
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1adb6c0-7119-3e94-b02c-9a151fa8e791.roa
File: d1adb6c0-7119-3e94-b02c-9a151fa8e791.roa (raw, json)
Hash identifier: iugq3f7G85N1U3xJRrWSGwPMVvKPYRS+Zawq6fdGdKc=
Subject key identifier: 7E:69:AE:55:C3:36:2C:12:97:CB:0F:D0:23:3F:5C:FD:FA:21:78:3C
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584EA790525F6A6DF2F0FE88E340
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1adb6c0-7119-3e94-b02c-9a151fa8e791.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 396608
IP address blocks: 2620:74:20::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 20 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:90:52:5f:6a:6d:f2:f0:fe:88:e3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=3373b685-2fe9-4e8d-9a6b-6b802f1787a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ae:38:63:44:d3:5e:9b:75:87:fd:dc:55:00:
e1:78:72:6a:e6:b2:bf:45:0f:3f:9e:d9:63:4c:7b:
9c:33:24:02:63:8a:60:c2:04:13:83:f1:2c:24:0b:
ed:eb:d2:b4:86:ed:9d:ab:62:05:30:bc:cc:29:e9:
0c:d6:20:2c:31:99:ff:03:b6:49:da:3a:e1:1b:fc:
84:b0:59:b0:9a:b6:b7:a3:6a:c2:3d:c8:49:cc:5a:
7a:83:b7:7d:eb:50:a0:28:f6:89:13:57:d2:f9:ea:
0c:8f:7f:02:ed:9a:93:0a:41:86:5f:5f:c3:1c:97:
da:df:c9:b7:65:bf:f2:36:d9:5b:c0:0f:3b:1d:af:
8c:40:bf:7d:8c:3c:90:cb:12:13:75:e4:77:47:87:
4b:93:24:0e:d5:9e:a0:e2:31:99:3c:06:41:5a:fb:
d8:86:8f:e9:44:76:5d:61:01:24:b1:c0:03:88:90:
93:10:70:de:8a:83:ea:bd:24:17:fe:9f:34:e0:d4:
6c:e6:40:e5:4f:49:78:30:29:84:73:76:80:46:81:
e9:e7:c2:59:86:39:63:df:a9:cd:7b:ce:e7:df:16:
b3:2f:da:c2:2b:5c:1e:09:58:33:b7:70:46:01:c6:
b3:b4:d9:05:41:d0:72:f2:ae:6f:a5:aa:61:e8:be:
52:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:69:AE:55:C3:36:2C:12:97:CB:0F:D0:23:3F:5C:FD:FA:21:78:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1adb6c0-7119-3e94-b02c-9a151fa8e791.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:20::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:d0:6f:a0:9d:22:8a:0c:f2:c0:dd:33:31:4b:06:89:02:22:
89:01:d9:e2:e0:9c:85:e3:56:01:8e:86:2d:c8:eb:52:62:e4:
7d:16:a1:17:fe:1a:3c:11:01:1a:18:ed:c3:b8:50:cc:25:56:
5c:94:ae:88:f8:ef:62:06:10:7f:a4:b7:9b:fd:56:77:14:c6:
35:9f:fd:e5:e3:d6:a3:ec:cd:ca:1f:b0:e0:9c:e1:f8:b6:39:
5d:00:88:d7:ff:26:8e:66:a7:87:0c:68:30:7e:25:76:b7:27:
e9:37:66:06:92:70:6f:fe:19:e8:b7:fd:40:4e:3a:d1:19:63:
38:68:c5:62:85:fc:3e:ab:19:35:d6:8e:2c:b3:b7:d2:de:8d:
50:ea:f5:52:84:29:de:02:10:df:47:43:9e:3f:96:57:97:fe:
42:4d:34:f8:cb:68:ec:5a:ee:8c:6f:db:15:ec:70:d7:3f:ec:
b0:03:ce:70:6a:15:7a:05:86:39:24:a4:04:4f:25:55:3e:04:
a6:c1:69:30:af:2e:1a:d6:18:6b:5b:30:cf:55:b5:92:e0:f2:
08:72:6d:7f:3d:2f:77:66:cb:46:6e:29:27:f5:a3:62:99:3c:
07:12:80:cd:e6:c5:ec:8d:94:77:0d:e6:ca:e9:b8:24:ac:c0:
39:71:90:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:54:11 2026 by rpki-client