
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3fb4c195-c9c4-301d-bf25-8518d8deffbb.roa
File: 3fb4c195-c9c4-301d-bf25-8518d8deffbb.roa (raw, json)
Hash identifier: XzzVw/b0S+7Wo570DTnzLdVV/2cgKiNuKjFtikNygUA=
Subject key identifier: 78:1F:7A:F7:0A:E7:D6:5E:52:97:54:BC:4F:2F:36:16:A0:64:BA:2E
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584D386A3F24E4B4A97AB752F340
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3fb4c195-c9c4-301d-bf25-8518d8deffbb.roa
Signing time: Thu 19 Mar 2026 13:00:41 +0000
ROA not before: Thu 19 Mar 2026 13:00:41 +0000
ROA not after: Wed 17 Jun 2026 13:00:41 +0000
asID: 0
IP address blocks: 2620:74:c4::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:38:6a:3f:24:e4:b4:a9:7a:b7:52:f3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Mar 19 13:00:41 2026 GMT
Not After : Jun 17 13:00:41 2026 GMT
Subject: CN=0f61ca7d-e175-4d8e-b792-eb0c36e0f2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dc:63:6b:9b:c6:9a:4b:95:b2:03:da:3c:67:
57:70:c5:be:43:96:72:fe:6b:cc:f1:6a:b6:01:22:
52:78:6a:f5:b8:ad:c8:88:bb:aa:ed:dc:e3:29:e0:
86:13:99:2b:b3:0d:47:5b:66:e1:ea:d7:3d:96:a2:
c3:2f:c9:13:12:8a:d6:70:aa:65:27:a1:41:29:c0:
0a:2e:8d:ac:17:a5:e6:af:9c:27:8e:8e:3b:bb:16:
57:49:ba:14:64:b7:07:d2:65:56:16:07:7e:1e:56:
92:36:ff:33:16:87:a8:71:18:71:cd:88:2a:4c:20:
9a:2e:7d:90:d7:23:df:fd:84:8f:3c:29:97:8c:fe:
68:08:d8:66:48:58:94:02:55:27:ec:0d:76:e6:ad:
da:c9:f1:e7:4b:64:32:ba:35:3f:59:23:14:df:f4:
71:b3:8a:70:92:ac:8f:34:41:f8:75:8e:4d:0c:e2:
b2:59:dc:74:19:48:d5:83:f0:fa:74:be:d7:2f:05:
70:2b:b5:67:c0:1f:69:8d:78:3e:90:c6:2a:f7:46:
64:70:5d:f8:e4:5e:c8:0f:8f:9d:9c:3a:a6:37:60:
1c:f8:28:7a:a6:df:dc:f1:25:58:ac:0c:f8:16:96:
66:a8:17:a9:d1:0a:2f:eb:95:1f:17:06:0d:28:a7:
bc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1F:7A:F7:0A:E7:D6:5E:52:97:54:BC:4F:2F:36:16:A0:64:BA:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3fb4c195-c9c4-301d-bf25-8518d8deffbb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:c4::/46
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:87:08:8e:0b:81:1b:a4:4e:75:10:cb:f4:bb:46:51:c3:c3:
98:b7:9c:6a:c6:af:ce:75:b1:1b:be:8c:a2:8f:08:bf:2e:41:
e0:6a:6f:cd:e9:69:60:a3:61:6d:89:15:3d:43:ff:bd:10:98:
26:f7:df:00:5f:4a:28:62:87:43:81:e9:f8:6c:d9:a7:76:c5:
61:91:d8:ff:bd:f6:d8:12:d6:28:1f:cc:e5:7e:e8:db:54:87:
c7:14:70:0e:b6:ae:44:76:b6:63:21:a7:16:4d:cf:65:f4:82:
e2:4a:04:f1:fb:b9:94:5e:8b:e6:b1:f8:cd:1f:be:82:3c:17:
9c:6d:91:e8:01:37:02:c7:c4:ea:d6:b8:2d:11:69:98:1e:a7:
19:d9:da:e2:ad:bf:55:79:e9:8a:3d:0b:28:51:7b:f1:78:83:
92:5e:4a:cd:75:db:19:58:d6:a4:be:d8:72:4b:e1:83:86:47:
a6:d0:e6:49:c9:99:fd:59:36:c6:be:0d:05:3c:65:0a:02:e8:
04:12:bc:ae:5e:3b:10:db:c0:38:cc:0a:7d:af:87:3b:30:8a:
ed:2e:ba:7b:44:8b:2a:ba:6a:fb:4a:a3:e5:ce:62:5d:d1:94:
6d:52:5e:53:74:4b:2a:ff:93:b5:b9:6d:d6:19:9c:65:54:08:
d4:d7:19:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:41 2026 by rpki-client