
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4000f810-439c-337f-91e5-a447e7e042fa.roa
File: 4000f810-439c-337f-91e5-a447e7e042fa.roa (raw, json)
Hash identifier: heLNKKCDyygkvVr7tFudzIJwidKvnpL6NwQ8Fxa7PVE=
Subject key identifier: A5:37:E9:16:B4:21:B8:4D:0B:75:42:7F:3E:DA:12:DF:35:73:93:43
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584D32F5AF3FB93E480364B92320
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4000f810-439c-337f-91e5-a447e7e042fa.roa
Signing time: Tue 17 Mar 2026 14:07:01 +0000
ROA not before: Tue 17 Mar 2026 14:07:01 +0000
ROA not after: Mon 15 Jun 2026 14:07:01 +0000
asID: 396555
IP address blocks: 2620:74:2a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:32:f5:af:3f:b9:3e:48:03:64:b9:23:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Mar 17 14:07:01 2026 GMT
Not After : Jun 15 14:07:01 2026 GMT
Subject: CN=d693bb93-102c-4f1c-9412-9f6249f1761a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:47:95:5b:85:dd:48:b8:b4:40:e4:5d:6a:6b:
33:bf:ae:1b:4f:89:b2:a6:bc:0e:84:de:a4:c3:95:
a1:3c:2d:cd:a3:a4:10:a8:69:17:74:0f:22:09:cd:
4a:76:2e:bb:2f:d0:15:d9:c9:c2:e3:e0:a4:a5:74:
c8:01:b6:9e:59:b1:83:07:9b:a4:14:9e:2c:70:3c:
08:f6:71:3e:3e:7b:57:45:0a:93:21:3d:4c:c9:39:
6b:ba:bd:53:87:6e:2f:3a:69:17:62:07:0d:cc:0a:
f2:3e:01:f7:66:36:8e:fc:a7:e1:33:63:ac:d6:c0:
a6:20:8b:87:e5:5b:d8:b0:ae:00:8a:ee:d9:1d:b4:
e4:f8:66:0c:59:ce:34:9e:2c:7d:18:71:ff:d6:98:
9f:89:9c:fb:35:16:af:13:ee:a2:55:ca:00:37:4a:
51:0e:86:58:49:49:ee:b4:46:c2:c8:9f:a7:89:6a:
87:30:ca:34:5b:2c:64:1a:bc:2f:d7:dc:dd:49:3b:
f6:81:c5:36:cc:f8:d4:8c:b2:d1:db:22:f2:6a:ed:
90:2e:65:ab:cb:c7:41:77:a9:58:ff:fd:d0:91:3d:
5e:b1:63:43:30:97:3c:cf:ac:02:6a:0e:96:e5:7f:
1b:28:f2:54:57:b9:6a:89:22:ae:1d:50:29:87:f6:
5c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:37:E9:16:B4:21:B8:4D:0B:75:42:7F:3E:DA:12:DF:35:73:93:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4000f810-439c-337f-91e5-a447e7e042fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:04:e1:21:6e:fc:89:97:01:6e:8b:f5:c2:0a:ff:71:52:39:
e2:8d:03:33:1b:60:67:f9:43:0e:d8:54:32:ff:8e:ee:d4:31:
d8:30:63:91:60:92:bf:0b:2c:31:76:1e:c7:3e:d3:ed:3f:46:
37:24:c1:bc:dc:66:fb:a2:b1:03:85:56:e3:0e:81:cd:53:9d:
e5:83:54:81:55:f8:76:85:90:8b:8e:0c:c1:eb:38:b1:91:db:
0e:85:fe:d7:f0:e3:5f:4d:28:78:00:c5:bb:21:0b:11:c4:75:
1a:6b:3c:5a:57:82:52:83:78:bc:23:8b:cc:1e:54:27:39:a6:
3d:93:ac:fa:ec:1a:bf:c9:79:53:32:08:78:4e:03:b5:ac:23:
c1:72:ef:47:13:10:f5:64:6f:27:9c:5e:ec:d8:fa:aa:d8:68:
e0:cc:91:6f:d1:c8:66:ee:97:e4:23:8c:41:34:e5:7f:3b:f4:
ad:72:05:c3:9b:96:db:57:54:e0:93:ef:b6:05:a8:3c:24:a2:
98:3b:1b:52:05:58:11:da:dd:fc:63:ac:d7:da:28:c5:14:23:
e4:70:02:5e:cb:32:05:75:31:72:a5:fc:ca:d5:a0:5e:d3:3f:
41:d2:37:33:38:fd:e3:54:24:8d:35:5d:3e:35:7a:e1:38:52:
1a:5d:ae:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:12:54 2026 by rpki-client