
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaa623aa-85d2-3ac3-a2b7-d15bddf9e8ea.roa
File: aaa623aa-85d2-3ac3-a2b7-d15bddf9e8ea.roa (raw, json)
Hash identifier: A6X/uRkjeb7ujlCh7mqVPW+qKt6JS4cHl0K4iAF1BlM=
Subject key identifier: 7F:53:AC:20:DD:09:F7:92:8D:D7:E1:08:8E:A9:A3:2A:15:B3:A4:C3
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584EB2B1DDD2F66EFCCDF71BFD00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaa623aa-85d2-3ac3-a2b7-d15bddf9e8ea.roa
Signing time: Sun 02 Aug 2026 01:00:11 +0000
ROA not before: Sun 02 Aug 2026 01:00:11 +0000
ROA not after: Sat 31 Oct 2026 01:00:11 +0000
asID: 396572
IP address blocks: 2620:74:2b::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 20 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b2:b1:dd:d2:f6:6e:fc:cd:f7:1b:fd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Aug 2 01:00:11 2026 GMT
Not After : Oct 31 01:00:11 2026 GMT
Subject: CN=0b6d51be-6dda-43a1-b24d-99ae7403766e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:73:af:60:b0:1b:79:0b:ca:85:99:5f:f4:19:
37:a1:51:91:51:96:0d:18:a9:26:1b:d2:6f:d1:46:
21:f7:d6:63:a7:59:78:b9:f7:1d:de:58:38:32:1f:
26:d7:91:32:1b:4c:f0:03:c4:78:e5:0d:a7:ce:cc:
59:16:6b:87:1b:2a:e4:40:58:96:39:09:c5:1c:fe:
35:e5:2e:15:9d:64:e6:a0:59:87:db:0b:24:7d:5e:
ae:4f:3a:da:3b:d2:cc:52:04:9e:21:22:3f:58:04:
d8:53:e0:51:bf:da:4c:95:73:6b:d8:b0:48:6f:94:
09:2b:a8:c5:2a:01:e8:f8:c4:ba:10:4d:33:0e:c4:
2d:b3:71:04:8b:ff:92:b7:af:32:6e:29:bf:cd:c9:
17:4d:c9:cb:10:47:97:6a:71:c6:c6:d4:a9:a2:1c:
97:81:0e:07:b3:cc:ac:fd:6a:71:37:d7:00:cb:0f:
03:d3:14:97:d6:3e:24:b4:5b:9d:1c:d2:70:ad:47:
f9:48:18:71:ba:07:a3:0f:19:e1:52:6b:bf:fe:d7:
14:9f:af:16:a3:e2:9e:57:90:8e:1a:ef:59:1a:63:
fc:62:44:88:69:4b:e6:69:64:05:cb:df:3c:46:34:
67:7e:2b:b5:48:40:dd:38:cd:99:90:87:6e:ba:4e:
c0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:53:AC:20:DD:09:F7:92:8D:D7:E1:08:8E:A9:A3:2A:15:B3:A4:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaa623aa-85d2-3ac3-a2b7-d15bddf9e8ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2b:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:d4:fd:37:74:2d:30:26:f0:cc:fd:03:29:a6:45:46:1f:ce:
32:2f:f6:44:d8:56:44:a6:1e:59:df:6d:e1:f9:dc:23:cd:07:
9b:ba:07:b8:ad:ce:e2:82:5f:4a:cc:b8:fd:9d:e2:90:96:22:
64:c3:69:34:f8:ac:60:0a:3f:2d:e2:d2:e2:7e:4c:45:95:73:
1f:a9:09:f1:23:32:f0:26:4a:2e:2f:b7:2b:7d:10:88:21:23:
48:50:97:9a:a4:2d:e2:3d:d3:d0:da:67:5a:9d:18:d3:44:f1:
cc:4e:6b:4b:6c:e2:31:07:01:0b:e5:94:a2:e0:25:07:ff:d2:
0e:06:2f:96:38:33:75:25:3f:72:ba:ca:af:d7:8d:dc:06:e7:
4c:8d:d1:4e:7a:a2:0e:9d:d0:b4:a2:32:09:f9:25:d4:6f:c9:
49:b5:9d:50:52:cd:23:e1:d3:73:24:7e:96:a1:89:97:b6:bd:
86:aa:8a:3a:69:a6:16:ca:d9:24:e4:94:56:48:62:78:e6:46:
ae:6d:a4:72:20:8e:50:68:d1:ea:2f:8e:29:ba:ce:3e:1a:c4:
6e:92:23:10:22:43:0b:fe:c1:c4:0b:da:ee:d4:c6:b1:cd:23:
39:fa:ef:bb:83:96:bc:69:0d:7e:39:ec:c8:62:89:1a:28:3d:
84:cb:58:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:52:36 2026 by rpki-client