
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7f62afff-aa69-319e-9289-47b85c8ce530.roa
File: 7f62afff-aa69-319e-9289-47b85c8ce530.roa (raw, json)
Hash identifier: 5pCr5GOrZE6nKZH5lJg38cpj6L2utrIu9kKiVdjth8w=
Subject key identifier: 55:58:CF:F3:24:EC:3C:26:29:FC:62:8D:A0:63:8C:B5:0D:25:B6:D5
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584D237A45A0749CE345A9667E00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7f62afff-aa69-319e-9289-47b85c8ce530.roa
Signing time: Thu 12 Mar 2026 01:00:32 +0000
ROA not before: Thu 12 Mar 2026 01:00:32 +0000
ROA not after: Wed 10 Jun 2026 01:00:32 +0000
asID: 396612
IP address blocks: 2620:74:2b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:23:7a:45:a0:74:9c:e3:45:a9:66:7e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Mar 12 01:00:32 2026 GMT
Not After : Jun 10 01:00:32 2026 GMT
Subject: CN=8f5227c4-a307-4bb5-956a-ae7e0e11989b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ab:50:01:c7:cc:55:ab:25:e2:41:31:35:83:
50:d8:0b:cf:e0:07:06:ce:80:b1:34:78:d2:95:c4:
38:af:7b:7e:9c:af:79:88:3b:34:fd:a5:6f:de:16:
d2:2b:78:69:72:6d:cd:e2:cc:b6:3e:5b:30:d7:fa:
e7:37:4e:ce:76:c3:1b:7c:43:26:db:85:71:fa:54:
2e:49:4e:b3:29:94:65:f3:d1:59:b9:15:29:fe:cc:
3e:28:62:7c:e4:3a:46:96:cf:22:9a:d9:0b:2f:64:
ce:85:4c:84:6c:59:fc:44:98:55:0e:dd:9e:77:7d:
17:dc:e3:ed:62:15:5c:90:4f:41:5e:38:c4:06:aa:
42:d4:c1:f7:9f:6f:f1:23:6a:21:a5:6c:f9:7f:ba:
4f:d5:db:a7:1e:cd:81:cd:5f:c5:f6:95:c3:fd:53:
f5:74:68:04:8c:1a:63:4a:d3:9b:a9:16:da:97:36:
b3:a7:0a:07:39:d3:01:b8:28:7a:6e:c8:15:ac:5c:
fb:28:b0:74:36:10:5d:f2:96:96:0c:e9:5c:79:fc:
a2:e9:e9:03:7f:aa:7d:6c:67:e5:47:d5:22:cb:2e:
eb:90:26:1c:21:a0:49:ec:1b:f6:a4:68:19:93:10:
5f:24:81:3c:e3:e8:da:11:45:5a:8f:99:57:a6:6f:
f4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:58:CF:F3:24:EC:3C:26:29:FC:62:8D:A0:63:8C:B5:0D:25:B6:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7f62afff-aa69-319e-9289-47b85c8ce530.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:9e:b1:2c:b0:ea:fc:40:31:10:a9:a2:50:76:a4:a9:72:03:
f5:41:a3:49:a4:a7:65:14:d8:c2:67:18:f3:f3:4f:bb:1d:fd:
a7:88:13:11:b7:57:28:f6:00:1d:95:49:74:25:fb:fd:0f:82:
cb:bc:de:10:7a:56:51:65:8e:75:57:77:7e:2e:0b:0e:b8:19:
9e:1b:47:e3:e3:5f:84:b9:6f:69:21:94:7e:80:ed:0e:d4:15:
cf:a2:bb:27:b6:4e:d7:a3:16:3b:3a:a6:ac:9c:b6:ea:fe:7b:
7f:35:32:f0:8d:39:74:ee:d0:ec:57:d4:77:7c:0b:29:ac:aa:
6a:e9:5d:a0:db:73:7f:09:3c:2d:b6:51:45:76:2a:39:ff:06:
d9:32:1c:a7:37:40:42:66:63:b8:65:b2:74:13:61:63:ab:40:
c4:31:23:3e:2b:b1:e4:cb:7b:7f:f2:d3:5b:5e:61:68:20:ef:
7a:71:0b:e5:5e:8d:95:f9:dd:95:bc:be:d6:b0:31:26:a0:7d:
ec:fe:d2:73:d0:64:17:56:7e:b8:ac:b2:e7:53:23:80:67:9e:
e5:09:44:0e:f5:1f:2e:71:9c:a9:f6:d1:75:fc:59:e3:da:27:
bf:e4:9c:4b:3a:cb:9d:d7:0f:49:96:8a:88:b1:c2:a7:7f:92:
57:a8:ca:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:51:53 2026 by rpki-client