
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2a3e9aa4-8d6e-3712-8d35-b8a8d9fe91a3.roa
File: 2a3e9aa4-8d6e-3712-8d35-b8a8d9fe91a3.roa (raw, json)
Hash identifier: ZBN3g9xwhLGnOaS6ighHE3M8kqO5Oq0KpAumTmmZXw8=
Subject key identifier: 43:AC:95:17:FE:AE:91:10:2B:2A:F4:76:FA:69:14:99:4B:D6:8D:D8
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584D300A85D386D1976BE21390C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2a3e9aa4-8d6e-3712-8d35-b8a8d9fe91a3.roa
Signing time: Mon 16 Mar 2026 13:00:40 +0000
ROA not before: Mon 16 Mar 2026 13:00:40 +0000
ROA not after: Sun 14 Jun 2026 13:00:40 +0000
asID: 396585
IP address blocks: 2620:74:2b::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:30:0a:85:d3:86:d1:97:6b:e2:13:90:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Mar 16 13:00:40 2026 GMT
Not After : Jun 14 13:00:40 2026 GMT
Subject: CN=c1be03fc-f82d-4741-9a98-554280b266ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:86:74:f2:96:0e:a3:2e:ce:32:77:27:bf:5f:
30:03:a3:82:a0:79:2e:9d:81:3b:5d:2d:f3:33:60:
15:bc:af:65:35:34:21:0f:f8:82:2f:17:67:4a:e6:
53:10:83:e5:b1:04:dd:d0:d9:33:20:a5:9d:3d:89:
15:d7:40:2c:32:f8:6f:78:72:4e:d7:92:aa:4d:93:
c9:53:e3:7f:da:aa:e9:ff:c5:34:b5:35:d2:7a:88:
8d:0e:0c:67:ff:bf:cb:ee:49:45:86:cf:4f:5c:da:
c5:f5:e9:93:c7:3a:07:de:47:1e:9a:55:f9:df:81:
1f:e5:79:f0:8d:3c:3d:08:f1:34:25:2b:ec:8a:8d:
94:17:9e:3c:ce:40:55:97:96:33:bf:ad:bb:f6:29:
79:a0:5a:af:ed:68:71:df:d8:f7:01:3a:ff:7d:c7:
88:cd:d4:c2:3b:dc:16:5f:22:6b:97:cf:bb:97:cf:
1d:b7:97:bb:d2:69:ad:4e:de:b6:d8:90:51:1d:84:
11:7d:e2:40:12:25:7c:9d:83:11:ad:0d:c8:bf:37:
3c:d1:ab:f6:54:c6:74:bb:88:7b:f5:b7:1b:85:0b:
5e:7c:e5:47:04:c7:0f:4c:5e:87:b8:de:92:d4:d7:
fd:41:f8:e3:b3:16:9d:b6:f9:7f:57:51:d6:d2:4f:
b6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AC:95:17:FE:AE:91:10:2B:2A:F4:76:FA:69:14:99:4B:D6:8D:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2a3e9aa4-8d6e-3712-8d35-b8a8d9fe91a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2b:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:e9:eb:03:ee:24:e3:09:71:b1:86:f6:47:f8:52:d1:e9:4b:
40:4d:55:52:de:56:02:16:c3:43:ce:b7:aa:19:0f:8a:5c:c4:
da:f1:88:31:64:e9:91:3e:76:a8:39:1e:f1:4e:a9:7a:c2:c5:
ff:e6:f5:a8:f0:9d:00:ef:64:16:f7:d0:3e:b6:03:cc:84:42:
a9:a6:17:ea:98:a4:f7:bd:3c:e7:5e:66:3c:86:24:f7:26:ed:
14:64:4a:bd:8d:75:e0:65:48:78:02:3c:19:c0:44:5b:86:ff:
86:51:41:bf:0c:52:10:0b:6c:2e:ea:94:e9:e2:71:47:3d:e6:
65:e8:13:3d:8c:e4:4f:0c:f4:82:38:f3:6e:52:d9:ea:ed:68:
fb:89:06:3e:a8:79:a2:a0:1b:0d:58:6d:64:e0:87:11:a1:a8:
23:a8:98:76:86:2f:fd:61:fa:e8:79:91:5f:18:8e:c6:77:11:
ad:17:eb:5a:17:31:30:e4:0d:ef:2b:4c:f0:b3:ec:2f:f1:a7:
99:eb:e5:ed:b6:51:61:80:e1:88:ef:d2:95:22:52:27:ca:15:
c9:71:99:de:d0:2e:47:bd:91:28:13:66:74:8b:5b:d6:d7:b7:
c4:6e:67:2e:bf:bc:ae:4c:ff:8e:01:66:fc:88:c6:fe:30:51:
4c:b2:f2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:33:55 2026 by rpki-client