
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/86339f38-d42c-3ac9-8b39-3720c40bbbc9.roa
File: 86339f38-d42c-3ac9-8b39-3720c40bbbc9.roa (raw, json)
Hash identifier: ytbiQBEq0A4ldUdbuxwRj20xKbYMglItj2x/M4WO/bw=
Subject key identifier: 6A:53:31:F4:97:8C:C7:3E:87:98:9C:C9:7C:5C:02:E0:CD:74:7B:54
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584F698D8F3C10A984688BF28800
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/86339f38-d42c-3ac9-8b39-3720c40bbbc9.roa
Signing time: Tue 06 Oct 2026 13:00:13 +0000
ROA not before: Tue 06 Oct 2026 13:00:13 +0000
ROA not after: Mon 04 Jan 2027 14:00:13 +0000
asID: 396606
IP address blocks: 2620:74:2a::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 07 Oct 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:69:8d:8f:3c:10:a9:84:68:8b:f2:88:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Oct 6 13:00:13 2026 GMT
Not After : Jan 4 14:00:13 2027 GMT
Subject: CN=51347720-a5a1-4a0c-a103-464981e32705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:12:36:c6:e4:7b:50:09:c6:bb:ee:6c:75:1e:
f4:9b:9d:50:92:8a:25:3e:63:d0:36:37:49:19:bc:
ee:82:e0:5b:8c:26:7f:4a:fa:7f:35:9d:12:59:57:
a0:e0:b3:38:35:13:29:06:e8:e6:5b:21:25:bc:f0:
65:ff:69:06:ee:6d:fe:e0:8a:4f:ad:5b:d4:ca:32:
6e:03:59:4f:47:b7:ec:ce:e0:84:bf:3e:65:98:18:
48:53:62:42:7f:fb:89:83:7e:e0:10:08:5e:88:d3:
af:9e:47:b0:57:47:0f:0a:2c:18:70:e1:20:63:c2:
53:4d:bf:9c:9e:af:f6:0e:c9:92:7e:ac:ea:8a:66:
b7:ad:91:f3:84:c5:e1:45:c8:88:71:a9:c0:4a:f6:
64:85:31:29:2a:c4:84:36:ba:06:18:04:43:e9:fb:
be:e8:8a:02:d1:69:da:b4:3d:7d:26:f7:59:81:13:
bf:5c:6b:b2:06:2c:7f:5a:60:e2:10:90:27:a4:40:
91:30:2e:30:30:00:d6:d7:d8:06:dd:f7:e4:23:00:
31:10:b1:06:49:2d:7e:58:11:e9:25:6e:e6:51:1f:
c7:1f:f6:54:8d:91:f6:c8:6d:de:0d:89:00:2a:47:
15:bb:54:ab:e0:75:98:66:5d:b5:f1:00:ee:25:cd:
ef:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:53:31:F4:97:8C:C7:3E:87:98:9C:C9:7C:5C:02:E0:CD:74:7B:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/86339f38-d42c-3ac9-8b39-3720c40bbbc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2a:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:5e:b0:6b:fd:31:54:cb:6a:fb:44:8f:0d:ab:65:be:13:53:
d8:0c:1b:06:b2:65:c8:f7:03:07:4d:2e:75:a4:90:48:4c:15:
1b:e9:aa:17:61:a8:d2:35:8d:f4:1d:7c:c9:08:13:2d:a5:c5:
4e:80:9e:96:c6:47:2c:93:64:67:d6:a2:7a:13:7f:96:b8:32:
dd:19:3d:53:76:91:46:c4:5b:59:7c:5c:82:7c:3c:0e:d6:e1:
a2:1e:5d:3b:b1:84:cb:a0:6b:14:5d:d8:f8:21:d7:71:f6:dc:
ce:cd:71:93:1f:9d:cc:a8:9e:6a:e4:65:07:18:9f:a7:92:f1:
31:75:c7:36:a3:fc:4c:6e:3c:7b:ce:46:14:6f:2b:12:98:b1:
16:12:eb:e0:a9:19:60:ea:bc:5b:67:90:2a:2b:2b:64:46:db:
03:1c:40:33:e4:b9:ed:c8:19:fd:57:4e:59:cd:16:1d:61:ad:
7e:35:3d:e6:6b:cd:40:00:9f:bb:09:1c:2b:95:34:35:4d:f1:
11:89:2e:c7:c5:a8:bf:70:6e:71:90:db:7b:00:38:c0:20:95:
07:ac:85:cb:96:fc:f0:85:08:96:4d:d5:65:31:e4:1d:87:c2:
fb:91:32:34:f9:6c:61:5f:5d:e8:cd:62:2f:00:20:fb:c9:50:
bb:ac:4f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:15:35 2026 by rpki-client