
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/66869cdf-ea3e-3d60-9d06-a0ff1e97a3fc.roa
File: 66869cdf-ea3e-3d60-9d06-a0ff1e97a3fc.roa (raw, json)
Hash identifier: IJZntHeij6JUfqhdPQKz9TjpY4R6dtkM/lajFd50bSU=
Subject key identifier: CF:4B:DC:6C:0B:1F:89:2E:BA:DB:B2:52:99:55:DE:D4:70:80:0A:11
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584D9E501FC8E6F9C7A770D51780
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/66869cdf-ea3e-3d60-9d06-a0ff1e97a3fc.roa
Signing time: Sat 25 Apr 2026 01:00:24 +0000
ROA not before: Sat 25 Apr 2026 01:00:24 +0000
ROA not after: Fri 24 Jul 2026 01:00:24 +0000
asID: 7342
IP address blocks: 2620:74:65::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9e:50:1f:c8:e6:f9:c7:a7:70:d5:17:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Apr 25 01:00:24 2026 GMT
Not After : Jul 24 01:00:24 2026 GMT
Subject: CN=e6c2052a-9d09-4d2d-9bc8-43aec1a1c437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2a:62:5e:c1:23:42:c7:86:cd:c9:10:01:70:
0e:0b:74:49:67:ba:5b:b7:91:40:c7:7f:8e:57:74:
50:23:0a:49:81:02:73:82:2d:cc:be:24:58:93:08:
c8:98:72:13:e5:df:57:c9:c4:3d:66:86:2b:b3:7b:
68:0f:1a:b9:a2:8a:aa:fa:8c:5d:00:9e:0b:98:5a:
92:17:93:65:84:0c:bc:d4:59:62:35:b5:37:6e:cb:
80:2b:27:60:f1:87:03:29:35:70:7a:83:f3:88:2c:
be:dc:c1:da:2c:6e:ed:20:e0:14:31:8f:48:81:87:
84:5a:6c:8c:9f:77:23:8e:dc:e5:89:55:51:32:56:
8c:cb:52:2c:68:f5:92:5f:43:7f:10:3e:85:50:3f:
77:ab:b6:3e:c7:04:cb:8b:83:d6:22:c7:24:ef:45:
ef:64:f3:33:76:23:32:16:2d:7f:a9:5c:4f:d8:61:
2f:19:ec:77:8e:65:ae:2f:f5:1d:1b:7b:a7:21:85:
eb:89:8d:31:3a:68:0e:f2:a1:4a:ce:4d:49:d2:0d:
7e:e7:5d:96:f0:56:db:b6:fe:5d:49:0a:03:28:17:
b3:80:15:e6:a0:b7:67:e5:21:c4:58:59:6c:42:38:
96:6f:65:ce:10:5b:3a:4f:58:9f:0e:b3:70:38:81:
70:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:4B:DC:6C:0B:1F:89:2E:BA:DB:B2:52:99:55:DE:D4:70:80:0A:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/66869cdf-ea3e-3d60-9d06-a0ff1e97a3fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:65::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:a9:e3:23:9c:54:4a:45:87:b7:e5:55:7c:ba:7e:84:0c:42:
e5:73:8f:db:6b:eb:86:93:e2:34:62:2f:2c:e5:77:0b:bc:52:
3f:96:46:a6:13:86:17:eb:6a:58:f3:a7:e4:1f:b5:da:e3:a8:
0e:b6:dc:a6:be:df:98:cf:16:cd:ff:47:fb:af:4d:8e:ab:15:
f6:ac:03:45:c1:86:95:b0:c3:74:73:f1:ca:48:95:52:8a:02:
fd:34:85:e1:57:58:34:39:c1:9a:48:66:e5:bb:a9:6f:51:08:
de:96:ac:a0:c9:49:46:c6:4a:87:ae:1d:49:a3:31:0e:15:27:
b5:63:46:ba:7b:70:8a:a9:ca:db:c0:b7:1a:15:b5:30:c3:98:
4c:81:6e:3b:17:75:9d:5a:bc:9c:45:9a:86:60:07:de:a3:68:
f1:a0:33:f5:35:4b:d8:a8:73:64:b3:ae:1e:6d:de:4d:b0:aa:
be:7a:12:e6:52:c7:9f:8a:54:1a:5d:1b:94:c4:0a:e9:10:64:
fd:4f:3a:98:bb:9f:f4:e0:b7:77:72:cd:1e:7b:34:21:12:61:
3c:fd:74:63:37:d9:16:c1:90:08:72:c5:5e:72:71:43:c9:1c:
9b:b2:0f:fc:29:1f:b0:11:45:25:dd:8b:c8:ae:f2:e1:03:23:
13:c5:0e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:07:36 2026 by rpki-client