
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/5dcc2090-7a9e-38f2-8569-8bc593c08a1c.roa
File: 5dcc2090-7a9e-38f2-8569-8bc593c08a1c.roa (raw, json)
Hash identifier: DLrt5pUu707ZsMSwX7xpNEYvgOegr3Qir/cyRDa2Z7I=
Subject key identifier: A7:98:C6:9F:87:33:3C:7A:0E:C0:3A:E7:EF:F1:2D:7D:D6:EA:07:A7
Certificate issuer: /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial: 010D0C9F4328584CB81C97B5CC83038E0A9C6640
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/5dcc2090-7a9e-38f2-8569-8bc593c08a1c.roa
Signing time: Sun 01 Feb 2026 14:00:40 +0000
ROA not before: Sun 01 Feb 2026 14:00:40 +0000
ROA not after: Sat 02 May 2026 13:00:40 +0000
asID: 1288
IP address blocks: 2620:171:75::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b8:1c:97:b5:cc:83:03:8e:0a:9c:66:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
Validity
Not Before: Feb 1 14:00:40 2026 GMT
Not After : May 2 13:00:40 2026 GMT
Subject: CN=5c31f732-2aec-4e8c-927b-fe445ee2ba3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8f:e1:96:d6:78:4f:b0:c3:d0:86:95:e9:83:
02:dc:3e:10:69:7c:0a:1c:3a:28:8f:03:14:bb:c3:
01:1f:9e:2e:96:40:eb:dc:b8:a2:cc:42:8e:b8:b0:
06:a2:48:36:2b:71:da:b5:3c:6a:71:ae:d8:87:08:
7d:6e:64:00:ad:e0:8d:19:68:39:92:85:9c:7e:e3:
16:1d:48:a1:aa:0f:45:4d:1e:96:a4:3d:03:90:f5:
50:b6:6d:06:7e:1a:2c:27:97:c7:5c:9f:f5:eb:fe:
2f:9a:cf:fc:21:6e:f8:bb:ed:a2:60:f9:41:d7:3a:
e3:46:77:b1:6a:c3:51:ec:40:03:7d:4f:dc:96:66:
51:1d:18:29:50:bd:52:ef:ef:00:16:a3:ac:a1:c5:
81:70:1b:b9:49:d7:73:9a:11:99:a5:94:dc:b8:e9:
21:05:b4:79:4f:da:65:d8:4c:50:1e:e8:d9:17:a3:
a7:3c:a9:f8:66:a9:e4:39:cf:99:fc:68:06:a6:db:
f8:84:aa:c1:1d:b4:e4:cf:3a:08:80:e9:07:6a:07:
53:77:20:22:3e:30:fa:40:40:4c:f0:54:b4:17:bd:
7c:c6:fc:70:10:18:00:16:8f:d8:c2:45:84:54:fa:
f9:0e:e8:52:6d:37:d6:25:c5:d3:11:71:0d:43:60:
76:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:98:C6:9F:87:33:3C:7A:0E:C0:3A:E7:EF:F1:2D:7D:D6:EA:07:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/5dcc2090-7a9e-38f2-8569-8bc593c08a1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
X509v3 Authority Key Identifier:
keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:171:75::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:f7:60:15:47:56:1f:17:9b:c1:86:4c:dd:83:69:4a:a4:0b:
85:8b:14:bf:10:7b:a7:11:dc:85:51:8e:93:08:cb:e9:cb:9a:
1e:20:2e:98:10:d6:2d:05:b9:e3:99:42:b9:1e:c1:c0:b9:3f:
cf:8c:f7:06:8d:34:91:75:f9:cd:d0:f0:5f:f3:76:bb:84:bf:
c2:09:99:80:41:d1:11:77:7f:ad:94:2c:e2:35:61:08:ef:36:
9c:e3:18:6a:05:4a:85:72:a8:9b:00:c0:4a:ec:f9:9f:4f:76:
92:30:33:bc:3e:52:d5:7e:1c:e9:be:84:e5:64:62:c0:93:30:
af:61:6d:b1:7f:6c:2f:ac:3f:4d:7f:7f:07:d9:31:9c:76:56:
62:81:2a:70:e0:2e:69:a7:2a:04:60:7f:36:63:ee:d6:55:d2:
06:fe:79:2f:c5:6c:27:b6:27:ce:e5:91:45:0a:46:0e:52:91:
9c:1e:b2:44:98:a6:20:12:01:12:77:14:e1:ac:b2:35:7c:0f:
5d:0f:0b:f0:40:57:5b:7a:fe:03:ec:aa:4e:9b:95:82:90:d4:
27:0c:93:92:cb:9a:44:60:3c:82:74:36:1c:21:bb:b5:fd:c6:
0c:2b:f5:b3:c5:19:a0:d8:a9:a3:38:89:d9:d6:ad:83:31:98:
ce:57:a0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:58:39 2026 by rpki-client