
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb2cd4eb-6f17-39ec-9542-3a195e4b7136.roa
File: bb2cd4eb-6f17-39ec-9542-3a195e4b7136.roa (raw, json)
Hash identifier: PuKBHcWBMZ1R67VXtxvz2cEbj8YRwDLPl1wRIAE2h3c=
Subject key identifier: 90:6D:1D:F4:3A:0D:78:10:4F:EE:B6:C1:09:7D:EA:8B:3A:4F:EC:88
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584DBBC1EE95D4A2B00F475EB600
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb2cd4eb-6f17-39ec-9542-3a195e4b7136.roa
Signing time: Tue 05 May 2026 14:08:29 +0000
ROA not before: Tue 05 May 2026 14:08:29 +0000
ROA not after: Mon 03 Aug 2026 14:08:29 +0000
asID: 16838
IP address blocks: 2620:74:1e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:bb:c1:ee:95:d4:a2:b0:0f:47:5e:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: May 5 14:08:29 2026 GMT
Not After : Aug 3 14:08:29 2026 GMT
Subject: CN=6b6dae55-a3e6-418f-bfac-77f3cdd3ed72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:bf:05:46:d1:75:ad:a7:8f:a8:2d:f9:d6:c7:
aa:22:97:ac:67:04:32:33:3d:23:4a:e9:31:29:53:
dd:a2:c4:dc:37:bc:e1:4a:0f:b2:a4:fd:47:e8:76:
84:60:69:ff:31:d4:da:0e:82:78:b8:4e:88:96:5d:
db:89:13:bd:c3:02:0d:0f:01:fe:e9:47:ec:2d:19:
4e:5b:cf:f4:7d:74:11:c7:78:05:90:3e:16:03:ff:
41:4f:8d:4c:44:da:5b:9a:dc:bd:fb:48:64:14:05:
03:7f:af:fc:9b:a7:26:4f:d7:3b:60:7a:fc:8f:90:
ef:b0:b7:17:14:4b:55:ce:9d:fc:72:83:21:71:6f:
20:fd:17:ae:c0:0d:18:e4:f8:66:10:62:c3:ad:2e:
66:b6:0b:d5:15:fa:62:93:36:19:4c:ae:f3:1a:b0:
de:d4:1e:72:54:7d:f5:06:d7:df:df:32:61:26:54:
de:9b:97:43:23:76:96:df:be:b8:cc:d2:80:b4:7b:
c0:c3:b9:03:26:3a:19:9d:32:9a:f2:a3:3c:3e:bc:
ef:69:2a:41:ed:54:78:37:27:72:fa:d1:b4:e6:74:
3f:d3:a1:49:ab:b2:3b:b1:10:0f:16:3d:c4:01:6c:
18:68:25:a1:00:03:c2:3d:f1:79:9e:ce:ac:52:ac:
84:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:6D:1D:F4:3A:0D:78:10:4F:EE:B6:C1:09:7D:EA:8B:3A:4F:EC:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb2cd4eb-6f17-39ec-9542-3a195e4b7136.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:1e::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:1a:2b:14:0b:e3:36:22:63:72:74:44:47:4a:8e:5f:cd:e0:
8c:d0:48:52:58:38:1e:bf:34:d8:14:c7:6c:b6:d0:35:69:3d:
ca:7d:d3:9a:ea:d8:3c:8a:7f:6b:65:55:dc:8f:b4:ac:4b:37:
34:4b:20:8b:3a:50:b3:a9:61:6d:c0:00:fd:e9:ff:a1:73:d5:
ea:22:56:86:f2:fa:c5:14:11:16:67:7b:aa:52:72:0d:b8:fe:
61:5f:d2:c9:16:ac:22:fb:23:6f:95:da:c7:e8:de:b5:50:e1:
31:bb:a6:07:4a:1c:3e:11:dc:5b:3d:07:3c:6f:15:de:c4:71:
f4:9a:51:77:31:09:31:14:b0:66:55:49:01:f2:a7:39:b7:0d:
c5:a9:d6:8c:9d:3a:eb:93:e5:7d:02:11:cd:51:30:8b:c7:59:
46:e7:20:41:43:52:56:ef:6c:1c:5b:64:c2:e8:8c:38:b3:92:
5d:e0:b5:e9:de:87:91:d2:6e:28:41:38:40:25:36:9d:8b:ad:
de:d4:7d:4f:12:1d:12:63:9f:e5:33:12:65:18:e6:21:04:3e:
82:2e:db:29:4b:3e:fa:2b:a5:40:a7:57:23:78:27:47:f3:01:
89:aa:80:27:bf:2a:51:c6:56:b6:e0:10:e4:87:8a:c3:d7:7d:
36:e6:93:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:51:20 2026 by rpki-client