
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/66d6ec2d-8d0d-3ccd-8433-848985ba990e.roa
File: 66d6ec2d-8d0d-3ccd-8433-848985ba990e.roa (raw, json)
Hash identifier: JwBaynTGdwue9GRIZvLqMG10RafaOhMdKQm+W7yuL/c=
Subject key identifier: 14:45:F0:A4:2F:99:B1:57:12:D7:6C:B0:A8:9A:EF:AA:A7:52:FD:71
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584F4987012D26735A6CCD5E07A0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/66d6ec2d-8d0d-3ccd-8433-848985ba990e.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 396594
IP address blocks: 2620:74:2b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:87:01:2d:26:73:5a:6c:cd:5e:07:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=cd127309-9a6e-4475-b80a-d6f3403a3d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:cc:83:d8:65:73:3c:03:e0:ed:61:e1:fe:48:
7b:e4:f8:bc:52:e5:9b:8a:ff:23:ed:82:93:19:00:
fe:96:52:72:d9:be:08:70:7b:49:f2:69:8f:35:3b:
c3:08:62:9b:71:43:f3:81:6b:ef:09:70:1e:87:3f:
7c:ff:e2:e7:40:8f:3d:64:24:e5:2d:79:66:d2:80:
c1:7e:fe:3b:47:b3:e9:20:97:95:20:e7:bf:63:45:
ab:c2:13:c6:1d:c0:2c:06:65:6e:63:8e:6e:55:bf:
b4:34:51:ff:00:3f:a7:a8:ad:45:c5:92:f6:23:42:
22:91:f7:2a:67:35:be:93:a9:73:63:5a:37:ae:a6:
fa:fe:58:16:9c:f2:00:7d:58:87:60:51:f8:5a:2d:
42:ed:78:a7:d8:6d:e4:96:83:b6:5e:e2:da:29:75:
4d:0a:aa:83:1b:3d:ec:34:86:aa:8b:fc:70:4a:22:
a7:a8:b1:3e:1d:71:da:12:e2:4e:c0:c2:d0:7e:6a:
24:36:3e:fd:a1:d7:e7:b6:58:1b:22:3a:98:18:f7:
b5:c7:3c:8e:00:d5:9a:b9:f8:1c:57:8c:58:03:37:
e3:72:ae:02:2c:63:62:ca:2d:60:60:f4:09:09:cf:
8f:cf:ad:a6:2e:08:dc:ba:12:42:ae:6d:47:20:5e:
e6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:45:F0:A4:2F:99:B1:57:12:D7:6C:B0:A8:9A:EF:AA:A7:52:FD:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/66d6ec2d-8d0d-3ccd-8433-848985ba990e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:88:7f:8a:89:83:75:8c:3a:7e:25:74:ab:c7:9f:4d:f4:47:
f8:7c:74:bb:cf:a0:d6:93:fa:ba:b2:84:7e:04:a0:50:4b:c5:
48:02:69:9c:63:5e:3b:37:f6:ec:a9:dc:14:dd:48:72:5d:c0:
3a:78:2a:f0:df:7e:bc:b9:92:23:df:07:0f:02:06:1b:96:e0:
da:be:25:ce:a7:da:28:71:24:c9:d5:fe:91:f2:11:2a:bf:1c:
cc:d5:f4:75:44:19:06:44:6d:35:af:36:53:02:8a:70:23:ae:
7d:99:41:6a:a3:5c:bf:bb:d0:92:22:71:7b:d5:5a:65:41:e7:
f2:60:ff:a9:20:72:94:7c:1d:b7:f3:06:0e:fb:92:48:ef:0d:
32:32:bb:f0:c7:ca:d5:6e:c4:ec:40:c9:62:0f:9b:37:99:3a:
d7:9a:0f:c4:94:37:91:5a:42:ec:46:7d:15:40:8b:be:6a:2f:
4e:53:2a:56:5a:64:4e:28:94:98:55:dc:56:37:9b:34:93:45:
a4:66:1e:1b:fb:62:6e:74:2f:5c:6f:dc:20:c9:8f:47:3b:cb:
fb:f5:34:da:0b:dd:12:9c:bb:d4:3e:af:ce:35:0b:53:21:b0:
bc:e6:92:d7:c2:77:9c:f9:2f:ea:d1:46:ee:c7:c9:68:9f:2b:
36:bb:05:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:04:38 2026 by rpki-client