
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3efc0e54-d79f-3d11-8871-bc00149b77b4.roa
File: 3efc0e54-d79f-3d11-8871-bc00149b77b4.roa (raw, json)
Hash identifier: mPngiuEAXT/cpHJ8dTqqotTvzk8NTB9bQELskegPrXI=
Subject key identifier: D5:54:83:94:5A:70:FE:B3:48:96:AB:AD:A3:DC:41:0A:45:BC:92:BE
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584E2D9F37D921311833913B3F00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3efc0e54-d79f-3d11-8871-bc00149b77b4.roa
Signing time: Mon 15 Jun 2026 09:00:12 +0000
ROA not before: Mon 15 Jun 2026 09:00:12 +0000
ROA not after: Sun 13 Sep 2026 09:00:12 +0000
asID: 7342
IP address blocks: 2620:74:a9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 29 Jun 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:2d:9f:37:d9:21:31:18:33:91:3b:3f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jun 15 09:00:12 2026 GMT
Not After : Sep 13 09:00:12 2026 GMT
Subject: CN=04b071d3-003e-4ba2-bd65-d53a1b5d2238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:57:56:3d:bf:0d:e4:ba:8e:e0:d0:62:19:13:
a9:da:c5:56:b4:b8:26:89:b9:15:52:7a:b1:e3:3f:
fc:59:0c:98:4c:b5:4a:c9:5f:d6:7b:3f:d7:b8:7f:
8d:68:f6:b7:da:fb:bb:c6:d1:f3:03:02:ff:dc:bc:
a8:e9:39:72:0c:24:e1:25:58:3b:08:52:fc:75:fa:
d7:3e:11:ee:fb:c7:27:a7:3a:10:56:d9:db:82:70:
7e:ed:83:ab:69:29:fe:87:cb:df:a4:65:29:19:ea:
6b:fb:30:29:2c:ab:43:b8:2a:cb:f4:45:68:cd:d1:
29:ee:55:28:dd:cc:92:e0:bc:35:9b:19:1a:43:64:
38:78:47:e9:d7:54:68:c4:e9:a4:56:92:9c:ea:6a:
53:b8:27:23:a8:cb:55:9e:5c:b6:3f:79:10:85:f4:
e3:0c:63:fb:c3:2e:41:c0:64:3d:4d:3b:6f:e0:3b:
f1:90:55:d9:1c:23:2d:a0:45:82:18:ae:41:71:ad:
cc:51:d0:24:a1:cc:4c:76:c0:02:68:32:d5:7e:39:
a7:2b:7c:72:77:04:16:1c:16:85:25:37:e9:5c:2c:
6a:ed:cd:d9:4c:a2:a4:c8:2c:c2:05:1c:c7:02:a7:
3d:67:22:a3:4f:46:9a:48:4b:7c:27:c6:e8:f1:5f:
ab:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:54:83:94:5A:70:FE:B3:48:96:AB:AD:A3:DC:41:0A:45:BC:92:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3efc0e54-d79f-3d11-8871-bc00149b77b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:a9::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:dd:3f:92:0e:43:d4:6c:fa:29:49:53:bf:7e:ce:44:7c:51:
6c:79:33:12:6b:62:11:40:78:80:cc:d6:92:1c:27:b0:21:aa:
29:19:89:ff:a3:d1:09:69:91:0f:d9:c4:e7:2f:68:13:1d:1b:
40:a0:8d:57:9e:db:07:71:f0:a4:d7:6d:78:fa:bd:4c:02:c1:
23:6b:07:ef:f4:65:62:e7:bb:3c:8c:4a:fe:90:cb:ee:0a:ca:
89:f4:85:86:97:19:85:0a:73:4b:71:07:7f:68:bd:1a:42:66:
b4:3b:6b:82:e1:19:67:35:04:b5:2f:5a:22:d2:7c:7c:ec:0e:
6d:fc:db:da:44:da:38:a7:e7:5d:32:60:bc:92:5d:35:fd:0d:
72:88:09:05:c1:54:3a:91:e3:cd:fd:83:f8:d7:e7:2d:30:10:
4f:54:c5:56:92:c6:92:bf:cc:7b:75:48:de:87:14:44:76:e5:
95:b5:03:24:6f:b0:25:01:e8:79:11:eb:12:ae:0f:a7:fe:34:
ef:3b:8b:b9:80:67:94:1b:7e:6b:c7:21:33:84:33:ff:66:02:
94:09:5a:df:e7:37:b6:d5:3b:52:a9:49:85:59:00:e7:b9:02:
bc:8a:44:7d:6d:9c:03:03:42:e6:b6:4b:31:97:1b:f8:5d:bd:
a4:03:a5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 17:18:53 2026 by rpki-client