
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f172c845-b3d0-3664-912d-a767c6382394.roa
File: f172c845-b3d0-3664-912d-a767c6382394.roa (raw, json)
Hash identifier: xh45GVbwhS8tVhHsBTzcbTTJeNJnwQsJo2PKQY2Ydd8=
Subject key identifier: 41:B5:E6:43:B4:26:94:E4:C8:21:4F:60:D0:45:9B:2A:13:D8:21:A1
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584E7204DE392AEF695490894980
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f172c845-b3d0-3664-912d-a767c6382394.roa
Signing time: Thu 09 Jul 2026 21:00:11 +0000
ROA not before: Thu 09 Jul 2026 21:00:11 +0000
ROA not after: Wed 07 Oct 2026 21:00:11 +0000
asID: 36625
IP address blocks: 2620:74:21::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:72:04:de:39:2a:ef:69:54:90:89:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jul 9 21:00:11 2026 GMT
Not After : Oct 7 21:00:11 2026 GMT
Subject: CN=852300ea-12be-48ea-a94c-a79447a3f102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3b:31:f3:53:f8:e3:26:bc:d7:c1:d4:49:93:
7d:c3:94:a7:f2:89:95:5d:98:9e:78:91:65:40:20:
c5:46:66:f4:81:29:b2:07:48:9a:48:df:e3:5d:d2:
78:9b:cd:7b:49:2f:1a:e1:86:d8:5e:a9:65:25:8c:
eb:f0:58:e4:ca:54:30:23:3b:a2:14:20:b1:6d:3d:
c3:77:dc:e0:38:4e:45:bc:86:48:d4:0e:f1:a9:7c:
10:fc:9f:15:50:28:c0:9c:d4:d2:e2:e3:58:1f:27:
ed:85:c9:b7:20:4c:af:11:d8:42:47:87:64:d4:34:
15:b9:86:b6:ed:54:51:cc:7d:bf:97:64:a4:b5:7b:
23:a8:fe:a9:d4:91:1b:55:4e:57:f9:23:c4:17:f5:
35:e7:d9:ff:4a:80:ad:49:5b:c4:cc:89:fa:2f:97:
b7:90:4c:2b:88:5d:3f:22:97:8b:a4:6e:66:9b:c4:
d7:90:cc:85:7b:4e:8c:72:27:e6:74:29:ab:ae:ba:
89:3e:84:75:6c:b3:b9:85:69:7b:fb:15:bf:c1:35:
6d:11:75:3b:8d:86:a4:bd:94:65:a6:24:a4:f3:92:
5a:72:e3:50:6b:87:65:91:f6:1d:34:75:34:65:b6:
be:a4:a4:b3:35:5b:ff:00:29:b5:d7:3e:14:4d:64:
e3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B5:E6:43:B4:26:94:E4:C8:21:4F:60:D0:45:9B:2A:13:D8:21:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f172c845-b3d0-3664-912d-a767c6382394.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:21::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:14:29:22:f9:6b:eb:04:c0:0b:0a:4e:96:f4:09:10:a0:ec:
96:b3:09:6f:9d:37:ec:23:6b:9b:57:1f:e6:f2:7f:5e:82:f2:
5d:f8:07:ff:cf:4d:8b:56:b2:d4:37:78:2c:28:54:be:0b:62:
23:e4:13:ad:5c:d1:35:ce:43:91:86:b4:66:94:79:15:6a:f9:
e6:c1:48:2b:70:44:1a:a2:3d:80:bf:f6:b7:f1:25:df:cb:73:
c5:36:75:df:a4:32:ee:8b:1b:44:5b:66:40:1b:09:22:b7:0c:
ab:b1:62:ff:33:31:57:14:4f:d5:45:38:86:30:6c:3c:c5:86:
fa:49:34:ef:92:a8:da:f3:58:26:3c:fe:88:a5:3b:d9:e3:99:
04:45:df:60:42:98:26:79:fb:ba:f6:37:28:c9:15:f9:03:dd:
ac:ab:c8:b9:85:af:16:6d:e7:eb:d9:47:d0:a0:c9:c9:52:bc:
5f:e0:dc:eb:da:f9:fc:2e:8a:5a:a8:f1:b9:fa:96:5f:91:0f:
0e:2a:c3:a6:77:49:d2:ed:0a:86:c1:47:34:1b:72:40:89:ea:
dc:bb:42:f2:df:e2:97:24:d8:7f:75:0e:25:31:72:8c:80:62:
51:71:22:1f:a6:dc:ae:b9:23:d2:82:c3:0b:4a:73:6f:49:b5:
66:8a:42:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:46:10 2026 by rpki-client