
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef8df252-f36d-3655-8163-5a2e52bb2462.roa
File: ef8df252-f36d-3655-8163-5a2e52bb2462.roa (raw, json)
Hash identifier: WGcH58o8sFVWc0ITDQ4jgtWjr/++hVSFJmvct+sBUg0=
Subject key identifier: 06:2E:57:E1:48:FF:BC:D6:EE:C7:6F:07:52:71:F6:BB:28:8D:B3:EB
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584D91C00E56DED1E3790A652D80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef8df252-f36d-3655-8163-5a2e52bb2462.roa
Signing time: Mon 20 Apr 2026 13:00:33 +0000
ROA not before: Mon 20 Apr 2026 13:00:33 +0000
ROA not after: Sun 19 Jul 2026 13:00:33 +0000
asID: 396549
IP address blocks: 2620:74:21::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:91:c0:0e:56:de:d1:e3:79:0a:65:2d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Apr 20 13:00:33 2026 GMT
Not After : Jul 19 13:00:33 2026 GMT
Subject: CN=27f8e0ba-fe6a-408e-86ce-43c12bfa619a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:17:08:3d:b9:b0:33:8a:30:b6:9a:ce:93:d3:
04:f7:4b:66:8c:16:1c:08:f1:3d:13:fd:9a:e3:96:
a2:f3:e4:f5:99:28:25:41:2f:05:5a:12:a3:ca:65:
be:a9:03:e2:54:7c:e1:d4:64:6f:e9:d9:0f:02:6f:
99:9e:69:1f:eb:a0:6c:0b:2b:d2:91:14:fc:b0:79:
69:85:27:69:4e:1f:38:9e:54:84:1d:50:19:b7:04:
76:95:54:84:b4:38:ae:88:8a:80:4a:f0:7b:6b:53:
e1:2a:d4:93:e4:4c:d8:cd:ab:77:73:ba:f1:eb:8d:
a3:3d:22:9d:94:d4:9f:b1:11:99:a8:21:63:0b:e9:
ea:42:36:94:7f:7c:62:e1:1e:18:8f:1c:d8:b0:38:
bd:bf:40:82:8d:7f:1b:3d:53:d2:5e:15:99:4e:8f:
fe:3f:af:8a:74:dc:bb:4a:65:ff:cb:b0:43:d9:dd:
88:08:c9:ac:25:2d:21:25:78:2d:14:39:9d:43:42:
28:55:34:da:57:5c:1d:c9:8b:8a:a2:39:b0:6d:2e:
f9:ab:68:f9:f6:4e:9e:68:c9:95:9a:38:ee:80:c3:
e3:8d:a3:e1:bd:e9:cd:1f:b8:55:8c:d5:d5:7a:ce:
c4:bf:50:61:43:49:07:f4:7d:94:84:86:b0:92:2f:
ad:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:2E:57:E1:48:FF:BC:D6:EE:C7:6F:07:52:71:F6:BB:28:8D:B3:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef8df252-f36d-3655-8163-5a2e52bb2462.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:21::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:79:a7:ae:86:76:e5:39:9c:95:c8:42:ec:73:0c:9b:88:ff:
b4:5c:c4:1f:a8:f7:0b:6d:95:6d:0d:3a:92:bb:a7:21:b9:72:
ba:96:f4:b1:5a:fb:1c:21:e1:27:eb:26:ab:3f:ff:ca:a8:23:
2f:2d:2c:64:d0:db:73:59:79:4f:42:82:55:11:7f:55:82:3c:
03:4e:6e:bb:98:6b:45:55:3b:42:d7:2c:50:ac:99:e9:70:c2:
6a:60:4f:f8:06:39:cc:33:57:91:c5:e7:05:c8:de:54:91:49:
99:38:c5:3b:ff:78:1f:04:87:24:e3:31:f2:3f:09:d6:84:1a:
31:74:9b:3d:9e:3d:4e:ab:a8:5d:63:40:81:44:9f:9b:f7:d2:
2d:1d:1d:64:3c:47:fa:e5:ed:f5:1f:32:5c:72:b0:62:cc:2e:
dd:e5:65:8e:84:cc:b1:4c:59:02:65:1c:9d:59:60:17:c9:21:
aa:9e:33:4e:30:91:aa:04:fb:46:38:ba:aa:7d:fa:23:d3:c0:
cd:a5:99:69:a1:fa:e4:aa:ef:08:87:50:15:2a:25:bd:81:f4:
f8:6e:c4:bf:80:cb:92:2f:e5:71:b2:cf:40:51:dc:10:49:5d:
94:2e:92:d8:6c:55:af:67:7d:97:81:9b:7e:8d:a2:86:81:21:
c5:69:4f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:01:52 2026 by rpki-client