
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9f6d54b0-a820-3d85-b3fb-8b7e3f8deb60.roa
File: 9f6d54b0-a820-3d85-b3fb-8b7e3f8deb60.roa (raw, json)
Hash identifier: 2aBfgqeW3n5G47+7iYsnxNCqX/zQNpB9+ZyIQxbIorw=
Subject key identifier: 40:0E:39:23:8C:5C:CB:D5:EE:5D:B1:32:4F:66:C6:5F:C3:57:8D:54
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584EB2B1D8250B7CEFD00E6CEA00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9f6d54b0-a820-3d85-b3fb-8b7e3f8deb60.roa
Signing time: Sun 02 Aug 2026 01:00:11 +0000
ROA not before: Sun 02 Aug 2026 01:00:11 +0000
ROA not after: Sat 31 Oct 2026 01:00:11 +0000
asID: 396563
IP address blocks: 2620:74:2b::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 20 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b2:b1:d8:25:0b:7c:ef:d0:0e:6c:ea:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Aug 2 01:00:11 2026 GMT
Not After : Oct 31 01:00:11 2026 GMT
Subject: CN=2af5877d-ff5d-4f4e-a20f-53e04a413932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ea:99:71:c5:e8:8e:16:91:e7:08:64:64:91:
48:b9:16:bf:03:b3:cd:b4:4d:ce:5e:f2:da:b2:d3:
8f:a4:55:26:c8:4e:fe:17:1f:4a:9f:17:7b:f1:fa:
ef:27:fb:f4:5d:e2:c5:92:d6:0a:4a:e5:c2:b2:d1:
ae:90:26:4c:67:42:62:da:45:1a:51:a4:54:09:0f:
95:b2:40:0c:26:68:98:dc:d8:31:74:2b:26:82:e3:
bf:0b:9f:78:17:69:e3:29:7e:11:4d:ad:1e:25:01:
e8:bf:4f:cf:9c:24:77:aa:6f:b9:41:08:18:e0:31:
5c:51:30:17:65:4f:49:26:68:48:75:eb:c9:0c:58:
06:6c:56:71:1b:26:de:31:a7:ae:b1:90:7a:bc:94:
d4:da:5f:f6:c5:c2:99:27:90:22:d8:fb:2c:14:f9:
01:dd:de:1e:4d:c4:58:61:ad:cc:00:70:17:47:71:
e4:50:17:25:e5:a4:ed:6f:d7:31:87:93:55:13:49:
b4:83:cc:79:61:1f:99:f5:5b:56:96:e5:fd:7a:c7:
a1:26:ac:ce:bb:9e:57:d0:4a:fd:7f:e7:5b:10:ff:
40:87:c3:ce:cd:91:40:cb:88:e6:87:a1:68:b6:99:
91:49:4d:2a:7a:77:bd:18:07:0d:ca:a2:d6:69:ef:
f3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0E:39:23:8C:5C:CB:D5:EE:5D:B1:32:4F:66:C6:5F:C3:57:8D:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9f6d54b0-a820-3d85-b3fb-8b7e3f8deb60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2b:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:af:5b:69:d7:90:3f:d0:ff:66:33:05:6d:65:19:c1:6e:ff:
b0:80:4f:b5:3b:5f:03:e8:7b:c5:b5:a9:68:39:fd:18:f9:01:
4b:f3:99:3c:35:3e:de:6d:37:cf:b7:8f:d5:c8:c0:7a:ee:5d:
1d:c5:21:6f:21:a3:bb:53:ad:72:64:9a:66:8e:7a:e2:7e:9e:
b4:f4:7f:d4:a9:71:32:1e:75:5f:1b:9c:c1:b4:d1:c0:f4:1b:
28:88:db:3e:42:dd:4e:9b:b0:fb:b1:40:5e:0b:70:6d:03:95:
46:d5:c6:c1:63:7f:11:c9:e2:c8:a9:15:ca:50:3c:44:da:fb:
9a:a8:9a:92:a4:a5:c6:ae:d4:8d:2b:3b:c9:92:d6:be:e8:cb:
b8:a6:44:fb:3a:45:62:31:f0:d9:53:b3:45:48:5d:a0:ec:51:
b5:a8:81:0d:9b:e1:ab:8b:64:5c:72:35:9a:11:8d:6b:97:d3:
2e:e0:77:aa:1f:57:26:18:ad:2a:4f:c7:66:6f:0c:98:77:9c:
81:e1:e3:ef:ad:da:6e:66:3c:db:63:6d:e1:3c:22:78:ed:c5:
32:3b:76:d3:27:e4:c3:5f:5d:34:77:5e:f8:54:30:a4:03:16:
9e:35:eb:b9:7c:12:67:76:97:b0:7c:7d:4b:ef:65:70:04:57:
92:fa:c2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:54:11 2026 by rpki-client