
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e445d91-8e5e-351b-ac7b-cf9c6a42b4eb.roa
File: 2e445d91-8e5e-351b-ac7b-cf9c6a42b4eb.roa (raw, json)
Hash identifier: AiL6OdxslyWuYYeVxnR/rOgaYFuPo5XUTRcIyKPynjI=
Subject key identifier: 08:F4:02:ED:6F:32:C0:F1:4A:2F:A5:01:85:54:6D:5E:83:64:14:85
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584D44FA5E2D1236183C1BA8CE80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e445d91-8e5e-351b-ac7b-cf9c6a42b4eb.roa
Signing time: Tue 24 Mar 2026 01:00:31 +0000
ROA not before: Tue 24 Mar 2026 01:00:31 +0000
ROA not after: Mon 22 Jun 2026 01:00:31 +0000
asID: 396596
IP address blocks: 2620:74:2a::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:44:fa:5e:2d:12:36:18:3c:1b:a8:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Mar 24 01:00:31 2026 GMT
Not After : Jun 22 01:00:31 2026 GMT
Subject: CN=a3e95543-2937-4772-a8ea-7bca6199f312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:46:7d:eb:29:8b:12:5b:25:c8:67:be:23:76:
6b:4f:96:5d:f0:9a:35:8d:a0:aa:45:e3:4d:35:d0:
f0:27:ef:c7:07:e6:4a:17:05:ac:14:eb:88:b8:26:
c0:62:91:6e:4a:8e:37:44:d7:b2:09:af:0d:f1:04:
3b:ef:26:a3:a3:f8:55:2d:ea:ec:cd:69:c0:40:7d:
2c:5a:93:94:ed:a7:d4:7c:4d:48:bb:ef:d9:4b:9d:
7b:a0:7a:2a:47:13:05:4e:96:4e:5a:0f:52:24:e3:
27:66:d5:8a:8b:45:57:10:bb:46:61:e5:5c:20:2c:
19:03:16:f7:22:88:9b:28:80:e7:56:f3:a7:96:4d:
2e:c4:f7:97:77:17:ed:8d:f5:d1:b8:9a:3a:33:01:
45:4b:35:31:21:fa:f2:21:4e:0d:85:76:db:e1:e9:
0d:e1:b8:48:3d:72:09:73:c1:6d:15:e4:58:2e:8e:
bc:d4:7b:5b:03:27:e5:2a:a6:47:da:38:21:c9:58:
b5:12:56:75:12:a0:8a:b7:5d:f2:5e:0d:44:06:6f:
21:51:20:3b:41:c5:63:94:66:27:bd:66:e6:4d:3c:
67:1a:8d:73:f9:0f:0d:66:89:09:fa:75:e3:2e:06:
22:f2:4c:94:50:10:db:17:14:ac:ee:a1:30:6c:97:
61:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F4:02:ED:6F:32:C0:F1:4A:2F:A5:01:85:54:6D:5E:83:64:14:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e445d91-8e5e-351b-ac7b-cf9c6a42b4eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2a:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:2d:49:0f:4f:5d:e1:d2:a3:c4:a8:9f:8e:34:fb:9d:b9:33:
42:97:12:94:b1:6c:9c:d3:20:f4:ad:d8:a6:59:9b:d6:a9:cb:
e8:86:5d:c9:6e:c7:8a:33:35:e0:39:51:a1:46:46:8c:22:fd:
00:bd:ef:53:b6:87:10:f3:65:c9:58:27:90:5b:7f:0f:37:07:
bf:89:75:1d:41:a3:ef:51:60:08:eb:82:32:b3:53:33:c7:c6:
69:9d:a5:e2:df:fb:7a:44:91:69:b7:a9:04:12:e4:a7:db:22:
1f:c6:da:3e:a7:4d:6b:ae:11:b2:2c:71:0b:7c:5c:d5:a5:0f:
25:ff:2e:4d:65:29:db:8e:17:69:e2:33:39:b2:21:ad:1d:6a:
a6:0b:0c:c8:bc:05:c2:59:e3:27:44:de:9e:9d:e7:2a:13:82:
f4:f6:38:a7:04:f4:fa:3b:10:e3:81:a1:0b:e0:7e:0c:ef:40:
aa:51:c7:10:37:94:f6:67:6d:95:64:4e:21:d3:3c:cc:50:ed:
ab:49:0f:27:89:e2:35:6c:a4:d6:98:6f:a4:26:ea:29:0d:c0:
47:c9:f5:8b:aa:97:8e:00:08:f0:b4:ad:86:7c:3b:db:da:4b:
fc:92:39:d0:39:c4:bd:46:61:35:6a:41:bf:0f:bb:47:12:95:
aa:53:22:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:01 2026 by rpki-client