
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b4b186d2-0846-36c6-b156-321c94c9e275.roa
File: b4b186d2-0846-36c6-b156-321c94c9e275.roa (raw, json)
Hash identifier: eDWRbaJKQEG+pDtzX1LG3wv9BENriatyem0J3JsKnpM=
Subject key identifier: F1:4B:3A:4D:2D:84:7B:82:D2:47:5A:E5:F2:CA:45:CD:5B:07:D4:97
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584D237A6AAA5359F53FEBDB49A0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b4b186d2-0846-36c6-b156-321c94c9e275.roa
Signing time: Thu 12 Mar 2026 01:00:32 +0000
ROA not before: Thu 12 Mar 2026 01:00:32 +0000
ROA not after: Wed 10 Jun 2026 01:00:32 +0000
asID: 7342
IP address blocks: 2620:74:4a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:23:7a:6a:aa:53:59:f5:3f:eb:db:49:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Mar 12 01:00:32 2026 GMT
Not After : Jun 10 01:00:32 2026 GMT
Subject: CN=85f5f553-d715-4cee-b70e-02ab5883951c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fd:d8:28:85:67:ab:c7:c0:0f:81:a5:dd:60:
15:86:98:f1:a2:69:3b:43:eb:cf:08:78:8e:e4:94:
3b:07:34:4c:59:a0:4a:cb:44:2c:9b:56:e1:31:48:
0c:32:85:a3:8f:fa:2a:88:45:ca:33:69:e2:f8:03:
43:e4:10:a7:eb:99:1e:a3:38:af:cb:fc:4b:a7:f0:
2d:10:1e:ab:89:a5:ed:8c:4f:f7:11:0d:6b:47:23:
03:71:92:47:37:74:1f:0b:cf:40:08:5f:44:98:5c:
1a:fa:e8:ed:c8:d7:cb:82:36:5c:6d:70:d4:8f:b8:
42:43:39:93:a4:9c:26:33:57:c0:32:da:5a:53:6e:
1a:aa:0e:f9:dc:40:89:42:d4:3a:e6:b7:bd:eb:cd:
24:5e:1f:ce:57:54:5e:63:27:2e:33:4b:17:95:f5:
5a:99:2f:94:b4:21:e4:7e:85:23:e4:fb:b0:3a:b2:
91:34:6e:b3:4f:b1:13:30:c0:01:bc:52:2e:13:25:
59:13:c8:e4:5a:d1:70:26:32:d9:a4:a2:48:d0:1c:
60:12:fa:a6:6c:e6:da:93:6e:ef:5f:35:0e:ad:73:
05:28:6f:c5:c8:c3:82:88:11:4a:d9:1e:75:a9:05:
41:14:4e:85:36:aa:8b:0c:12:65:64:8c:5c:0b:ca:
81:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4B:3A:4D:2D:84:7B:82:D2:47:5A:E5:F2:CA:45:CD:5B:07:D4:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b4b186d2-0846-36c6-b156-321c94c9e275.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:4a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:e8:d3:8a:e0:ef:4c:b6:9b:83:99:e3:b9:b5:87:e7:57:e5:
01:ee:eb:f3:4e:9d:86:19:9d:80:19:8d:c9:4d:57:22:d4:11:
eb:9a:90:46:49:a9:58:40:61:fd:33:3b:ba:e6:c1:ed:27:50:
bc:9b:58:ce:ce:80:1a:85:ac:af:76:c4:77:93:52:f6:b6:25:
4e:1e:96:d8:da:99:07:7d:34:a6:96:9e:5a:73:c6:6a:ea:e7:
76:2e:00:b3:9c:a3:db:25:ac:8d:89:0f:28:9e:d8:da:e4:2e:
1c:c7:e1:a4:5a:f9:d3:13:8c:f1:f5:0a:3d:3d:d6:0d:7f:ab:
da:4b:69:4a:9f:5f:74:ec:6d:73:f4:35:5f:6f:4f:79:10:03:
a2:7e:e5:54:d1:dc:24:e2:fa:05:8f:ab:f4:5e:cf:6f:99:94:
af:5f:cd:fc:c4:db:1c:69:9d:90:ae:35:e8:ff:58:ec:52:2c:
12:b3:27:6c:42:52:62:49:a6:40:72:f9:0f:e5:ca:51:4b:f9:
80:33:42:5d:1c:f9:d7:79:ce:0f:1a:32:b5:ac:26:6b:d0:7e:
fa:73:44:76:2a:cb:4e:dc:5d:04:ee:6b:bc:e2:b5:2b:71:0d:
c6:fc:05:02:ff:94:bb:0f:73:2b:d2:01:34:4f:0b:87:3a:0c:
d2:56:75:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:49:39 2026 by rpki-client