
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/436a1d15-6f74-3f87-b79e-821778eec721.roa
File: 436a1d15-6f74-3f87-b79e-821778eec721.roa (raw, json)
Hash identifier: n59Hmqui9miclsT/TsqEF+xAkt17NsCkkvSfm3oLs8w=
Subject key identifier: D7:A5:58:C1:9A:27:30:6F:73:F2:FD:8F:C7:6F:F8:6A:45:16:A9:2C
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584D7B6A93B54A30BCAC13BF3580
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/436a1d15-6f74-3f87-b79e-821778eec721.roa
Signing time: Sun 12 Apr 2026 13:00:30 +0000
ROA not before: Sun 12 Apr 2026 13:00:30 +0000
ROA not after: Sat 11 Jul 2026 13:00:30 +0000
asID: 36624
IP address blocks: 2620:74:20::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7b:6a:93:b5:4a:30:bc:ac:13:bf:35:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Apr 12 13:00:30 2026 GMT
Not After : Jul 11 13:00:30 2026 GMT
Subject: CN=c3aad3bc-dbeb-4870-992f-bcddbb63cfc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:39:a6:e5:df:2c:b9:a0:a4:86:f2:03:09:71:
d0:ef:32:cc:56:38:56:2a:7f:ab:96:c5:c8:f9:08:
3d:91:24:87:19:06:56:73:d8:6d:bf:0b:fb:ab:60:
5c:ee:e9:66:62:e1:94:89:e5:ab:a9:87:df:c8:04:
39:6e:cd:0d:79:c6:a6:b9:a1:4e:60:64:3a:41:06:
60:21:5e:ee:f8:07:d5:34:05:15:99:58:06:ce:1c:
b6:2a:1d:8d:0d:7b:ae:98:72:86:57:26:4f:5c:e6:
65:06:f2:39:39:d2:f7:3b:eb:8f:3c:37:cc:c3:c8:
79:34:35:48:f5:c2:d4:6a:54:2f:17:bf:13:71:dc:
a3:6e:33:a5:2b:78:6d:f2:a8:09:cd:9f:05:31:18:
f2:8d:16:cd:9e:9c:e1:df:60:5d:3c:fb:b6:7f:20:
c3:d0:bc:d3:50:6a:36:99:24:f4:2e:9b:fe:9c:34:
e2:7e:0d:2d:10:4d:6e:a6:c9:fc:20:2c:fe:1a:1c:
5d:73:de:bd:50:bc:eb:a5:ca:85:3e:14:5c:45:4d:
13:ca:23:fb:99:c2:b5:c5:0c:d6:fb:fd:44:aa:88:
bf:af:af:5b:a8:f3:58:e2:e9:e0:92:1e:ca:30:e0:
78:66:9b:51:33:c1:45:0a:00:d1:3e:16:bb:26:6a:
53:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A5:58:C1:9A:27:30:6F:73:F2:FD:8F:C7:6F:F8:6A:45:16:A9:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/436a1d15-6f74-3f87-b79e-821778eec721.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:20:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:de:08:42:43:ff:97:e6:9d:53:a7:aa:5b:ed:2b:91:35:5a:
67:c6:48:36:31:71:35:2a:cc:d5:9d:cb:95:d0:d7:11:f8:f9:
db:b5:78:ad:c2:83:f8:4e:64:58:ed:d3:5d:6b:cb:ed:46:7c:
03:d9:5c:f1:43:bf:7c:64:91:66:7c:b6:d6:6a:55:ea:af:91:
e7:4b:e9:14:f6:24:87:6f:32:c1:a2:6b:2a:09:c7:3d:a6:8c:
a0:62:e5:a1:f9:4d:ad:93:73:fe:ab:c6:3d:a8:75:e2:47:ca:
42:7b:47:ff:9e:f9:a7:2a:cc:70:d3:db:1c:82:00:5f:76:63:
69:45:08:ea:9c:2c:97:bf:98:b8:d0:2f:8c:a7:26:d7:22:d2:
51:2d:32:eb:a1:45:63:44:2f:04:5b:56:66:b9:82:d2:c3:c8:
69:51:79:96:d5:51:12:a5:f3:25:29:05:4d:db:52:fa:43:f1:
00:5a:19:df:ae:aa:0d:b4:4f:6f:79:34:97:32:4e:f4:f8:0c:
79:cf:3c:d6:ca:01:ca:2d:67:24:4e:9c:ee:bd:a6:2d:d5:eb:
c2:bf:dd:84:e3:66:59:a4:82:57:11:16:27:03:06:f1:e3:7a:
72:94:f8:79:47:a5:df:39:4e:f3:ad:d5:8d:08:8f:a1:dd:c5:
8a:2d:68:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:21:05 2026 by rpki-client