
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c99b62a5-7525-36ab-8726-118bb572f85d.roa
File: c99b62a5-7525-36ab-8726-118bb572f85d.roa (raw, json)
Hash identifier: 9L9WSoCqpRxanrFzLlNA/1Ldtmz2rF6TivslRVJeG4c=
Subject key identifier: 85:59:3C:19:89:21:08:9F:34:5C:0E:E2:CC:14:2E:3B:12:4D:66:6A
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584EB57C60F4D289E8FE277AFA00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c99b62a5-7525-36ab-8726-118bb572f85d.roa
Signing time: Mon 03 Aug 2026 01:00:11 +0000
ROA not before: Mon 03 Aug 2026 01:00:11 +0000
ROA not after: Sun 01 Nov 2026 01:00:11 +0000
asID: 36618
IP address blocks: 2620:74:2a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 20 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b5:7c:60:f4:d2:89:e8:fe:27:7a:fa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Aug 3 01:00:11 2026 GMT
Not After : Nov 1 01:00:11 2026 GMT
Subject: CN=f565e90b-da7b-4cb0-8be0-57ccb81c633d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cc:30:8d:b5:67:c7:5a:74:e2:98:d1:a2:d0:
c0:b3:a1:6d:df:61:36:58:98:dc:b8:47:08:2a:c8:
b6:8f:c4:19:6b:9b:db:d2:ea:ea:78:33:dc:8d:bb:
ec:a5:80:0b:08:49:9a:93:a9:50:af:77:b0:7b:77:
e1:f9:cc:e0:ce:e2:b7:8f:e2:0c:0f:49:c3:1c:8b:
56:58:de:0e:14:a9:bb:c2:08:7f:e1:98:44:e3:80:
44:2f:08:5f:81:8b:5d:85:ff:51:cc:e9:12:35:30:
ac:d6:96:97:f9:f5:db:1c:dd:00:84:60:33:41:c5:
82:0d:da:fd:3a:bb:91:1c:fa:f4:56:0c:ec:ac:00:
90:d4:77:48:fb:e9:16:69:64:f3:34:e6:53:7c:7b:
9a:43:f8:d2:55:83:09:bb:2f:f8:f2:59:7c:c2:6b:
bd:24:ad:3a:27:9b:43:59:d0:37:87:01:d2:d3:1e:
e6:d8:14:43:a1:b5:8a:23:80:17:9d:9b:84:57:12:
a6:8f:87:be:3e:51:ce:6a:0f:a0:c3:0f:61:1f:74:
02:74:c7:a3:98:d4:66:d5:7e:1b:23:e9:9d:27:0d:
16:d4:7d:c8:58:40:72:08:3d:00:b8:c2:f9:d8:4d:
39:10:c8:31:f2:09:e5:5e:6b:b6:47:a3:a2:e4:d8:
bd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:59:3C:19:89:21:08:9F:34:5C:0E:E2:CC:14:2E:3B:12:4D:66:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c99b62a5-7525-36ab-8726-118bb572f85d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:8f:a1:ab:69:71:57:75:db:f2:b6:0b:e7:92:67:6c:5c:62:
bd:9a:48:e6:51:61:05:29:58:19:3e:db:4e:6e:c8:28:b0:1c:
e9:22:b8:5e:af:a0:1f:06:12:a3:d5:5a:45:68:0e:bf:1d:a1:
9b:b0:ba:9e:22:9f:fd:5e:54:ab:01:7c:3a:9a:6e:3a:4d:71:
23:8b:7f:df:5e:29:b0:d8:c0:e5:6e:a8:4d:7a:ce:5c:9c:1a:
1a:34:a7:9b:16:c2:b2:b0:eb:d1:30:55:86:a9:cd:f4:0c:22:
02:42:28:68:e2:0e:18:e1:20:ee:4e:4f:51:7b:17:df:90:a6:
7b:1d:64:f3:ae:73:58:af:72:07:ec:48:1c:a0:9c:9d:9a:58:
4a:51:3b:e6:08:69:99:59:0e:af:fc:ea:fb:64:ff:c1:c4:82:
01:1a:c4:cb:b9:53:69:75:51:45:cf:3f:5c:c2:2d:0e:4c:dd:
31:b6:51:db:48:68:b6:40:c8:84:ca:82:c2:f4:df:0b:95:ed:
ff:4a:e1:9a:e2:a6:ea:c0:81:21:47:06:67:a2:7c:d7:cf:4f:
fd:46:1c:c3:47:4e:c7:03:88:3d:50:70:08:f4:6c:d8:56:58:
3b:36:ea:19:bd:d4:f0:ec:0a:2f:f1:89:58:de:d8:1f:20:65:
40:80:76:d2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE61fGD00ono/id6+gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDgwMzAxMDAxMVoXDTI2MTEwMTAxMDAxMVowLzEtMCsGA1UEAxMk
ZjU2NWU5MGItZGE3Yi00Y2IwLThiZTAtNTdjY2I4MWM2MzNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8wwjbVnx1p04pjRotDAs6Ft32E2WJjcuEcI
Ksi2j8QZa5vb0urqeDPcjbvspYALCEmak6lQr3ewe3fh+czgzuK3j+IMD0nDHItW
WN4OFKm7wgh/4ZhE44BELwhfgYtdhf9RzOkSNTCs1paX+fXbHN0AhGAzQcWCDdr9
OruRHPr0VgzsrACQ1HdI++kWaWTzNOZTfHuaQ/jSVYMJuy/48ll8wmu9JK06J5tD
WdA3hwHS0x7m2BRDobWKI4AXnZuEVxKmj4e+PlHOag+gww9hH3QCdMejmNRm1X4b
I+mdJw0W1H3IWEByCD0AuML52E05EMgx8gnlXmu2R6Oi5Ni95QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIVZPBmJIQifNFwO4swULjsSTWZqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzk5YjYyYTUtNzUyNS0z
NmFiLTg3MjYtMTE4YmI1NzJmODVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEePoatpcVd12/K2C+eSZ2xcYr2aSOZRYQUpWBk+205uyCiwHOki
uF6voB8GEqPVWkVoDr8doZuwup4in/1eVKsBfDqabjpNcSOLf99eKbDYwOVuqE16
zlycGho0p5sWwrKw69EwVYapzfQMIgJCKGjiDhjhIO5OT1F7F9+QpnsdZPOuc1iv
cgfsSBygnJ2aWEpRO+YIaZlZDq/86vtk/8HEggEaxMu5U2l1UUXPP1zCLQ5M3TG2
UdtIaLZAyITKgsL03wuV7f9K4ZripurAgSFHBmeifNfPT/1GHMNHTscDiD1QcAj0
bNhWWDs26hm91PDsCi/xiVje2B8gZUCAdtI=
-----END CERTIFICATE-----
Generated at Wed Aug 19 16:57:30 2026 by rpki-client