
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c7a63104-21a9-3698-9961-34d74fdc502c.roa
File: c7a63104-21a9-3698-9961-34d74fdc502c.roa (raw, json)
Hash identifier: Dwlq1ary0sN7uBHoMvcntCiDp9i5SUD5Q96ZY0v32dg=
Subject key identifier: 89:EF:FE:27:35:2A:0C:18:44:20:A0:DF:26:F5:CC:E5:3C:2D:B0:E8
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584D32F5AE85CB7B6A827FFDC8C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c7a63104-21a9-3698-9961-34d74fdc502c.roa
Signing time: Tue 17 Mar 2026 14:07:01 +0000
ROA not before: Tue 17 Mar 2026 14:07:01 +0000
ROA not after: Mon 15 Jun 2026 14:07:01 +0000
asID: 396550
IP address blocks: 2620:74:2a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:32:f5:ae:85:cb:7b:6a:82:7f:fd:c8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Mar 17 14:07:01 2026 GMT
Not After : Jun 15 14:07:01 2026 GMT
Subject: CN=c38711cd-a682-4e9c-8f7c-ba228d08fab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a4:5f:41:b9:ab:87:25:69:6d:77:3f:0d:25:
2b:93:32:70:75:af:de:16:22:54:a1:8a:19:7f:23:
3d:54:56:4b:cf:e9:16:94:e6:9f:59:de:5b:82:ce:
cb:55:6a:92:13:21:0c:fe:32:23:b5:33:88:97:bb:
20:66:95:29:10:ba:1f:d6:00:c3:5d:46:9a:7d:9b:
d2:fe:a2:a5:db:8d:5d:89:63:e7:de:2b:57:8e:27:
d5:5a:6d:c3:f6:f8:37:9d:e0:31:35:30:0e:42:c1:
f5:a7:fe:6a:0f:10:e8:da:85:3f:28:6c:46:c7:67:
1f:39:1f:07:22:cb:e4:6f:ae:08:e8:c5:ae:44:e8:
54:e9:b8:a0:3a:b6:5d:10:fb:e4:54:75:94:1f:f9:
01:9c:6d:0e:de:c1:69:e1:28:d1:69:5b:7c:39:0f:
fb:73:27:a0:86:b7:26:3d:f5:57:3e:a3:d1:22:ff:
db:32:61:79:3e:7b:f6:00:2a:2d:60:10:58:81:6f:
31:f5:af:60:05:22:bd:41:56:97:d7:30:8b:9d:80:
08:55:13:62:8e:7c:26:0a:20:f5:fc:76:b7:c8:67:
79:03:1e:54:38:48:6d:3c:fe:88:31:d0:ca:99:ad:
98:d9:1b:a1:40:7a:c6:00:10:25:6d:1a:ab:e8:b2:
c3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EF:FE:27:35:2A:0C:18:44:20:A0:DF:26:F5:CC:E5:3C:2D:B0:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c7a63104-21a9-3698-9961-34d74fdc502c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:2d:c6:c3:d9:86:93:95:b9:15:39:5e:21:92:75:9d:90:ed:
51:6f:b6:87:01:1f:98:f6:c3:b1:03:17:76:0b:db:43:84:40:
05:2a:79:00:c8:cb:69:7b:74:93:a2:46:a1:22:72:bc:c7:39:
41:5f:23:1d:48:41:23:2a:3a:e4:be:69:b7:95:79:30:6c:cd:
2d:5e:af:0d:58:94:89:e0:d7:1e:bb:5b:13:4d:f0:45:0a:b2:
05:1a:68:ca:ea:83:29:72:9a:b9:30:7e:7d:d0:34:9b:88:7a:
07:e1:83:f1:fd:04:b5:20:ea:5d:15:bd:0c:0c:b1:b4:4b:a6:
fe:46:1b:b3:a6:f4:6d:c3:87:b8:a6:cc:75:7c:80:41:60:ac:
d3:05:7f:2a:2b:8f:55:9a:cd:d0:cc:5c:d1:dc:4d:fc:60:30:
3d:34:36:49:1a:ff:9a:11:0d:2b:a9:87:b2:7e:11:ba:07:37:
7b:aa:82:b3:f5:a0:2f:af:1e:42:1b:c4:eb:47:95:7d:62:5e:
af:10:13:b4:ad:39:ec:42:0b:3c:23:75:17:2a:2a:f5:6b:3b:
a1:7d:a9:f2:31:c9:2a:1f:ac:e4:7e:62:b9:b3:73:b7:0a:51:
f7:4b:97:a7:2c:b8:64:6f:14:cb:1d:10:d2:73:2e:60:f4:64:
7d:6d:13:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:08:03 2026 by rpki-client