
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1330328-ebfd-3593-a363-00510367b9e0.roa
File: d1330328-ebfd-3593-a363-00510367b9e0.roa (raw, json)
Hash identifier: I7xNfO2MAp8NuKsWEPsVlYscHT3Z2hoA7QY5CrzGqsk=
Subject key identifier: 31:C6:F2:67:63:CA:9D:09:EE:10:F8:1C:E5:4F:29:FC:C2:1F:59:4E
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584D32F5B35A55F86B610AA64F00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1330328-ebfd-3593-a363-00510367b9e0.roa
Signing time: Tue 17 Mar 2026 14:07:03 +0000
ROA not before: Tue 17 Mar 2026 14:07:03 +0000
ROA not after: Mon 15 Jun 2026 14:07:03 +0000
asID: 397198
IP address blocks: 2620:74:2a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:32:f5:b3:5a:55:f8:6b:61:0a:a6:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Mar 17 14:07:03 2026 GMT
Not After : Jun 15 14:07:03 2026 GMT
Subject: CN=e2fcade8-3a6c-4b30-8c2b-6726db47172a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:93:af:bf:27:6d:e3:83:f1:d8:0b:6b:5b:56:
80:b5:ac:e7:96:ca:61:62:5d:7c:c2:c1:5d:40:b5:
f3:5e:49:74:49:44:13:bd:2e:74:3b:e0:84:d0:8d:
7e:b2:b1:43:b7:7e:20:b7:b8:35:21:4f:c8:20:44:
85:2e:3c:cb:ad:11:44:0d:f1:cd:b9:13:e9:1f:9e:
fd:1e:26:18:42:d8:10:06:0e:ce:0e:60:73:57:f8:
70:e6:e2:16:3e:46:84:87:29:b3:04:b0:5e:67:42:
07:ce:94:70:85:7c:1b:67:9a:71:18:9e:ea:51:19:
1d:c6:78:c3:38:28:93:c0:20:df:90:ae:1b:d8:34:
a5:ab:73:04:e6:fa:92:60:ed:4b:8b:38:19:83:5d:
7e:52:dd:48:79:fc:33:7c:1e:85:18:73:59:ff:3e:
9a:0e:c9:02:ff:78:14:69:a0:04:91:29:c6:c5:7d:
33:51:f7:b2:c8:9c:6a:9e:59:bf:0d:ef:1f:98:b2:
1c:26:3b:8d:05:cd:9d:4a:f2:9f:62:2c:5d:a5:f3:
50:e7:36:f3:d3:41:c4:e0:d5:9a:69:92:8f:5d:a3:
b2:e8:59:b6:4c:ba:b8:87:ba:d3:68:43:28:2c:5c:
b8:fa:ed:5b:3f:e8:86:83:db:31:45:06:46:e3:46:
63:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C6:F2:67:63:CA:9D:09:EE:10:F8:1C:E5:4F:29:FC:C2:1F:59:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1330328-ebfd-3593-a363-00510367b9e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:2a:74:50:ff:8a:3f:88:a5:1c:51:92:90:10:f1:5e:b8:17:
65:1e:23:eb:9f:91:8e:5b:d5:b0:4a:57:86:ce:d2:0a:81:48:
6c:ae:e9:5f:40:46:f6:72:d2:a5:f4:0a:51:60:93:d8:a9:a6:
61:87:de:11:5b:0c:70:27:92:ac:5f:ed:3f:91:b0:42:25:ea:
7e:5e:d0:94:2e:f8:c0:37:4e:48:7b:c0:f5:84:c1:a0:b8:71:
38:3e:8b:c1:6c:e0:85:4b:8a:cb:ea:80:8f:98:64:a0:99:2b:
05:cd:16:ad:f5:94:8f:09:66:9c:17:5a:44:89:42:5f:d5:e1:
17:0d:dd:c7:11:5b:b6:ae:3d:dd:92:4d:f9:5d:d5:7e:40:9b:
a6:ac:ee:57:52:fa:cc:98:18:b1:25:a6:58:76:e2:8d:a1:8c:
e3:9c:9a:c0:1d:e8:50:ec:2b:7d:16:be:34:b0:d7:ac:59:dd:
9c:b0:cc:b4:f2:bd:a1:49:e1:47:b9:d0:77:14:9b:e1:b8:bb:
12:f1:bd:24:5a:53:ad:1c:68:38:c9:14:89:13:b1:a8:a5:f9:
65:67:7f:57:6a:19:55:95:5a:c9:cb:5f:5f:dd:f0:1d:b5:cd:
7d:4c:17:be:07:53:be:69:1f:22:1d:85:d8:01:12:df:69:14:
87:c1:c9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:12:09 2026 by rpki-client