
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c38e1ea5-bbba-3013-b514-f9b172b0021f.roa
File: c38e1ea5-bbba-3013-b514-f9b172b0021f.roa (raw, json)
Hash identifier: gMsAGc4/GDURo2cL3gTIP4ZOZK7tEJOai7G9jj+nwIs=
Subject key identifier: E0:54:4D:B5:D5:90:80:85:61:6B:CC:B1:51:28:65:AF:DF:7B:60:1D
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584F497304E4E16AC610459105D0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c38e1ea5-bbba-3013-b514-f9b172b0021f.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 396584
IP address blocks: 2620:74:2c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 08 Oct 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:04:e4:e1:6a:c6:10:45:91:05:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=da459075-2ceb-4e7b-954a-de77de16710f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:57:fb:e8:81:4c:5b:46:68:76:ef:a7:c4:23:
71:09:0c:18:65:41:08:6f:f3:cd:b9:81:ee:92:29:
cc:aa:9c:35:df:f9:32:54:d6:a0:3a:9a:51:32:70:
c8:06:3e:58:ba:d0:4c:8d:68:09:27:09:1a:8c:f8:
51:11:20:34:dc:57:1e:00:b9:b4:ce:22:d3:17:57:
bc:d4:65:f6:c5:b8:7b:a3:70:1b:de:c7:45:48:5f:
f6:70:4c:6a:30:5e:01:10:2b:d2:46:5e:e0:b8:64:
21:47:23:3a:36:75:a5:a7:79:04:a3:22:26:68:3b:
71:6d:c0:e0:0d:d4:68:fb:39:0f:c9:76:27:ed:cd:
7a:c1:da:a1:d5:d4:d3:f0:ca:d8:a4:71:3b:01:b5:
a9:01:d5:3e:5d:76:27:21:c8:3a:4d:b5:0d:1a:71:
8d:82:ab:4c:bc:a8:b0:53:2f:d1:0d:ed:03:23:82:
d2:0a:27:5a:19:7b:39:ec:02:58:89:2c:ea:f5:85:
44:8d:61:28:a2:1e:27:7b:f9:b1:b2:cf:25:bd:33:
1d:a2:bd:02:33:df:7a:2f:af:75:97:f7:5e:7b:a0:
7f:d5:05:a2:9a:65:5a:70:5c:65:39:a9:28:bb:fb:
13:ac:e7:1c:17:aa:00:e4:85:14:12:e3:fd:3e:99:
9e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:54:4D:B5:D5:90:80:85:61:6B:CC:B1:51:28:65:AF:DF:7B:60:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c38e1ea5-bbba-3013-b514-f9b172b0021f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:1d:c2:64:89:5b:3c:0c:8c:6d:b2:fc:b1:ee:ff:77:85:92:
d3:3f:1e:b0:7b:8d:5b:7c:92:35:67:89:1c:11:33:82:47:c7:
4f:51:73:b8:ca:af:ff:bb:3a:6d:7d:08:ae:28:75:8e:bf:95:
69:9a:92:13:93:7d:74:02:5d:19:ba:1e:89:d8:54:a4:64:d6:
8a:ab:b4:08:29:90:36:3c:08:53:85:13:2e:91:1c:fb:31:49:
fd:43:de:c0:85:1f:88:e6:79:e2:10:e9:73:d4:d6:3d:62:df:
82:33:69:34:a8:7e:83:47:b4:0b:14:e7:9b:11:06:12:59:cc:
1a:bf:e5:f0:55:64:48:49:49:fa:76:b7:a9:b3:be:27:fa:4b:
5c:d5:0f:c3:69:d3:ea:43:e3:18:12:51:e8:50:1a:92:45:09:
df:6d:29:52:75:3e:fa:5d:4c:49:26:9a:4c:12:2b:cf:ea:d2:
d9:28:91:4a:61:c3:b0:fe:4d:f8:44:25:9d:96:06:2e:cd:1c:
47:23:ed:07:61:4c:79:89:fb:d4:65:af:13:90:b4:70:d8:7b:
6a:e2:10:35:9f:57:31:79:c5:af:e0:8a:ae:27:93:71:f2:e5:
1c:44:d6:8b:71:1c:c2:04:3a:93:98:ad:c1:f5:da:0f:be:7e:
9a:40:2a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:33:39 2026 by rpki-client