
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cbd8546d-0b75-3ab3-8b8a-32f1d856e7f0.roa
File: cbd8546d-0b75-3ab3-8b8a-32f1d856e7f0.roa (raw, json)
Hash identifier: WpNAWyB10u4Gx8N9MQ++hQ89Zbc3pbsgVWOaCZXHG/c=
Subject key identifier: 9D:43:3F:31:1B:BC:33:D7:6F:96:A4:84:87:0D:1B:35:B9:77:7D:F1
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584D300A8325CF767FA62ADAFA00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cbd8546d-0b75-3ab3-8b8a-32f1d856e7f0.roa
Signing time: Mon 16 Mar 2026 13:00:40 +0000
ROA not before: Mon 16 Mar 2026 13:00:40 +0000
ROA not after: Sun 14 Jun 2026 13:00:40 +0000
asID: 20431
IP address blocks: 2620:74:2b::31/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:30:0a:83:25:cf:76:7f:a6:2a:da:fa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Mar 16 13:00:40 2026 GMT
Not After : Jun 14 13:00:40 2026 GMT
Subject: CN=cd6bd1f2-159d-4ab6-a065-c3e4a10c7d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6f:99:35:44:46:6d:19:79:15:0f:2a:cd:36:
66:f6:94:1e:15:76:03:48:43:9c:4f:10:33:04:2e:
37:6b:c9:30:cd:e4:63:7a:fe:9f:d2:64:27:56:da:
f3:fc:99:8f:ad:8e:a8:b1:90:c9:82:67:d7:a5:7c:
36:f4:22:63:6d:97:11:d4:80:38:9a:c5:66:eb:69:
bd:b2:be:c0:62:a8:9c:df:5c:84:73:95:be:25:59:
69:fa:06:76:b8:46:09:74:27:31:b2:c8:cd:b6:99:
a3:35:e2:ae:d6:2a:f4:b8:66:88:44:f3:28:93:bc:
af:08:83:c4:42:b3:95:c1:12:40:58:aa:3f:ed:8f:
3e:21:c5:bd:97:b6:91:ad:4b:72:d7:9c:55:98:14:
38:36:32:64:eb:00:b4:52:f2:8b:44:73:03:d0:56:
76:12:d8:5f:ab:22:99:66:7f:45:e7:60:be:3b:de:
0d:61:a1:66:da:22:a7:00:78:a1:36:dc:dc:c6:1f:
1a:a2:94:ba:12:4e:f5:f3:2c:73:6f:3a:19:4f:a0:
3e:f7:29:2a:45:f8:49:6b:82:9a:2c:4c:9a:99:13:
98:06:17:4f:43:48:9a:f7:34:e7:fe:ce:f9:78:4e:
a8:44:12:d7:56:9b:7b:c4:fa:1a:58:e2:3c:60:ca:
8c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:43:3F:31:1B:BC:33:D7:6F:96:A4:84:87:0D:1B:35:B9:77:7D:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cbd8546d-0b75-3ab3-8b8a-32f1d856e7f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2b:0:0:0:0:31/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:fb:66:58:34:62:e2:18:f8:ba:92:86:9b:30:22:78:63:7c:
1f:d2:ce:06:27:cc:f5:92:73:7a:57:b1:26:44:bd:b0:67:15:
c7:4c:aa:97:0c:b8:46:50:a2:7f:71:8d:51:4a:a7:8a:f3:39:
f0:62:1b:d9:60:13:35:f8:f4:fb:ea:b5:d5:67:c3:91:ff:de:
40:f0:fd:0d:1d:a4:ef:39:fd:cc:35:5c:e0:72:12:c0:01:de:
7d:9b:c5:d3:f4:04:d4:ad:c8:34:67:6c:26:28:3b:aa:1b:a2:
9e:48:32:77:f4:cb:77:f9:e1:a9:30:2b:22:bf:70:85:27:21:
bb:66:a9:d5:0c:94:ce:11:7d:ed:96:15:cd:2e:fa:93:0c:af:
36:f7:d9:b0:88:44:82:99:a9:67:45:bd:ba:46:f6:4d:6f:39:
1b:c5:5f:8b:22:9c:22:e0:93:0b:89:d4:53:03:6c:56:aa:26:
f0:a5:71:79:a8:80:42:8b:91:de:71:fd:c2:78:e2:0c:5a:c2:
d4:ed:88:a2:60:db:c8:8d:ae:79:d4:b9:f0:3b:06:a4:62:f2:
72:8f:70:84:03:44:cc:83:7e:b6:62:46:28:39:27:ce:f5:08:
b3:c7:cd:ee:92:1b:91:a7:33:9c:d5:54:bf:98:10:e5:3f:09:
be:0c:2d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:24:37 2026 by rpki-client