:e5:4c:1a:89:1f:ab:0a:5a:
00:5d:6e:c4:ea:6e:c8:f0:ef:79:7d:e9:4e:f1:60:
ef:e6:fb:70:b2:c3:86:89:75:5f:23:c1:99:45:81:
26:c7:9f:d0:d0:6a:1f:51:1c:8e:4a:b4:b6:1d:89:
1b:dd:86:04:fd:57:5c:74:e0:6b:50:9c:5b:bf:7d:
fe:83:ab:f1:5b:f0:1d:26:ea:90:2b:a8:3c:32:9f:
ae:0d:b9:da:5d:7d:df:7c:94:9d:5b:85:e4:db:b2:
5f:58:fd:36:ad:25:45:84:d5:7c:cb:05:8f:fe:6e:
b8:b0:f6:d2:d9:ab:77:bc:e4:e1:ee:38:92:1c:36:
9b:46:d1:25:b4:a0:36:4a:b6:33:17:c9:7b:dd:f7:
9e:1d:c0:4e:fa:03:82:91:36:8d:cf:9f:d5:13:c5:
a4:61:19:6a:36:17:a8:9f:88:a5:b2:92:11:c5:cd:
b6:74:00:74:95:b3:9a:43:28:c0:e3:3a:3e:5b:60:
60:3f:c8:04:d3:9f:2a:16:29:36:1f:e9:92:18:61:
2b:90:d1:1a:7d:70:c2:8e:7b:8a:5a:d2:a7:f3:d8:
56:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:81:DD:91:42:82:CD:38:1B:3E:0C:DB:FC:AF:8C:35:2E:94:D0:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/396a69fa-b146-38c5-8d03-f7dd0fb98f0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2c:0:0:0:0:31/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:b1:e5:d9:f2:5a:6c:fd:39:ca:98:ea:06:1f:8c:f8:8a:bd:
52:85:0e:c2:6f:48:3b:ad:47:36:d8:f5:9f:75:af:08:4b:82:
2a:6b:73:c7:16:5a:ac:b2:26:48:9e:61:96:61:85:7d:68:a4:
fe:a5:f8:e6:c9:c0:bb:17:a7:31:d7:e4:a8:2b:36:7b:40:33:
76:9f:22:bf:1e:36:ea:fd:c6:9e:8c:dd:0b:bc:da:f8:39:ac:
6e:e3:d9:59:8d:df:9a:a1:ae:40:3e:22:d6:8d:e9:91:24:13:
91:b0:9a:df:27:83:9c:8a:99:22:35:50:94:52:3c:00:32:6f:
b5:4b:4d:85:94:e3:59:9f:2c:54:ec:75:bd:f1:40:70:5d:3c:
60:c7:15:ff:fc:4e:12:46:9a:56:2a:2e:2b:dd:1f:16:d4:cd:
4b:c8:74:ac:4b:57:34:55:48:5f:73:27:e1:9d:5c:fb:6d:f5:
80:03:35:9f:ae:1c:a9:87:48:5e:3c:89:7a:3c:da:01:ac:fc:
2b:ea:07:43:75:fd:9d:42:ae:ff:82:bf:ad:a7:8c:35:f2:71:
68:f1:cf:2e:6f:0f:58:3d:42:fd:39:76:80:8f:c0:99:c4:0b:
36:76:9e:d1:8b:5d:41:89:d0:65:30:85:89:6d:00:a8:89:b9:
10:3c:60:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:55:29 2026 by rpki-client