
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/668198c6-793c-30d1-8889-7ae2873276d3.roa
File: 668198c6-793c-30d1-8889-7ae2873276d3.roa (raw, json)
Hash identifier: UwZyt7V6ns0nRbHMxiU+dXaDBwjvU17JWRKKdIT6uFs=
Subject key identifier: 30:12:B5:40:21:C0:8A:64:DB:2D:09:24:7B:3E:08:3A:B7:3B:A0:31
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584D300A89AAEBEC631AE9BCC7C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/668198c6-793c-30d1-8889-7ae2873276d3.roa
Signing time: Mon 16 Mar 2026 13:00:40 +0000
ROA not before: Mon 16 Mar 2026 13:00:40 +0000
ROA not after: Sun 14 Jun 2026 13:00:40 +0000
asID: 396599
IP address blocks: 2620:74:2b::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:30:0a:89:aa:eb:ec:63:1a:e9:bc:c7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Mar 16 13:00:40 2026 GMT
Not After : Jun 14 13:00:40 2026 GMT
Subject: CN=f2992f32-1c1b-4b04-ab2d-733663fb5674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d2:7b:08:78:b0:1c:fd:f7:3c:93:f4:32:77:
d4:dc:e1:49:dd:8c:43:2d:a6:5b:90:87:8a:43:f1:
67:98:a0:98:5a:e2:4e:50:ca:0b:91:5a:c9:0f:e5:
2a:f4:87:bb:fd:62:52:45:6c:7d:22:49:9b:29:28:
65:a9:14:18:08:61:d0:ed:f5:94:f0:4b:c7:63:67:
22:b0:3e:fd:c9:83:54:b0:b5:ec:d2:4b:cf:43:25:
19:d2:7d:ec:8c:3c:58:99:ec:6b:18:e2:fa:16:bf:
3f:aa:89:c3:91:e6:23:04:b0:ce:09:55:1d:fb:54:
e6:b2:0c:1e:7b:5e:7b:58:4e:64:74:9a:d3:5a:75:
5b:b0:bb:fb:d2:f1:3e:21:aa:9e:ab:3c:06:49:da:
02:4c:32:e5:5f:1f:7b:99:b6:67:57:cc:4d:61:d5:
3c:78:c2:d4:cc:5a:53:7c:20:04:b8:ef:47:08:2a:
cf:00:c4:77:f2:b5:3d:72:d5:3c:c6:b1:2a:ec:a4:
09:09:b8:0c:0f:a9:97:e4:3a:6b:08:cd:b0:69:27:
e2:68:89:ac:93:f2:eb:c9:db:f1:9f:81:d6:59:d0:
6e:aa:7f:10:fb:d3:b2:b3:0d:39:24:a3:3e:9c:ac:
11:59:e2:78:df:e6:44:19:50:eb:d5:36:05:87:65:
c6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:12:B5:40:21:C0:8A:64:DB:2D:09:24:7B:3E:08:3A:B7:3B:A0:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/668198c6-793c-30d1-8889-7ae2873276d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2b:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:44:39:c3:28:e2:ce:47:f7:a8:78:19:f8:06:b3:b9:44:1b:
f7:ac:cf:b5:36:29:5e:d2:f9:37:29:59:c0:35:9a:2b:ec:1a:
88:d8:c9:f8:29:33:22:8d:35:cc:10:b4:88:c5:85:c0:ee:55:
e7:c0:30:f7:6b:17:f2:cc:52:b0:51:47:c5:cc:ea:38:ed:bc:
ef:d5:53:ba:b2:e5:50:bf:db:88:6c:d3:06:e7:b4:c7:12:19:
b1:25:21:27:f9:a0:e7:be:97:3c:f7:e9:e4:14:68:08:11:e5:
54:e8:b9:d4:f5:a5:4b:aa:b8:66:f9:f6:e5:8b:d4:63:c2:cc:
d6:cd:96:7a:d5:24:09:37:04:a3:34:f2:a3:da:1d:28:f4:b9:
0f:27:01:e3:7b:41:4b:50:58:53:c0:a5:93:5a:74:37:3c:f8:
74:1e:c2:42:06:a3:80:5b:51:9d:a2:e9:2e:95:85:8a:85:3f:
eb:2f:ae:ae:e6:f5:ed:a9:66:89:73:40:cf:fe:8e:97:ff:6e:
6a:d2:0c:ba:19:9c:ed:94:b6:45:ec:d6:29:d3:97:ce:7d:d8:
fe:06:88:95:2c:91:1a:ed:8f:22:ae:83:76:62:cd:06:48:d5:
e4:cf:c1:cb:2d:7d:45:d6:2f:b5:fc:67:1b:c4:84:38:16:fa:
cc:2d:12:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:08:30 2026 by rpki-client