
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/83be0e98-52a8-373a-a887-5264943fc0d8.roa
File: 83be0e98-52a8-373a-a887-5264943fc0d8.roa (raw, json)
Hash identifier: TqO7991dkHd6HHUjL8JOvaGFvKTysjG57LFwlGlhDlI=
Subject key identifier: B3:C8:3D:DB:8B:B4:E5:00:1E:F1:76:63:DA:66:54:0E:34:79:6E:61
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584D9E5023AA91C2AB9E306DDB00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/83be0e98-52a8-373a-a887-5264943fc0d8.roa
Signing time: Sat 25 Apr 2026 01:00:24 +0000
ROA not before: Sat 25 Apr 2026 01:00:24 +0000
ROA not after: Fri 24 Jul 2026 01:00:24 +0000
asID: 7342
IP address blocks: 2620:74:a5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9e:50:23:aa:91:c2:ab:9e:30:6d:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Apr 25 01:00:24 2026 GMT
Not After : Jul 24 01:00:24 2026 GMT
Subject: CN=499c3af6-ef85-423d-970b-d177b0929d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7d:ca:fe:c0:95:f8:d6:bd:ff:d3:76:3a:cf:
64:5f:db:dc:f4:b0:91:a4:ad:51:c4:56:93:ad:c6:
6c:2a:51:2a:6c:1d:d0:76:f1:b8:25:71:19:57:00:
7b:fa:bc:49:a3:45:64:d0:ed:f6:15:6b:45:78:62:
34:8f:71:24:81:b1:ef:97:da:72:06:0e:d0:96:02:
34:c0:a0:a6:04:0a:1f:80:0a:1c:8a:f9:9c:fc:62:
0c:32:9e:ac:6c:95:2a:1d:21:0c:7e:ef:08:db:6d:
3d:0b:7e:11:3b:be:ba:47:81:6f:79:48:08:d8:f5:
30:6f:07:2e:4f:72:ea:b5:8d:58:04:ad:bf:f0:1b:
9a:16:36:08:b3:3a:00:44:a8:02:70:0e:e8:de:0a:
49:40:a2:47:94:9a:b7:2c:83:ae:30:b2:83:44:e7:
ca:8d:fc:0e:df:b3:6f:cc:fe:92:2a:1e:b3:8b:e0:
06:77:aa:2c:95:e9:49:0a:4b:8d:82:ff:8c:f6:6d:
26:68:50:71:c4:d3:dd:7d:28:fc:a8:6b:ae:a5:af:
dd:47:d8:84:a4:18:13:39:22:84:4b:a3:7f:33:83:
54:1f:cd:f8:1e:7b:93:d6:54:03:32:35:06:9e:38:
62:79:e7:67:62:a5:c8:f8:e5:58:86:ea:46:ad:fe:
ef:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C8:3D:DB:8B:B4:E5:00:1E:F1:76:63:DA:66:54:0E:34:79:6E:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/83be0e98-52a8-373a-a887-5264943fc0d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:a5::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:22:f2:d7:5d:e8:78:8b:b5:b2:04:e6:8c:07:09:91:55:d3:
ca:4e:4a:17:31:22:c1:1d:6a:f7:b1:02:39:8c:c8:4b:39:88:
a4:e4:51:38:53:b8:3e:46:e4:45:9f:df:bb:40:d3:65:1d:f6:
31:1b:5f:f3:fc:13:7e:7c:12:c1:59:b5:7a:4b:d6:38:fe:e3:
0a:48:cb:d5:ed:cf:fe:98:94:92:55:2a:51:77:2e:77:66:29:
fa:ab:1f:40:31:bb:a4:72:4c:3b:2a:6c:ef:ae:0b:4c:87:16:
2e:1a:7a:5f:24:82:93:e0:c6:da:c1:0a:15:d3:37:a6:4f:b2:
92:92:e6:34:00:ad:d0:da:6c:e5:b4:90:7c:aa:cc:eb:50:a7:
e8:9d:95:5e:10:05:e4:1d:1d:da:82:78:80:a5:7a:23:06:2d:
2d:9a:a3:4e:cb:e6:e2:65:36:62:65:00:51:62:d7:06:d6:9c:
f1:44:0a:98:9d:f8:24:ac:85:a5:54:1f:26:c0:58:1e:4c:a8:
92:27:19:24:83:5d:ef:05:b7:8e:f9:87:8f:41:6f:a3:f9:77:
4c:f7:aa:0c:4d:c3:b4:cc:f5:0e:37:5a:09:6a:aa:33:40:48:
8d:12:de:42:7a:8c:1b:d5:d7:1c:c1:4e:5f:de:f8:ed:ef:db:
e6:78:63:49
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2eUCOqkcKrnjBt2wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk
NDk5YzNhZjYtZWY4NS00MjNkLTk3MGItZDE3N2IwOTI5ZDU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6H3K/sCV+Na9/9N2Os9kX9vc9LCRpK1RxFaT
rcZsKlEqbB3QdvG4JXEZVwB7+rxJo0Vk0O32FWtFeGI0j3EkgbHvl9pyBg7QlgI0
wKCmBAofgAocivmc/GIMMp6sbJUqHSEMfu8I2209C34RO766R4FveUgI2PUwbwcu
T3LqtY1YBK2/8BuaFjYIszoARKgCcA7o3gpJQKJHlJq3LIOuMLKDROfKjfwO37Nv
zP6SKh6zi+AGd6oslelJCkuNgv+M9m0maFBxxNPdfSj8qGuupa/dR9iEpBgTOSKE
S6N/M4NUH834HnuT1lQDMjUGnjhieednYqXI+OVYhupGrf7vJQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLPIPduLtOUAHvF2Y9pmVA40eW5hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODNiZTBlOTgtNTJhOC0z
NzNhLWE4ODctNTI2NDk0M2ZjMGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdACl
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAki8tdd6HiLtbIE5owHCZFV08pOShcxIsEdavexAjmMyEs5iKTk
UThTuD5G5EWf37tA02Ud9jEbX/P8E358EsFZtXpL1jj+4wpIy9Xtz/6YlJJVKlF3
LndmKfqrH0Axu6RyTDsqbO+uC0yHFi4ael8kgpPgxtrBChXTN6ZPspKS5jQArdDa
bOW0kHyqzOtQp+idlV4QBeQdHdqCeICleiMGLS2ao07L5uJlNmJlAFFi1wbWnPFE
Cpid+CSshaVUHybAWB5MqJInGSSDXe8Ft475h49Bb6P5d0z3qgxNw7TM9Q43Wglq
qjNASI0S3kJ6jBvV1xzBTl/e+O3v2+Z4Y0k=
-----END CERTIFICATE-----
Generated at Wed May 13 08:01:19 2026 by rpki-client