
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/343bf4db-a103-3bc0-b1d3-e43f00d5e4ec.roa
File: 343bf4db-a103-3bc0-b1d3-e43f00d5e4ec.roa (raw, json)
Hash identifier: 0OwOUEzMERtlWgFFMVAFruAaR7BQqT2t7ID4JP01wms=
Subject key identifier: 51:42:6B:72:32:99:5B:95:1D:F3:07:21:40:B2:83:BD:4E:8A:42:AB
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584D59EA99DFCC6CD95DBBDC2AD0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/343bf4db-a103-3bc0-b1d3-e43f00d5e4ec.roa
Signing time: Tue 31 Mar 2026 13:00:30 +0000
ROA not before: Tue 31 Mar 2026 13:00:30 +0000
ROA not after: Mon 29 Jun 2026 13:00:30 +0000
asID: 36623
IP address blocks: 2620:74:21::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:59:ea:99:df:cc:6c:d9:5d:bb:dc:2a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Mar 31 13:00:30 2026 GMT
Not After : Jun 29 13:00:30 2026 GMT
Subject: CN=471f98ea-662f-4c1d-b2be-d0ee0d52d24f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:32:cc:2b:a1:bc:16:86:35:22:4b:34:5d:4e:
50:2f:34:20:82:51:c7:fc:2f:6b:cf:86:3a:13:5a:
40:ea:7d:06:e6:e1:4e:33:5d:f1:f1:bb:13:7f:6e:
90:18:2a:e0:e6:8a:fd:b4:0d:a6:da:3c:cc:c0:60:
b9:4b:75:3b:92:bb:56:85:16:1e:39:4f:cb:66:5d:
b7:c5:86:c3:9c:d5:1c:fa:32:a4:32:b1:b1:f4:fb:
5b:e8:ef:5c:85:8a:a1:fb:8f:69:7b:72:91:e8:3a:
ff:65:5a:16:0e:38:eb:cd:81:58:a9:64:a4:4e:7e:
e2:53:c6:1c:34:aa:0a:c5:bc:8e:3f:1c:87:69:b0:
31:81:df:3f:51:b3:75:4d:9d:69:a6:19:da:c1:70:
86:4a:86:34:40:07:06:b0:31:ad:12:9a:0b:f9:53:
54:a9:f3:b7:bd:57:fb:be:cc:2f:33:76:ce:5b:8a:
c1:28:1c:72:30:78:15:09:f9:1d:7d:d3:32:d0:59:
98:14:56:79:df:fc:89:1d:54:ff:c2:a6:3d:d7:8d:
c8:0b:fd:4e:7b:a6:46:a5:1b:e5:ba:56:79:c9:8c:
94:5d:68:a3:a0:5a:9b:f0:e5:2c:5a:d4:10:6a:90:
45:6b:a9:97:ea:36:96:f6:6f:6f:49:af:af:40:c7:
00:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:42:6B:72:32:99:5B:95:1D:F3:07:21:40:B2:83:BD:4E:8A:42:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/343bf4db-a103-3bc0-b1d3-e43f00d5e4ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:21:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:fb:df:86:e7:f5:68:d5:d9:d8:e1:f0:85:7e:08:d4:5e:13:
10:93:e7:3e:b9:2a:d8:4f:87:f7:18:24:a8:08:95:11:3b:8a:
2f:21:d2:8a:d4:cd:e6:9a:50:83:a9:84:16:d0:8a:19:2f:b1:
97:49:14:d2:1a:19:63:4e:10:dd:05:64:be:8d:bd:27:74:50:
db:cd:35:1c:39:32:b6:1c:48:37:fc:cd:8b:48:c6:3d:6c:57:
eb:c2:b9:54:32:78:fe:e1:31:50:e3:f8:a5:99:20:ed:0e:a8:
c6:3c:5d:b8:e4:dd:21:8a:4a:c8:68:48:fc:57:36:34:fe:ed:
53:56:81:33:ee:5a:61:fa:ba:b5:40:88:ba:69:94:cc:48:94:
81:7b:14:e5:5e:3e:d3:c6:59:81:89:dc:95:0a:0c:7c:14:36:
8e:29:e3:dc:e5:39:bd:f8:1e:15:30:36:f0:b0:7d:9b:a2:c6:
a1:1f:75:e9:a2:16:5f:d0:3e:79:8c:10:d8:be:0a:ef:59:dc:
42:3d:9d:eb:73:75:8e:3c:ca:3f:97:b8:cf:63:87:e0:1f:4d:
6c:e8:f0:29:11:87:06:8a:21:f7:8f:c2:32:04:9b:9b:0a:02:
e5:e3:ca:02:85:f4:79:56:f6:06:1c:22:df:81:35:1c:96:f3:
d4:38:b4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:15:50 2026 by rpki-client