
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c4dfa70e-3edd-3071-b2b3-9657b10870e3.roa
File: c4dfa70e-3edd-3071-b2b3-9657b10870e3.roa (raw, json)
Hash identifier: bnsTjiyev8iCugff3Zz7ZOtocnTthd0l05Q+B7apZGo=
Subject key identifier: 2E:84:70:2C:BC:4B:C4:E9:5E:49:4D:D7:EA:80:9C:A0:09:E6:AB:E3
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584EC7A1E347BE97EDD554F99518
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c4dfa70e-3edd-3071-b2b3-9657b10870e3.roa
Signing time: Sun 09 Aug 2026 13:00:12 +0000
ROA not before: Sun 09 Aug 2026 13:00:12 +0000
ROA not after: Sat 07 Nov 2026 14:00:12 +0000
asID: 36628
IP address blocks: 2620:74:2a::31/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 20 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c7:a1:e3:47:be:97:ed:d5:54:f9:95:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Aug 9 13:00:12 2026 GMT
Not After : Nov 7 14:00:12 2026 GMT
Subject: CN=2fe80e17-1ec0-41ed-8a5d-65cf6655f162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:71:8c:e9:10:a5:22:03:5f:4e:03:9b:bc:0d:
36:ae:d5:b8:f1:b3:22:42:53:24:36:13:d4:4c:75:
96:58:4d:07:f0:d4:11:87:89:58:7b:53:97:81:0d:
00:f7:9b:9d:ea:e0:3f:e2:c6:6a:19:07:68:9a:20:
07:a7:d7:1d:19:91:a0:9d:67:f0:af:22:37:8b:ec:
4f:12:f4:2d:2b:cf:09:2e:37:84:b0:9c:40:58:56:
88:58:40:20:87:6b:07:52:76:99:41:ca:09:10:e6:
25:ff:80:64:96:34:d8:13:2c:e0:cf:df:0e:90:c2:
15:a1:47:47:65:7d:5d:2c:e2:43:bf:f7:c2:e7:20:
ac:d1:4f:b2:e6:a5:0b:90:48:f6:5a:6f:3f:c6:d6:
5e:e4:31:53:56:c9:44:be:62:5c:53:02:c5:2d:10:
f4:23:96:04:c7:1a:68:49:b2:92:a6:f9:6f:fc:5d:
4c:46:58:6b:2b:a7:d1:cc:19:e0:8b:c5:b0:f7:30:
5e:d1:71:14:e4:6b:cd:58:e2:cc:ee:9e:b5:b6:06:
e7:2e:8f:5b:f6:99:2f:8b:3c:15:e4:67:8f:14:6f:
27:d3:7e:69:72:0f:c3:38:ec:1e:39:51:35:4d:33:
0b:66:1a:3b:72:cc:7d:47:31:9c:63:74:84:36:ed:
00:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:84:70:2C:BC:4B:C4:E9:5E:49:4D:D7:EA:80:9C:A0:09:E6:AB:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c4dfa70e-3edd-3071-b2b3-9657b10870e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2a:0:0:0:0:31/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:7f:0b:0f:2a:48:38:46:36:f7:ff:cc:5d:32:10:88:9a:f9:
9f:57:6c:4e:f0:28:17:8a:b0:0b:ba:26:94:e5:f1:c2:ee:c9:
fa:f8:3e:d6:02:20:40:70:64:9a:4e:7d:d3:68:9e:01:2f:9f:
0f:2e:7b:04:d8:af:24:92:3b:d6:bd:1f:30:21:b7:50:3d:4c:
5a:4c:fa:d2:bf:0a:ed:01:3f:c8:2d:c0:66:31:b5:dd:34:94:
b5:ab:a7:0b:f2:61:e6:e3:58:b0:8a:8d:62:f3:19:15:cd:c0:
3f:ec:d0:fa:f8:1e:61:b0:3b:a8:76:a7:b5:b5:e8:33:0f:1d:
06:b7:87:fb:69:cf:14:1c:ff:4c:03:ef:52:fa:c0:aa:fb:61:
54:a8:d2:b1:0c:54:5d:36:66:fb:6b:bf:09:33:6a:56:fb:08:
0a:fd:7a:6d:1c:ec:08:16:fb:3c:9e:b7:cc:f3:19:38:1d:6f:
84:c2:71:ed:69:88:61:96:ff:c1:f7:1b:ca:50:9c:3b:ce:60:
e1:af:99:1e:8f:87:e5:6e:51:15:9c:b0:e5:42:42:e4:be:ef:
6b:9d:59:a3:f2:5a:14:b9:9e:3f:e3:be:c5:fb:ed:28:6d:50:
9f:40:6d:eb:20:ac:7e:b6:e5:34:eb:af:1e:47:61:f1:1b:28:
5d:8a:f0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:53:53 2026 by rpki-client