
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c5b0f990-9be9-3a74-9776-31ef0483cf3a.roa
File: c5b0f990-9be9-3a74-9776-31ef0483cf3a.roa (raw, json)
Hash identifier: gKJiz9A2g85d/mrOokWG1Qc0a0OZJNJY6SD4IgeJ65M=
Subject key identifier: E6:FB:A1:F0:CC:D6:01:B8:1D:34:A4:17:B7:E0:14:49:09:67:C2:9A
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584D091251E680C40F3403648A80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c5b0f990-9be9-3a74-9776-31ef0483cf3a.roa
Signing time: Mon 02 Mar 2026 14:00:41 +0000
ROA not before: Mon 02 Mar 2026 14:00:41 +0000
ROA not after: Sun 31 May 2026 13:00:41 +0000
asID: 396547
IP address blocks: 2620:74:2c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:09:12:51:e6:80:c4:0f:34:03:64:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Mar 2 14:00:41 2026 GMT
Not After : May 31 13:00:41 2026 GMT
Subject: CN=0ca0bbc0-00ea-4694-b1b1-355e7bc9d77f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e8:cc:97:2d:ae:3a:b7:94:a8:e9:56:45:bf:
2d:f9:5e:d3:4f:10:d8:22:23:65:68:7e:3c:1d:99:
58:76:a2:6f:5d:24:f4:bd:92:88:fe:6a:b8:e1:84:
8c:bc:3e:29:b3:f5:c5:ea:7c:5c:d6:f8:41:2d:ab:
97:ea:7a:11:70:e9:c0:fe:77:6a:b2:4b:73:dc:33:
41:c5:2a:1e:79:2e:40:9e:db:35:7f:d9:2c:f2:a8:
aa:d3:9a:28:68:3c:3e:73:65:ee:68:62:0e:35:77:
e1:f7:41:c2:d7:dd:a4:f8:21:6b:8f:eb:40:fe:47:
e9:f6:54:0d:f9:40:40:b6:55:7b:21:30:c9:67:13:
fd:5c:77:19:93:f5:d7:34:5d:f6:ce:5d:aa:14:bc:
c6:86:3a:74:91:24:cf:5e:64:58:86:19:08:24:70:
9e:72:93:d8:1d:4b:e9:ba:f0:01:e3:f9:62:cb:73:
a8:3c:69:9b:be:18:b9:e1:15:0f:bf:04:92:55:82:
7f:88:66:a0:b7:69:35:46:6a:a2:4d:1f:29:5c:6a:
2a:71:13:7e:c4:ac:f4:42:80:d6:7f:d6:50:d4:c5:
02:ed:cb:a9:86:aa:64:90:af:32:44:87:8c:70:c2:
14:bb:19:2e:1f:dc:05:91:ff:4f:61:8f:0f:53:66:
9c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:FB:A1:F0:CC:D6:01:B8:1D:34:A4:17:B7:E0:14:49:09:67:C2:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c5b0f990-9be9-3a74-9776-31ef0483cf3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:82:d9:83:2a:a5:af:45:a7:a5:6a:85:06:a6:18:1c:9f:5a:
a0:fd:e1:93:4a:fe:07:9d:ef:d1:81:bc:a2:b5:b0:e2:a5:24:
d7:77:8e:72:a7:c1:eb:2b:f9:2d:b2:86:84:b7:58:ba:54:0c:
45:94:f7:3a:51:7b:c9:bc:aa:ad:5b:08:fb:b5:c7:06:a7:15:
5d:4c:10:a5:52:3c:ab:f4:86:58:0c:4d:bb:1f:0b:e0:42:6a:
84:c3:e4:f7:1c:99:f9:ad:7d:31:3c:a7:68:67:18:dd:18:78:
b2:8f:86:a7:db:6b:51:51:28:88:e5:62:7c:a0:a1:aa:03:8e:
c2:a1:a2:c4:2f:e0:85:c0:fd:9e:21:c6:0b:94:a7:57:8e:9e:
59:2e:41:3c:7d:87:35:ef:e3:5a:5d:46:ab:3b:aa:53:15:8c:
e0:e9:2f:98:bc:7b:d8:06:47:f5:5d:bd:18:16:7e:83:5e:2a:
d5:25:5b:27:c0:7d:c7:66:9a:13:e5:2a:1e:08:63:45:e6:7f:
1c:cb:5c:43:9c:30:a5:11:30:1f:25:bf:38:15:78:69:64:57:
62:e0:60:6a:57:d6:15:a4:61:0f:1a:7f:ea:77:5b:f3:16:3f:
cf:84:f1:a5:fd:9a:2b:30:ae:52:32:23:6b:f8:c3:56:55:65:
e7:a0:0d:9d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0JElHmgMQPNANkioAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk
MGNhMGJiYzAtMDBlYS00Njk0LWIxYjEtMzU1ZTdiYzlkNzdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApujMly2uOreUqOlWRb8t+V7TTxDYIiNlaH48
HZlYdqJvXST0vZKI/mq44YSMvD4ps/XF6nxc1vhBLauX6noRcOnA/ndqsktz3DNB
xSoeeS5Ants1f9ks8qiq05ooaDw+c2XuaGIONXfh90HC192k+CFrj+tA/kfp9lQN
+UBAtlV7ITDJZxP9XHcZk/XXNF32zl2qFLzGhjp0kSTPXmRYhhkIJHCecpPYHUvp
uvAB4/liy3OoPGmbvhi54RUPvwSSVYJ/iGagt2k1RmqiTR8pXGoqcRN+xKz0QoDW
f9ZQ1MUC7cuphqpkkK8yRIeMcMIUuxkuH9wFkf9PYY8PU2acWwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOb7ofDM1gG4HTSkF7fgFEkJZ8KaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzViMGY5OTAtOWJlOS0z
YTc0LTk3NzYtMzFlZjA0ODNjZjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACeC2YMqpa9Fp6VqhQamGByfWqD94ZNK/ged79GBvKK1sOKlJNd3
jnKnwesr+S2yhoS3WLpUDEWU9zpRe8m8qq1bCPu1xwanFV1MEKVSPKv0hlgMTbsf
C+BCaoTD5PccmfmtfTE8p2hnGN0YeLKPhqfba1FRKIjlYnygoaoDjsKhosQv4IXA
/Z4hxguUp1eOnlkuQTx9hzXv41pdRqs7qlMVjODpL5i8e9gGR/VdvRgWfoNeKtUl
WyfAfcdmmhPlKh4IY0XmfxzLXEOcMKURMB8lvzgVeGlkV2LgYGpX1hWkYQ8af+p3
W/MWP8+E8aX9miswrlIyI2v4w1ZVZeegDZ0=
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:16:08 2026 by rpki-client