
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/affbc13f-36a6-38f1-b5cc-09c0b04b9b11.roa
File: affbc13f-36a6-38f1-b5cc-09c0b04b9b11.roa (raw, json)
Hash identifier: x7BHCpcA7QnSHwpVh2AfwdMSI0P3cVbc+LgtJIDyFe4=
Subject key identifier: F1:C6:EB:24:39:1F:40:22:39:33:99:29:B0:CE:EB:72:6A:BC:D8:AC
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584EB2B1DB570C2F6868A1C34860
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/affbc13f-36a6-38f1-b5cc-09c0b04b9b11.roa
Signing time: Sun 02 Aug 2026 01:00:11 +0000
ROA not before: Sun 02 Aug 2026 01:00:11 +0000
ROA not after: Sat 31 Oct 2026 01:00:11 +0000
asID: 397211
IP address blocks: 2620:74:2b::31/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 20 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b2:b1:db:57:0c:2f:68:68:a1:c3:48:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Aug 2 01:00:11 2026 GMT
Not After : Oct 31 01:00:11 2026 GMT
Subject: CN=794a7efb-6d95-4ed5-8036-c4078f819cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:31:df:58:9a:26:de:a0:b7:ff:9d:8c:4f:22:
e5:74:42:93:51:36:17:81:9f:7f:f9:82:be:66:6b:
b6:de:3a:af:67:73:8d:21:5e:c5:72:45:94:a8:5e:
5b:6d:07:73:65:20:93:fd:2c:f0:10:c4:1b:d8:1c:
91:5a:18:53:e6:0c:d4:ee:2d:16:24:c1:94:5b:ee:
4a:7d:13:69:44:39:39:a4:a5:ab:2e:3e:9a:a4:f4:
a5:21:25:f2:b3:50:04:7c:93:f2:dc:67:e7:9b:ee:
4d:27:37:ad:fb:dc:50:0e:98:33:e0:c0:06:91:96:
e3:d1:7c:73:b5:87:d1:70:e9:05:2a:87:8f:6e:c3:
e5:9c:26:6d:57:ad:b2:3d:e2:41:f6:0b:fd:be:f2:
76:a0:23:fb:9a:0b:68:0c:cc:ca:79:c3:9a:1d:62:
fb:36:f8:58:26:5d:ce:6e:a0:4a:6e:2c:66:15:e4:
e1:b0:bf:f3:78:1d:98:78:0d:ab:af:40:94:04:c0:
ea:c7:8e:0f:5f:83:a0:d6:be:22:71:d0:87:f9:95:
17:d0:24:a1:9d:64:5d:64:4a:63:97:e0:fb:3c:78:
bb:09:48:9e:51:bb:1d:e5:af:0f:a9:7b:13:2b:e2:
43:35:f6:10:b7:8d:3d:7a:6e:ad:e8:99:ec:87:15:
a8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C6:EB:24:39:1F:40:22:39:33:99:29:B0:CE:EB:72:6A:BC:D8:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/affbc13f-36a6-38f1-b5cc-09c0b04b9b11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2b:0:0:0:0:31/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:7f:e8:89:30:16:c4:fd:9b:37:12:cf:c3:47:63:59:aa:52:
55:36:d9:c2:fc:ef:af:e2:39:aa:d0:15:db:73:f1:b2:d0:e8:
f7:4d:2f:79:18:df:b3:5c:d1:0f:24:39:9e:cc:0a:5d:72:94:
a2:81:91:59:5f:54:24:d9:5d:75:d8:05:92:f5:7e:0a:a2:03:
be:08:42:35:c9:fd:0f:2c:e4:77:99:c3:1a:60:9e:3f:e0:87:
b0:8e:b6:1b:69:90:30:20:d3:69:de:43:58:0c:80:95:b5:5a:
00:1b:88:bf:2f:cd:1c:90:8c:69:6f:d8:66:f8:be:6a:b6:ca:
f5:8a:e9:df:6e:f5:8a:30:ef:38:81:8c:6c:6d:02:7d:5d:41:
97:f5:88:6f:e6:11:e2:25:32:91:d3:9a:b5:63:9b:fc:6f:72:
ff:d8:64:0e:ea:3f:08:03:cc:52:0a:62:b8:18:06:ec:c1:07:
44:2f:ea:ba:49:84:b2:f9:af:77:04:50:58:bf:43:25:ef:f3:
06:fe:90:43:65:3e:bd:7d:9c:01:8b:72:06:46:a0:c9:0d:7f:
a0:8a:43:46:51:45:9d:26:c3:b2:b0:16:e5:a1:c0:c5:a0:b3:
f7:e4:02:93:7d:18:17:03:4f:88:bd:fe:51:07:f2:99:f2:12:
8e:ae:19:37
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE6ysdtXDC9oaKHDSGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk
Nzk0YTdlZmItNmQ5NS00ZWQ1LTgwMzYtYzQwNzhmODE5Y2RlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjHfWJom3qC3/52MTyLldEKTUTYXgZ9/+YK+
Zmu23jqvZ3ONIV7FckWUqF5bbQdzZSCT/SzwEMQb2ByRWhhT5gzU7i0WJMGUW+5K
fRNpRDk5pKWrLj6apPSlISXys1AEfJPy3Gfnm+5NJzet+9xQDpgz4MAGkZbj0Xxz
tYfRcOkFKoePbsPlnCZtV62yPeJB9gv9vvJ2oCP7mgtoDMzKecOaHWL7NvhYJl3O
bqBKbixmFeThsL/zeB2YeA2rr0CUBMDqx44PX4Og1r4icdCH+ZUX0CShnWRdZEpj
l+D7PHi7CUieUbsd5a8PqXsTK+JDNfYQt409em6t6JnshxWoVwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFPHG6yQ5H0AiOTOZKbDO63JqvNisMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWZmYmMxM2YtMzZhNi0z
OGYxLWI1Y2MtMDljMGIwNGI5YjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr
AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAlf+iJMBbE/Zs3Es/DR2NZqlJVNtnC/O+v4jmq
0BXbc/Gy0Oj3TS95GN+zXNEPJDmezApdcpSigZFZX1Qk2V112AWS9X4KogO+CEI1
yf0PLOR3mcMaYJ4/4IewjrYbaZAwINNp3kNYDICVtVoAG4i/L80ckIxpb9hm+L5q
tsr1iunfbvWKMO84gYxsbQJ9XUGX9Yhv5hHiJTKR05q1Y5v8b3L/2GQO6j8IA8xS
CmK4GAbswQdEL+q6SYSy+a93BFBYv0Ml7/MG/pBDZT69fZwBi3IGRqDJDX+gikNG
UUWdJsOysBblocDFoLP35AKTfRgXA0+Ivf5RB/KZ8hKOrhk3
-----END CERTIFICATE-----
Generated at Wed Aug 19 16:55:28 2026 by rpki-client