
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/847c6a5b-2a1a-3c49-b281-47a347efa545.roa
File: 847c6a5b-2a1a-3c49-b281-47a347efa545.roa (raw, json)
Hash identifier: dorZYRWpKYNOYipbErklAizgJakGDH4LnW1OaEKftOI=
Subject key identifier: 56:E7:28:29:6B:3B:B9:5F:F7:EB:68:2F:CA:D9:1F:F5:3C:D4:1C:8B
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584EA7904992FC08F1CE815F56C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/847c6a5b-2a1a-3c49-b281-47a347efa545.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 397202
IP address blocks: 2620:74:20::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 20 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:90:49:92:fc:08:f1:ce:81:5f:56:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=c8a058be-99a5-48ef-b9ef-989b2611878b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d0:86:5f:30:a2:f4:17:bc:92:cd:c3:20:d8:
ee:8d:51:15:8c:0c:a3:a7:6c:35:0a:0a:44:80:3e:
d1:fe:01:b9:09:4b:33:29:00:40:c7:70:48:94:04:
99:45:6c:0e:56:bb:7b:a6:f1:f0:ca:04:5c:8d:ba:
3a:67:00:24:d5:bb:7c:45:c9:f0:cd:e1:3f:d8:6f:
51:d8:a0:fd:67:5b:37:1d:c5:5d:2c:e7:93:8d:8a:
5c:10:4e:8f:05:42:05:7a:0c:80:14:75:2e:66:e6:
5e:88:3d:cc:9a:29:4a:a1:25:bf:f1:2e:17:75:f1:
83:c6:4d:fc:ef:f7:67:42:08:c4:7d:e5:0d:db:ed:
ad:7d:9e:14:99:ff:76:64:32:49:e5:08:58:81:06:
57:6c:e8:83:8f:06:fb:24:ce:e0:05:36:57:b7:a4:
0e:80:ed:eb:6d:e1:93:80:90:ca:a6:06:20:1c:cb:
09:6a:5e:bd:10:2c:6c:4d:77:fa:bb:20:0b:5f:dc:
43:cc:8f:a1:58:a0:21:e1:d5:ea:4e:bb:78:22:7d:
66:b2:2f:81:74:3e:e4:20:a9:3e:2b:f9:e2:ca:36:
de:d4:c0:68:59:8c:54:a8:00:2a:30:20:af:d3:92:
c9:ab:f6:c4:f2:82:f1:67:9b:10:fc:3f:10:01:63:
02:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E7:28:29:6B:3B:B9:5F:F7:EB:68:2F:CA:D9:1F:F5:3C:D4:1C:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/847c6a5b-2a1a-3c49-b281-47a347efa545.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:20::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:e8:d0:b4:0e:62:3a:ed:3f:d4:3c:cb:ca:af:94:4d:dc:3f:
73:c7:6b:23:02:a9:9d:ba:4e:fb:ed:aa:7f:d6:32:09:88:ad:
3f:b4:6e:c0:26:c2:0f:8e:b9:02:3c:3c:76:84:8a:3b:37:6c:
74:e0:4f:07:d5:1c:71:b4:eb:55:d2:94:d0:98:65:fc:73:ca:
21:f5:31:9e:94:a9:53:2d:92:31:85:76:59:78:73:9e:8c:a0:
52:78:e6:23:12:26:99:a1:c4:8d:eb:78:a1:2d:82:96:81:a7:
c3:df:e5:ed:b3:53:0e:a9:d9:69:fd:77:5e:de:c1:52:dc:84:
65:ee:a3:ec:be:7f:8d:32:a5:9c:eb:63:35:ad:00:ce:b6:25:
80:04:8e:a8:27:25:ad:11:a3:87:1e:21:7b:bd:d4:08:85:e8:
db:1f:54:aa:4b:99:82:93:51:5a:43:c4:99:20:a1:b1:20:76:
b5:3b:d3:ba:1e:25:4b:c3:9d:4d:b8:01:6c:30:ef:78:27:66:
42:3d:42:15:6a:91:4e:9a:f3:9e:8b:f5:1f:61:88:ca:c0:ad:
25:1e:62:06:25:d6:0e:d6:35:d8:dd:cb:a2:77:bd:ef:a2:3f:
f5:17:6b:e4:36:e7:ac:34:fd:65:1c:fa:60:88:2a:56:9b:5e:
94:42:cf:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:55:36 2026 by rpki-client