
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5af4c2f-75b2-3392-9daf-0ba63d360bf9.roa
File: a5af4c2f-75b2-3392-9daf-0ba63d360bf9.roa (raw, json)
Hash identifier: 4SNTMe+6mYEqYPgnMfSG2hJwqABxBt9K48d7rj4bd5E=
Subject key identifier: 55:34:BA:AB:A1:AA:D9:3D:2D:87:7E:62:D1:D5:A4:4C:28:ED:FF:FE
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584F9FFDDB82FE56328F2637E580
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5af4c2f-75b2-3392-9daf-0ba63d360bf9.roa
Signing time: Mon 26 Oct 2026 01:00:13 +0000
ROA not before: Mon 26 Oct 2026 01:00:13 +0000
ROA not after: Sun 24 Jan 2027 02:00:13 +0000
asID: 396571
IP address blocks: 2620:74:20::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 16 Nov 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:9f:fd:db:82:fe:56:32:8f:26:37:e5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Oct 26 01:00:13 2026 GMT
Not After : Jan 24 02:00:13 2027 GMT
Subject: CN=8a380a20-4815-40a9-97f3-7bc871aa85ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ec:df:2f:22:1b:55:d4:9a:4c:e0:c2:a6:a7:
2a:21:ec:6d:b5:55:0a:69:de:a6:c6:f2:06:1e:ff:
90:7a:4e:2b:c8:16:24:88:ac:80:0a:35:47:c7:7e:
85:55:a6:0e:1f:b7:e3:6a:65:82:c7:e5:f8:4d:da:
f9:88:f1:07:83:b3:95:1f:7e:bb:44:43:65:af:c1:
d0:99:44:0a:78:3b:d8:c0:44:1a:55:81:4a:c8:66:
8d:fe:c5:82:68:a1:3a:46:ff:e9:2e:dc:db:58:09:
58:de:60:e3:c5:6d:0d:19:d0:ee:07:ff:7d:8e:3f:
66:70:8d:09:63:13:cf:de:d5:79:3a:92:51:41:c9:
9d:b0:6a:4c:43:27:0a:3c:49:3f:c2:11:c8:40:7c:
52:60:15:11:ed:b9:66:d1:c1:e2:12:34:81:72:60:
aa:12:8a:ea:47:7b:2e:c5:5c:a4:62:23:e5:20:c2:
e4:15:37:17:5e:9b:ec:0e:7e:b7:96:9f:f0:66:5a:
d0:98:6b:16:3f:9d:59:4c:5c:02:a6:75:cf:eb:58:
dc:e0:01:fe:81:3d:c2:d3:c4:d1:c4:25:72:1e:d6:
2b:19:cb:b3:6d:e6:aa:5b:0a:29:7f:83:8e:dc:24:
26:15:56:4c:50:5f:5e:c5:8a:69:a1:8b:6a:e0:d6:
2c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:34:BA:AB:A1:AA:D9:3D:2D:87:7E:62:D1:D5:A4:4C:28:ED:FF:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5af4c2f-75b2-3392-9daf-0ba63d360bf9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:20:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:91:9e:34:1f:60:a9:60:47:48:a7:d6:8c:68:02:02:30:19:
20:0a:c9:ee:a8:a8:43:40:d2:a9:3a:20:72:ad:f3:d6:7c:87:
1a:98:98:05:c4:9a:9a:58:66:a4:91:d2:4b:01:4d:f8:67:03:
48:e7:77:36:81:28:7f:20:47:f2:be:a0:e5:03:4a:15:09:c3:
03:62:d7:aa:75:de:27:d2:ab:3d:ec:8f:da:1b:18:ec:28:0f:
26:b9:1e:fa:7f:f9:80:6e:11:a0:f6:2d:5b:89:42:33:72:56:
44:ef:89:e0:c9:15:e0:88:7f:0e:28:d5:bd:fe:ad:26:a0:ec:
6f:56:5d:cf:14:b9:ba:02:8f:0f:1a:c1:85:40:77:b5:46:55:
bc:5e:90:e3:ec:bf:66:3a:fe:50:2b:e2:33:67:18:61:f4:4f:
91:e8:c3:9d:ab:84:e4:dd:3f:bc:33:f6:c9:fb:7e:ec:cd:4d:
f3:ee:f2:ec:c2:38:87:58:ad:f9:45:9f:33:bd:5c:13:e6:54:
c5:b5:3b:d0:4c:7e:35:f1:00:6b:41:f6:86:27:77:50:cf:27:
a2:c6:5a:db:79:80:f0:6e:33:f5:bf:1d:21:45:66:c1:c0:7e:
29:01:33:f4:5e:44:e7:90:1f:30:80:40:5c:7f:4f:29:35:e9:
af:87:7a:e4
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE+f/duC/lYyjyY35YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MTAyNjAxMDAxM1oXDTI3MDEyNDAyMDAxM1owLzEtMCsGA1UEAxMk
OGEzODBhMjAtNDgxNS00MGE5LTk3ZjMtN2JjODcxYWE4NWFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+zfLyIbVdSaTODCpqcqIexttVUKad6mxvIG
Hv+Qek4ryBYkiKyACjVHx36FVaYOH7fjamWCx+X4Tdr5iPEHg7OVH367RENlr8HQ
mUQKeDvYwEQaVYFKyGaN/sWCaKE6Rv/pLtzbWAlY3mDjxW0NGdDuB/99jj9mcI0J
YxPP3tV5OpJRQcmdsGpMQycKPEk/whHIQHxSYBUR7blm0cHiEjSBcmCqEorqR3su
xVykYiPlIMLkFTcXXpvsDn63lp/wZlrQmGsWP51ZTFwCpnXP61jc4AH+gT3C08TR
xCVyHtYrGcuzbeaqWwopf4OO3CQmFVZMUF9exYppoYtq4NYsAwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFFU0uquhqtk9LYd+YtHVpEwo7f/+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTVhZjRjMmYtNzViMi0z
MzkyLTlkYWYtMGJhNjNkMzYwYmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBZkZ40H2CpYEdIp9aMaAICMBkgCsnuqKhDQNKp
OiByrfPWfIcamJgFxJqaWGakkdJLAU34ZwNI53c2gSh/IEfyvqDlA0oVCcMDYteq
dd4n0qs97I/aGxjsKA8muR76f/mAbhGg9i1biUIzclZE74ngyRXgiH8OKNW9/q0m
oOxvVl3PFLm6Ao8PGsGFQHe1RlW8XpDj7L9mOv5QK+IzZxhh9E+R6MOdq4Tk3T+8
M/bJ+37szU3z7vLswjiHWK35RZ8zvVwT5lTFtTvQTH418QBrQfaGJ3dQzyeixlrb
eYDwbjP1vx0hRWbBwH4pATP0XkTnkB8wgEBcf08pNemvh3rk
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:10:16 2026 by rpki-client