
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21e84a68-0232-38b3-a57c-bff4933abd17.roa
File: 21e84a68-0232-38b3-a57c-bff4933abd17.roa (raw, json)
Hash identifier: utmPdwD1kUvFUXpWMTRgh1GMO/B9HF9RbL4pHzYQQMk=
Subject key identifier: 40:B3:D1:A4:9C:E2:F8:0F:43:8A:4B:E8:3C:A6:D6:AC:9D:07:60:A8
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584E1319936469EAA5697324FF40
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21e84a68-0232-38b3-a57c-bff4933abd17.roa
Signing time: Fri 05 Jun 2026 21:00:12 +0000
ROA not before: Fri 05 Jun 2026 21:00:12 +0000
ROA not after: Thu 03 Sep 2026 21:00:12 +0000
asID: 396591
IP address blocks: 2620:74:2a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:13:19:93:64:69:ea:a5:69:73:24:ff:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jun 5 21:00:12 2026 GMT
Not After : Sep 3 21:00:12 2026 GMT
Subject: CN=88ea79d0-f73e-4adc-8534-3b63de7044a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:92:88:0d:90:0f:31:b7:31:51:5b:0b:39:bc:
84:63:e0:ed:6d:44:42:37:4c:e7:4a:0d:41:99:ce:
a6:34:ef:2c:b4:81:92:be:02:04:d3:49:7b:cf:fc:
06:af:f6:36:34:e0:4f:d7:a5:e3:a1:18:29:14:77:
cc:18:6b:f6:30:97:28:66:f6:73:48:aa:95:7f:a5:
a6:56:85:56:df:b7:4e:06:50:0e:ea:c7:79:7f:0e:
b4:99:d4:a3:f1:72:ac:53:33:9c:33:96:d0:06:e3:
4a:89:bd:d6:fd:fd:b6:62:40:9e:f9:66:a9:79:21:
8a:8a:7f:5a:9e:c5:35:df:a1:07:60:1a:da:25:5c:
40:e1:3f:b9:0f:96:b1:8b:08:64:cb:4e:f1:af:33:
c8:c5:58:6c:91:11:83:63:8a:66:5c:00:ed:95:9e:
10:7d:ef:f8:2c:87:5d:70:6d:3f:d6:55:b6:15:4b:
f6:27:b0:f4:64:84:e0:fa:ab:eb:bd:43:f7:05:96:
bb:2c:3b:17:f3:6e:d4:91:d0:fd:b1:cb:72:f6:82:
87:0b:f8:15:49:c4:fa:68:d4:d2:cc:90:82:ec:dd:
4f:d9:69:e1:3b:b1:6a:b2:e4:3f:22:6e:dc:02:5e:
59:07:99:ba:81:0f:1f:fb:d3:cc:0a:65:33:8f:a5:
f8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B3:D1:A4:9C:E2:F8:0F:43:8A:4B:E8:3C:A6:D6:AC:9D:07:60:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21e84a68-0232-38b3-a57c-bff4933abd17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:c9:e7:3f:ac:41:51:9f:e2:26:ed:94:46:ba:86:13:48:0f:
a6:30:b3:19:60:ef:11:3f:6a:fb:e0:7a:d1:61:23:2b:9b:4c:
cd:52:02:1e:09:e2:f8:b5:29:3f:b2:3c:92:d2:c5:69:fe:63:
e7:f6:ca:8d:ff:bf:fb:53:34:bc:9c:2d:03:b7:28:3c:87:f2:
70:f4:34:67:d0:98:e3:bc:00:c7:b5:35:9f:02:f5:43:c9:37:
dc:b8:c9:5f:98:ef:75:6f:7e:83:e1:09:9e:30:3e:34:8c:c0:
dd:f8:dc:94:2b:e0:af:35:d9:e9:52:b6:d4:db:e5:f8:0f:08:
b7:9d:0a:b3:fe:ca:7f:bb:97:09:30:d9:dd:b5:9a:3c:6b:43:
27:71:9c:8d:cd:53:41:b1:ae:86:40:1d:4e:a1:a2:f1:a1:ca:
6b:3b:03:f9:e1:59:87:fc:96:dd:e5:c1:60:27:cf:fa:e2:8d:
2e:5e:55:97:df:6a:ea:a5:f4:32:8e:9e:63:78:af:c3:f3:d6:
de:7d:78:75:4b:0c:2a:2c:35:97:82:31:32:6f:91:2a:2d:a0:
7e:eb:bb:7f:86:11:2c:58:3a:6c:d4:a0:c1:2c:e6:79:aa:77:
e0:7e:ac:a7:f7:09:38:ce:68:e2:1d:7a:2c:d6:2e:68:64:1c:
d6:80:03:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:42:54 2026 by rpki-client