
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f2770efb-18a7-3ba4-acb5-61c9722570f1.roa
File: f2770efb-18a7-3ba4-acb5-61c9722570f1.roa (raw, json)
Hash identifier: oWzFRTErRH8/nNfotFdv30s4BlhBG5ThvboE+teDpKE=
Subject key identifier: 38:C0:9F:60:0B:5D:69:42:D0:2C:E4:BE:DC:31:39:E4:9C:AD:4E:03
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584DADAAE0DA61E556F5684DB200
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f2770efb-18a7-3ba4-acb5-61c9722570f1.roa
Signing time: Thu 30 Apr 2026 13:00:31 +0000
ROA not before: Thu 30 Apr 2026 13:00:31 +0000
ROA not after: Wed 29 Jul 2026 13:00:31 +0000
asID: 0
IP address blocks: 2620:74:59::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ad:aa:e0:da:61:e5:56:f5:68:4d:b2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Apr 30 13:00:31 2026 GMT
Not After : Jul 29 13:00:31 2026 GMT
Subject: CN=bd2c2fd6-2a0d-43ae-9a97-666915f84254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cc:36:94:df:65:15:b1:dd:5b:b5:df:26:75:
7e:a5:6a:a9:2e:4f:3e:f0:fd:71:e9:8c:39:61:b0:
6c:47:17:a2:13:92:b4:5a:c8:a0:01:5e:a4:8e:62:
73:da:4d:a2:b8:30:07:aa:18:ca:5f:c5:e2:0a:cd:
04:49:34:18:e6:66:fc:16:94:81:79:85:97:7b:3e:
80:1a:58:14:b3:fa:d0:dd:9b:d9:11:df:51:d3:0c:
dd:4c:c2:28:53:ad:cc:5b:5d:59:6c:0d:aa:50:b6:
d3:8c:66:e0:90:db:ec:fb:af:eb:37:4f:96:3e:6d:
bb:49:69:91:6b:86:ce:ad:7a:2a:49:34:dc:63:33:
dc:04:cb:15:67:26:a3:99:dd:d6:c5:fe:46:18:fd:
98:e9:5a:82:a4:b7:5b:68:f5:29:51:0a:26:2f:60:
9f:ef:ae:09:28:0f:8b:fe:1e:72:94:a6:74:29:89:
a0:a2:1e:ae:0d:cc:d3:42:0f:a2:ee:d2:5f:8e:74:
f3:4d:aa:9f:d3:a8:b1:fb:c1:65:c4:c1:cc:ff:fe:
aa:67:24:eb:3e:26:76:11:72:01:c6:b0:23:45:16:
c1:cd:08:b8:6d:e8:c7:ae:81:c1:bf:ca:34:ea:6d:
2f:6d:33:78:7a:01:ea:19:38:84:c0:1b:dd:66:c0:
8c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C0:9F:60:0B:5D:69:42:D0:2C:E4:BE:DC:31:39:E4:9C:AD:4E:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f2770efb-18a7-3ba4-acb5-61c9722570f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:59::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:a5:15:53:af:d3:ac:d5:94:96:cb:56:82:14:c5:1d:df:1d:
68:2b:43:45:2f:04:b3:5f:71:39:35:d1:48:1b:17:f9:05:da:
0c:01:5b:72:17:1e:9d:d8:1c:de:26:e6:cd:49:f0:2d:c2:5b:
91:57:35:97:95:f3:05:ca:47:6f:0a:3f:8d:95:bc:40:83:96:
b3:35:69:37:35:1d:f3:b3:5a:e6:f6:24:22:a1:3b:26:b2:8e:
2a:67:33:3e:37:3d:c3:b0:99:02:23:4b:70:61:06:4b:c8:f3:
85:b5:cd:a0:33:3b:2b:57:5f:26:08:4d:f9:ee:8a:6b:f3:52:
77:7a:dc:17:4b:47:92:14:9a:c7:b4:e7:a7:d6:36:b7:2f:ce:
b0:55:38:db:21:62:13:f3:ca:ee:f6:b6:b0:1b:34:20:81:d0:
13:0e:be:60:3e:70:38:83:6c:f5:24:92:71:c3:a8:76:b7:ed:
f3:5c:17:90:13:da:61:00:a5:b2:38:8c:f4:65:3a:25:6c:f0:
3b:d6:08:c2:2d:6d:92:1d:6e:f5:4c:9c:bc:a9:89:27:cb:8f:
ec:9f:33:e3:8e:58:d1:65:63:a7:54:b1:6a:51:ea:f2:86:e8:
b4:a1:ad:5b:f0:e2:cd:a5:0c:98:1f:7a:12:59:6d:92:6f:e5:
25:c0:36:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:24:04 2026 by rpki-client