
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/23b6ff22-6cc0-308b-ac2d-ebc194f61951.roa
File: 23b6ff22-6cc0-308b-ac2d-ebc194f61951.roa (raw, json)
Hash identifier: pmIa+5j9leYpTI3RKtLEhqlW1nXXOdz5rNV6iLDC5Wk=
Subject key identifier: A2:4D:89:EE:56:7C:A6:0F:45:87:3B:5C:16:0A:7C:9F:23:66:DB:36
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584D91C01BC335BB1860EDF46450
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/23b6ff22-6cc0-308b-ac2d-ebc194f61951.roa
Signing time: Mon 20 Apr 2026 13:00:33 +0000
ROA not before: Mon 20 Apr 2026 13:00:33 +0000
ROA not after: Sun 19 Jul 2026 13:00:33 +0000
asID: 396596
IP address blocks: 2620:74:21::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:91:c0:1b:c3:35:bb:18:60:ed:f4:64:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Apr 20 13:00:33 2026 GMT
Not After : Jul 19 13:00:33 2026 GMT
Subject: CN=52979d81-3d1e-4400-8839-eb22574bbdeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:09:31:3f:7e:56:de:5b:7b:30:0a:7f:00:5f:
0f:a7:21:24:66:83:fa:63:f3:7e:28:63:e1:e6:a2:
43:3d:65:00:d8:77:eb:d9:e0:b2:96:59:f8:5d:d0:
44:0b:ab:46:ef:d6:9f:ad:aa:3a:e3:d8:12:1a:9b:
c1:e1:37:1e:08:8f:6e:02:af:4d:01:5b:60:08:4c:
5d:27:c9:44:d0:35:81:66:a7:0c:3f:68:f8:e1:59:
d0:15:31:ce:6f:de:25:4c:e7:ff:99:d7:e1:00:62:
7b:d7:68:eb:2a:93:af:ce:81:41:77:3e:6c:29:0d:
f7:5f:f8:b3:7a:7b:3b:e0:14:fb:9f:49:6c:c3:b0:
bd:9f:7f:90:9f:65:e9:b7:25:09:45:35:af:d5:d4:
ce:d5:47:1e:8c:09:a4:51:90:3c:73:62:08:9e:63:
ff:54:b7:c2:16:db:f9:35:7f:e1:59:36:fa:00:e1:
19:71:7e:5f:82:75:de:51:91:62:09:52:23:0f:50:
88:a9:34:89:02:bb:5d:fa:ec:37:3e:3e:11:cf:54:
a9:b3:78:1b:e1:af:ed:c9:e1:92:bb:9b:91:24:7b:
06:38:c9:a4:9a:90:93:3e:59:ab:b6:2a:09:76:a9:
7d:6c:46:13:b5:de:6a:a3:a5:d5:88:1c:fa:92:b8:
3e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4D:89:EE:56:7C:A6:0F:45:87:3B:5C:16:0A:7C:9F:23:66:DB:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/23b6ff22-6cc0-308b-ac2d-ebc194f61951.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:21::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:cf:53:e9:97:82:8b:59:48:f3:be:f4:13:8b:22:2e:99:d9:
39:93:37:de:48:46:d4:1c:3d:87:63:4b:9c:16:4e:ed:ae:e8:
b3:25:99:74:b6:e2:13:ec:ab:f7:01:c6:9f:0c:58:76:e5:34:
fe:dd:04:c9:dd:d1:94:65:34:fb:ba:de:c7:5f:9e:bb:4a:14:
54:30:fa:89:03:d5:e8:f5:68:39:97:9e:40:d3:08:f5:8b:00:
89:f3:2c:38:e8:a5:fd:ee:45:dc:a3:1a:20:cf:5e:e4:d9:53:
38:c8:db:63:22:d2:05:15:9d:10:af:54:ef:63:97:42:61:7a:
5a:f4:0a:dd:e4:cf:b5:7e:65:79:db:55:3d:62:54:d6:e8:e8:
fd:46:a1:ad:e6:a7:df:2e:a6:1f:9b:06:b9:96:d8:a6:ad:f7:
b8:0c:26:54:cc:4e:d7:a3:18:97:39:f5:a6:c6:be:9c:b7:17:
0f:5e:af:ed:3e:18:8d:cc:1d:b3:94:be:42:40:ab:bd:01:ee:
52:b0:bf:57:7d:a3:ad:6c:fb:da:e6:1a:f0:cc:00:80:9c:3c:
72:75:c4:1e:aa:9f:ad:ab:12:0c:3f:03:7d:ec:7f:fc:20:81:
59:0e:57:df:96:4c:ba:52:0d:d9:cd:2b:cc:28:79:04:c7:4a:
96:be:b7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:43:04 2026 by rpki-client