
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2ae9989e-b6c5-38a0-9848-866149ae301f.roa
File: 2ae9989e-b6c5-38a0-9848-866149ae301f.roa (raw, json)
Hash identifier: 7Vy94eWdhacUjSsPthHGvW6rsDWAk+ftjVc50vuI5xo=
Subject key identifier: 32:25:F4:C4:75:F7:D4:3C:5D:69:9C:C5:DF:0D:35:9B:1F:1E:2A:87
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584D32F5B0AEB6A63FF2393AF526
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2ae9989e-b6c5-38a0-9848-866149ae301f.roa
Signing time: Tue 17 Mar 2026 14:07:02 +0000
ROA not before: Tue 17 Mar 2026 14:07:02 +0000
ROA not after: Mon 15 Jun 2026 14:07:02 +0000
asID: 396563
IP address blocks: 2620:74:2a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:32:f5:b0:ae:b6:a6:3f:f2:39:3a:f5:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Mar 17 14:07:02 2026 GMT
Not After : Jun 15 14:07:02 2026 GMT
Subject: CN=62f6ffc7-c253-4582-8519-a1a7d1e54456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8d:e6:27:b3:2f:89:78:be:f3:82:26:29:0c:
82:b2:da:8d:4d:a7:db:6c:4a:28:ae:f9:a2:91:fc:
30:ec:84:d2:25:58:c2:21:74:3b:b2:58:5a:81:21:
d5:23:f3:88:df:d7:f7:06:31:d6:e6:7b:cd:37:66:
09:60:ec:3c:dc:63:03:b8:f9:5d:a6:c4:3f:97:5f:
05:f7:57:6d:09:59:d5:d5:1b:08:c8:20:86:2f:b0:
80:2a:60:9e:5f:83:fd:df:35:66:cf:14:c5:b2:03:
8e:1e:dc:77:23:f1:52:a8:6f:98:d8:fa:57:76:2b:
03:fd:3f:a5:e5:3a:5d:62:8d:c3:ed:58:02:bc:a1:
1f:3c:20:b5:2b:de:0a:a9:b6:3b:29:d6:f1:df:d5:
08:84:d6:a5:4b:ca:86:7b:e1:6a:10:1b:35:7b:62:
5d:38:8b:ed:46:6b:b1:4b:38:2a:39:86:30:83:23:
cc:ca:f6:45:13:66:ab:10:99:a9:c4:5d:f2:2b:94:
7e:2f:f2:04:7c:22:40:13:0d:43:b6:06:7e:06:8d:
fa:b4:c5:0c:c5:0d:cf:80:f0:37:8f:37:a8:15:16:
7a:3f:e1:7c:e5:31:9c:fd:a3:b0:ad:71:4f:9f:02:
1b:5e:40:9e:79:1a:9f:75:f8:6a:a3:f7:a3:08:35:
a0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:25:F4:C4:75:F7:D4:3C:5D:69:9C:C5:DF:0D:35:9B:1F:1E:2A:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2ae9989e-b6c5-38a0-9848-866149ae301f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:0a:68:43:f3:39:30:86:3b:8e:0b:c8:53:31:9e:e4:92:86:
00:34:bf:f1:1d:55:16:d0:34:df:83:c0:78:17:5b:00:ee:c4:
80:a2:07:79:05:1e:20:b8:52:b8:ab:7a:94:3a:7d:08:02:cb:
90:05:8c:90:be:b4:78:6c:75:8c:fb:57:b6:77:34:3b:3b:41:
4b:42:f8:f6:55:05:7f:55:1d:93:66:3c:ea:98:cd:98:b0:72:
8e:a0:93:4b:0b:8e:a0:5f:af:10:2b:1f:30:2a:78:0f:02:fe:
3e:f8:27:35:c9:33:93:e1:5a:57:a7:71:a3:a3:60:de:73:60:
83:38:ab:77:be:4a:f3:ed:53:64:d8:05:de:25:1f:ab:7b:43:
28:82:bb:47:d1:8d:a0:84:1f:8e:59:93:24:d9:ac:50:2e:2b:
33:06:a7:60:70:17:81:60:91:03:e8:8e:8a:48:e9:23:8d:a2:
63:ac:fc:64:0d:3b:4a:22:06:83:22:91:8a:2e:87:50:23:a3:
1e:5b:db:ca:73:c1:ea:d7:ae:3f:35:7a:a9:88:2d:98:5d:f7:
49:a3:44:1d:77:2f:95:ae:14:4c:c2:54:53:c4:52:67:6c:ce:
35:bd:46:89:d2:1b:b3:0a:05:43:28:40:15:8e:4b:2d:59:c2:
d2:b4:44:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:34:06 2026 by rpki-client