
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d23b6cbe-a932-33dc-82e0-dc55ec697715.roa
File: d23b6cbe-a932-33dc-82e0-dc55ec697715.roa (raw, json)
Hash identifier: oxua2VfjrpFpx5KpwrFT0lPRsr2oLTfAMMXlkziVJVk=
Subject key identifier: 3A:5F:0C:6C:AC:FC:FC:64:18:EA:35:9D:27:A0:32:3B:69:26:BD:70
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584F49859088FCBC78B1654AD700
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d23b6cbe-a932-33dc-82e0-dc55ec697715.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 396610
IP address blocks: 2620:74:2c::31/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 07 Oct 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:85:90:88:fc:bc:78:b1:65:4a:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=fb96d3f6-1b2a-40a2-a659-bac31abf41df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:9e:35:53:c8:5d:94:21:75:53:78:83:1d:3c:
b7:f3:3f:aa:cb:f5:b5:a5:15:8d:04:76:62:a3:b6:
39:96:34:61:3a:84:b5:54:cf:42:a4:dd:8c:ac:4e:
7e:65:eb:f4:c1:29:38:5c:6d:2c:17:66:6e:51:05:
74:03:91:5d:62:9f:20:07:2d:c8:60:55:33:1e:0f:
94:33:0c:b5:58:a8:2e:0b:93:97:12:4a:6f:d2:f5:
74:50:4c:fe:73:c0:e1:24:ab:da:16:fc:68:78:16:
6b:32:64:32:d2:ed:41:f1:36:97:db:4d:e5:cf:76:
c5:b5:03:3e:d4:66:b1:d4:83:71:0c:de:10:79:57:
04:cf:ea:ee:b3:1c:84:61:fb:5f:5e:c3:40:7e:30:
62:cf:1b:2c:fd:92:08:b3:d4:2c:2c:c0:64:86:c6:
6e:0a:c5:d2:41:d9:a3:b6:59:47:a6:71:06:76:3f:
ee:86:59:bc:f2:ce:37:20:8d:c2:bb:e6:77:b2:15:
46:ea:62:91:0f:a0:02:5c:21:df:ad:06:5a:c0:00:
7b:fd:a8:9b:4d:48:00:70:67:e6:07:cf:33:a9:b7:
a2:9b:5f:d3:b5:ad:2d:b5:5f:98:36:c3:e3:39:49:
9c:42:66:dc:e5:29:cf:9c:37:d7:92:bb:65:a2:fe:
e9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5F:0C:6C:AC:FC:FC:64:18:EA:35:9D:27:A0:32:3B:69:26:BD:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d23b6cbe-a932-33dc-82e0-dc55ec697715.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2c:0:0:0:0:31/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:23:72:74:b0:62:76:9c:6c:f4:6a:da:b4:45:6d:50:2a:11:
3e:5c:e7:e8:62:f0:21:d2:ad:c1:dd:84:8d:d3:37:eb:29:2d:
16:74:87:45:00:b6:af:53:a1:42:09:4d:ff:b6:2f:ac:ce:3d:
c5:97:78:da:ae:61:23:34:bc:7c:c0:c7:45:6c:e5:d3:32:38:
6a:c5:90:bd:77:2d:c8:04:38:15:cd:fd:5e:a1:ab:c6:dd:49:
bd:38:f9:e7:4c:61:fc:fb:26:79:62:4b:2c:46:c8:7d:d1:1d:
f5:40:86:52:5f:ab:dc:3c:b7:a2:62:15:ac:fa:fc:8c:78:bd:
97:9f:a4:5a:91:ed:88:65:d3:6b:77:30:ce:ed:64:9b:ab:f6:
4e:9a:b6:2f:15:f7:08:f8:3e:99:5e:80:af:3a:cf:6c:71:bb:
1c:cb:8e:17:8f:a2:d4:bc:cd:07:f2:5d:0b:50:ae:4f:30:37:
6e:b9:e6:25:c3:cf:a3:47:72:e4:86:8d:cd:3e:5e:e6:fb:4f:
a4:f1:ca:fb:ba:8d:ea:52:81:cc:fb:83:d6:1c:4a:b3:62:0a:
93:dd:fd:3d:bf:85:29:78:5c:24:0d:ff:7c:55:83:1d:3b:25:
32:8e:52:90:0b:c8:7e:f0:1c:9f:20:36:66:03:b4:9e:a7:e0:
7d:0d:42:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:58:55 2026 by rpki-client