
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b4dbf80-d1e1-316f-b083-f085d9dad3ce.roa
File: 3b4dbf80-d1e1-316f-b083-f085d9dad3ce.roa (raw, json)
Hash identifier: UOlJXHaCQEbCZ7pNo+8G4qqXZXltE4tbPmHQlFLGIfc=
Subject key identifier: D9:4E:8E:81:20:B3:91:71:48:0A:15:2A:2D:CC:01:10:B3:14:89:ED
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584F549D8126BC7C8DBBB9F64680
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b4dbf80-d1e1-316f-b083-f085d9dad3ce.roa
Signing time: Tue 29 Sep 2026 01:00:12 +0000
ROA not before: Tue 29 Sep 2026 01:00:12 +0000
ROA not after: Mon 28 Dec 2026 02:00:12 +0000
asID: 396585
IP address blocks: 2620:74:2b::31/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 07 Oct 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:54:9d:81:26:bc:7c:8d:bb:b9:f6:46:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Sep 29 01:00:12 2026 GMT
Not After : Dec 28 02:00:12 2026 GMT
Subject: CN=3f439856-303e-4d70-a00a-71b5c877e00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b5:d6:c1:9d:85:4f:29:c3:96:45:06:ac:86:
76:b8:97:62:50:ce:2e:33:6f:52:59:51:5c:20:3a:
a9:87:d8:bf:73:35:92:29:c5:03:07:35:b6:7b:7b:
d4:2c:50:32:76:75:e8:47:54:82:99:86:99:cb:f9:
4f:18:30:39:00:de:81:ee:39:df:b0:80:18:12:d0:
39:8b:4c:08:86:5a:d3:86:00:37:20:8e:4c:80:de:
82:09:73:cd:6f:65:22:2e:31:f6:ca:f9:64:dd:a0:
f1:4b:69:56:47:1f:f0:e2:b1:9d:58:3f:9f:fb:b6:
95:fd:8a:8d:a9:71:78:94:f6:ab:13:70:f0:4c:34:
1e:04:25:b9:4b:e4:bb:1e:79:99:b1:46:45:5e:4f:
f6:67:20:eb:46:d7:5e:a0:1b:99:7c:ec:c8:bb:8b:
db:fc:d4:fb:53:af:5e:80:cc:3e:57:3a:4a:12:51:
63:fa:21:5f:be:e8:7d:5a:11:31:53:e5:13:81:b2:
36:3a:bb:6a:f8:ed:b3:ea:2f:d1:d4:85:8b:86:e8:
0a:c6:b4:99:d0:66:37:40:e1:55:4e:55:b7:9c:bd:
9a:7b:f5:e5:83:16:e7:38:0c:29:50:06:db:ea:f9:
0a:ae:ce:13:ba:7d:5f:53:e2:88:db:96:52:1b:cd:
59:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4E:8E:81:20:B3:91:71:48:0A:15:2A:2D:CC:01:10:B3:14:89:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b4dbf80-d1e1-316f-b083-f085d9dad3ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2b:0:0:0:0:31/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:73:dc:3f:5b:39:1d:c6:94:db:33:73:e0:6d:af:de:96:5e:
9d:fd:b8:8f:8d:17:23:cf:bb:72:34:62:83:b9:0a:fa:0f:ee:
d6:47:26:23:73:75:e3:d9:70:39:40:6f:69:a7:bc:21:46:c7:
a8:9c:09:43:fa:95:3a:c1:20:db:4e:58:53:a1:01:e4:5f:8b:
2a:40:fa:e2:42:59:ba:cc:16:d5:71:e0:aa:7e:67:2c:ef:4c:
76:7a:d2:95:60:14:c0:8d:82:ea:65:d3:07:cc:bf:90:d8:60:
79:b4:a5:c2:c9:1a:e4:60:d2:2e:6b:7f:49:7f:e5:3f:c0:47:
f3:6b:5a:f9:1a:31:09:d4:af:a5:50:0b:2c:27:70:91:65:f0:
1e:60:9e:97:4e:6a:95:90:a6:b6:c1:ff:e5:0c:82:89:d4:f2:
60:a8:20:eb:5d:61:d4:30:af:b2:5e:b6:8a:89:1b:8c:df:5d:
75:0c:ec:a1:c0:7a:57:25:a5:4c:10:21:dc:3c:d8:f1:e7:5a:
ac:03:70:6b:ee:3b:7b:7c:d4:11:b1:f6:a5:92:c6:72:22:2d:
06:c7:e2:d5:01:14:bf:1f:45:3f:28:b6:cb:08:b5:e2:e2:49:
c9:02:d4:30:1a:91:91:f7:52:4b:45:f4:24:2e:b8:34:19:3c:
ad:19:fd:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:03:09 2026 by rpki-client