
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5b9f7499-d1bd-3a96-aa74-770336257496.roa
File: 5b9f7499-d1bd-3a96-aa74-770336257496.roa (raw, json)
Hash identifier: AzS6ALQtNdVehXGQ1jgoqxxvc44Eg9iBJ1UN14+CHDY=
Subject key identifier: 2A:33:E6:08:12:C0:B1:FB:58:FD:0A:BE:66:20:89:A9:F6:4F:D5:A8
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584EA79052DF5CAD438AC5E22B80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5b9f7499-d1bd-3a96-aa74-770336257496.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 396540
IP address blocks: 2620:74:20::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 20 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:90:52:df:5c:ad:43:8a:c5:e2:2b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=c911f4a3-6fd4-4067-ab76-96331a4d7ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:90:71:6b:f7:8a:b4:38:4a:30:71:75:74:b5:
d8:55:80:69:ef:c7:b5:c5:cc:b7:4d:af:40:73:a1:
4b:b0:c5:52:b2:a5:42:06:15:f4:f8:35:d1:6a:c0:
9c:32:97:a1:c4:ac:6d:16:9f:1e:0d:b6:8d:91:84:
85:24:2e:91:66:6a:26:9f:5b:60:84:ad:28:d0:8b:
25:65:8b:0a:25:59:2b:fc:e4:04:72:33:99:c6:a8:
0d:6b:ac:4b:a9:b1:3e:b4:81:6a:09:bb:34:97:9f:
67:42:76:bd:70:af:71:86:44:00:f7:56:b5:f7:04:
1c:4a:5f:ff:3a:9a:cb:72:09:c3:bb:1f:c8:56:14:
ba:4b:8d:80:c6:35:8b:01:15:c9:e9:af:59:99:63:
97:17:44:85:af:6c:db:23:0d:55:92:5c:af:88:eb:
fd:ab:62:7d:ac:b8:e6:08:72:59:76:f1:43:de:1c:
7b:86:7d:60:7e:52:5b:9b:54:3f:ff:73:9b:10:fa:
81:a2:be:9c:43:cf:97:40:a5:86:ab:0f:32:f3:f7:
bd:83:ba:54:dd:c8:6f:e6:72:2b:8c:2f:ff:3e:2e:
d9:1f:40:cb:35:06:41:0c:f3:2b:d0:6c:7d:79:5f:
83:45:71:d3:ad:74:68:c4:2d:f9:0f:e8:2d:c9:74:
89:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:33:E6:08:12:C0:B1:FB:58:FD:0A:BE:66:20:89:A9:F6:4F:D5:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5b9f7499-d1bd-3a96-aa74-770336257496.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:20::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:95:2a:f7:ff:6e:4c:3c:3e:96:87:cf:8f:9e:a0:17:05:e9:
f3:93:14:99:5c:47:ae:f2:21:09:53:77:bb:58:4b:d3:a4:e6:
4d:0e:a6:a9:1d:63:13:12:f8:42:9a:ff:a2:92:f6:98:6c:42:
cf:2a:67:66:37:34:a2:78:ef:48:af:c1:ca:9f:b7:15:81:2f:
a7:bb:41:64:f7:1e:64:6a:6c:a9:42:a2:01:3d:3c:47:08:41:
86:9c:bb:55:f8:a9:8d:bf:e1:e4:37:fb:f1:31:71:29:55:66:
04:b5:5a:11:7d:b1:84:13:9b:a9:08:07:70:5e:be:01:d1:53:
83:7f:47:5f:43:46:43:46:0e:99:a3:8c:44:db:63:b5:1c:b0:
fb:af:a3:5d:17:f0:4d:72:35:7a:6f:64:3d:4c:fa:80:a7:2f:
d7:96:41:ca:f1:63:c8:fb:9a:a3:3a:a6:63:4a:0d:78:bb:f2:
ab:b8:70:95:d5:25:f6:fa:dc:f9:ad:13:9c:41:83:6d:b1:c9:
01:22:97:0a:1c:97:ff:aa:6c:9f:04:48:dc:40:09:3f:9e:a6:
37:92:63:92:6d:7c:99:b6:21:10:82:50:85:73:1b:94:15:0e:
62:54:e7:30:71:79:6d:8c:e6:15:2f:4a:c1:a4:52:b1:77:17:
79:3f:3a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:56:04 2026 by rpki-client