
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5bd64e44-14a1-37d6-b31f-5c2397e53513.roa
File: 5bd64e44-14a1-37d6-b31f-5c2397e53513.roa (raw, json)
Hash identifier: QtlvnPDvPmuuZJ3+x90L/YWuVIsq9ptaNjrxwSrSs7g=
Subject key identifier: 55:9B:BD:C3:86:5A:E9:9F:B4:6A:97:E2:12:EC:22:47:B5:DA:CE:AA
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584EB2B1D99498350CCE95D3D500
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5bd64e44-14a1-37d6-b31f-5c2397e53513.roa
Signing time: Sun 02 Aug 2026 01:00:11 +0000
ROA not before: Sun 02 Aug 2026 01:00:11 +0000
ROA not after: Sat 31 Oct 2026 01:00:11 +0000
asID: 397199
IP address blocks: 2620:74:2b::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 20 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b2:b1:d9:94:98:35:0c:ce:95:d3:d5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Aug 2 01:00:11 2026 GMT
Not After : Oct 31 01:00:11 2026 GMT
Subject: CN=88a222aa-6dcc-4531-a5c6-fe320505efae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:41:e2:91:4f:c3:4f:76:fd:f4:d2:a1:96:0b:
40:af:49:97:fe:48:a5:de:26:af:a7:d1:b6:38:0d:
51:8f:cd:1c:8b:c1:af:ec:b8:82:42:6f:fc:d4:18:
d4:3c:5a:64:e1:0a:1d:31:5f:a5:60:6b:55:16:5e:
ff:30:74:89:c4:3f:ab:f3:71:7d:1d:f3:a0:db:85:
0c:0d:8c:21:11:03:62:1b:bc:bd:07:92:ad:3e:39:
60:58:63:ab:8a:23:eb:66:bd:65:d6:de:ac:23:50:
23:85:e2:10:27:89:dc:3f:38:87:a6:72:37:01:2e:
5f:c6:aa:64:79:61:81:b5:16:df:c9:31:4b:3a:3f:
83:b0:68:4f:82:57:bf:d0:d5:10:b5:02:78:bf:d5:
c5:85:48:80:d8:b9:f4:81:77:8f:09:0b:48:18:e5:
e4:2c:59:6b:ad:3f:9d:ca:81:2c:71:09:0d:16:26:
b1:51:7d:62:6d:54:77:1d:78:27:9c:10:73:6b:d4:
54:fa:e3:ec:ac:73:29:7f:a6:90:f3:5a:b3:cd:1d:
64:3b:da:fa:dd:44:88:0c:8e:0b:40:42:fc:63:d8:
33:bc:b1:65:0a:ad:08:31:51:e2:42:30:6a:aa:7b:
a0:4f:dc:f6:cc:f0:a3:71:9b:3b:74:3c:f9:12:11:
31:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:9B:BD:C3:86:5A:E9:9F:B4:6A:97:E2:12:EC:22:47:B5:DA:CE:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5bd64e44-14a1-37d6-b31f-5c2397e53513.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2b:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:b2:be:71:0c:a5:3a:55:b1:b1:ac:af:97:ea:6d:ef:a2:18:
75:0d:39:ab:d7:f2:0f:89:83:71:a4:4e:44:12:d4:b9:ae:39:
ad:ec:76:0b:45:b4:b4:fc:2d:77:5c:b2:ac:2a:19:e3:d4:28:
88:10:53:13:9f:10:03:ce:9c:0b:db:07:27:8e:34:8d:b0:a8:
e0:05:7d:31:10:e3:95:d5:4f:48:c8:51:20:77:b6:76:de:96:
74:c8:64:d0:27:53:ad:92:7e:78:f1:12:b4:44:c4:88:47:8a:
77:6b:8d:62:92:ed:95:c4:93:3a:95:1a:2a:03:25:2f:66:5f:
b3:51:55:6c:6f:60:fd:b8:94:40:4a:9d:37:7b:83:aa:df:a3:
3b:ef:bb:80:72:af:72:8a:7f:f4:b7:3f:5d:e3:c1:39:ed:d4:
81:85:28:fc:f7:0e:bf:60:be:b8:89:e0:b0:1e:7d:c6:ac:e2:
d8:7d:8d:ff:f2:73:d0:61:a7:64:f6:62:37:cd:54:2d:47:5f:
75:56:21:1c:85:50:5d:64:81:76:9b:5e:84:d9:f4:29:24:40:
a8:80:2e:9e:14:64:9c:1e:e4:69:08:45:8b:65:8c:db:fb:9d:
53:f6:12:29:bf:aa:18:b5:99:07:72:89:7d:24:19:7e:1e:e5:
ed:2c:ee:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:56:25 2026 by rpki-client