
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ac4ae65-c2c8-3af5-835e-25a5ebf94c32.roa
File: 1ac4ae65-c2c8-3af5-835e-25a5ebf94c32.roa (raw, json)
Hash identifier: zTipf7TmyjIC98qGlDLptpvS35PUxATD1M9ECac4Rt8=
Subject key identifier: 2D:46:ED:2E:0D:21:95:BE:47:78:AB:7A:8A:35:22:60:43:95:AF:5C
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584E986031544A1DCA129B1B4680
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ac4ae65-c2c8-3af5-835e-25a5ebf94c32.roa
Signing time: Thu 23 Jul 2026 14:45:11 +0000
ROA not before: Thu 23 Jul 2026 14:45:11 +0000
ROA not after: Wed 21 Oct 2026 14:45:11 +0000
asID: 26134
IP address blocks: 2620:74:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:98:60:31:54:4a:1d:ca:12:9b:1b:46:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jul 23 14:45:11 2026 GMT
Not After : Oct 21 14:45:11 2026 GMT
Subject: CN=7aab3723-22c6-408f-afbc-826619583452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:42:13:b2:52:5f:da:87:98:7b:64:16:79:3c:
6c:b9:f8:3c:81:32:8a:7a:7a:9b:bf:cf:db:79:b4:
8c:c9:ff:c8:75:c4:0f:28:10:d7:ae:8f:28:f2:47:
67:16:b8:0b:bc:17:92:a6:ea:29:45:0e:0a:5f:e9:
2b:87:0c:26:af:dd:48:49:60:d5:b3:0e:e8:98:b2:
27:f7:b6:f2:74:4f:41:4a:f8:85:53:5d:d3:76:a3:
32:a3:b4:82:cc:8a:fe:1c:b6:7e:0b:12:45:dc:5c:
7e:9d:51:da:15:57:c9:7b:8a:7e:39:dc:96:f8:ba:
cd:e1:d4:a7:8c:85:7f:7b:29:33:56:3e:93:d4:06:
04:22:67:b1:af:ff:35:8a:2e:5b:54:a1:d1:5c:cc:
bf:38:90:76:f8:ca:12:56:9a:da:f7:bb:d7:c4:29:
70:58:f4:63:a5:ac:ec:72:28:11:a4:39:44:a9:67:
aa:ee:56:94:e1:71:af:e4:9b:be:11:3a:12:ea:91:
4f:6a:0b:34:71:40:b4:6d:86:9f:8c:35:97:00:a3:
55:90:72:7d:b5:bb:bb:bb:b8:1f:a0:83:e0:92:1d:
6e:02:31:e6:a5:73:a3:58:42:d9:e7:e0:a7:92:7d:
0e:4e:8b:ed:99:82:07:8e:59:5f:38:95:5f:cd:88:
63:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:46:ED:2E:0D:21:95:BE:47:78:AB:7A:8A:35:22:60:43:95:AF:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ac4ae65-c2c8-3af5-835e-25a5ebf94c32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:4d:31:68:db:1a:ef:a4:60:ef:b0:86:90:e5:d5:e1:8a:77:
db:b0:5a:55:97:5d:cd:8d:3d:fd:c6:c3:55:72:ab:7c:47:65:
c9:26:4e:6c:ba:be:3b:57:21:76:b6:3a:00:7e:12:b7:fc:6e:
ad:fe:d7:d3:2c:4e:4c:08:13:31:c3:db:4f:6f:28:16:13:70:
52:ce:96:95:05:fc:4b:48:6c:1e:78:f5:fd:b8:6c:e0:b4:29:
e8:2e:d9:3f:af:bf:72:2e:8d:a9:d2:6e:e3:2b:db:6f:87:78:
9a:81:90:c9:39:6f:3b:6f:c5:ba:ba:a3:c6:be:ae:ed:29:49:
8a:49:cc:e7:c7:61:5c:55:02:fb:5c:4d:fb:28:59:16:3d:c6:
90:e9:fb:2f:e9:81:5c:ef:a3:0e:e5:95:42:3f:b9:e9:bd:40:
d5:fa:a5:8e:88:66:f8:8a:62:f1:2b:55:d1:e4:bb:f2:71:9e:
a0:40:ae:db:a4:52:65:4d:cc:54:9a:2f:7a:ec:08:7b:10:79:
4b:bb:35:61:08:fc:a5:9b:82:25:e5:4d:91:bb:20:ed:a0:9c:
7a:eb:e6:53:54:61:ac:6e:49:20:65:aa:c4:ec:6a:b8:6a:73:
25:f4:b9:4f:75:a9:0e:96:3c:e4:98:b2:d4:ad:12:0a:54:62:
03:f8:be:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:29:57 2026 by rpki-client