
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/45fa6d9c-9a58-3762-933a-ab420dcd2b9a.roa
File: 45fa6d9c-9a58-3762-933a-ab420dcd2b9a.roa (raw, json)
Hash identifier: i9KyqJC9YtgwZShdUyacxNJlernXCiiIYF2ucpnEg4Q=
Subject key identifier: 08:29:E1:C0:CF:D6:3D:47:4A:75:D0:AE:B0:26:42:35:1B:C1:53:68
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584EA79320209B1D4BB6B1480D00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/45fa6d9c-9a58-3762-933a-ab420dcd2b9a.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 20431
IP address blocks: 2620:74:2c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:93:20:20:9b:1d:4b:b6:b1:48:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=53c2fb22-99b7-4957-a804-bfd4bee1ca89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b1:e3:cd:62:64:0f:f9:62:44:aa:9e:1f:ce:
f1:0e:49:4b:21:ec:59:27:05:04:e3:f6:1d:89:08:
bb:57:19:7d:0f:1a:90:cb:fc:30:e8:7c:e3:9c:0f:
7d:69:fb:73:6a:d2:7b:83:8c:53:69:0a:d1:1b:16:
56:b5:4c:ad:54:5a:a6:c6:d2:dc:7d:be:1b:5c:2f:
c6:63:97:ee:28:f1:b5:e7:04:80:f5:6f:24:d0:0c:
f9:e1:29:29:d4:a2:54:0e:fd:53:73:cd:4a:f9:45:
d1:c9:36:c0:c1:43:af:52:2e:33:b8:89:6c:c9:19:
0d:85:53:91:8f:f6:98:4d:56:a6:ec:fb:28:87:85:
2d:c3:78:ce:35:4b:de:f4:70:59:01:cc:64:31:5a:
6a:e4:bc:5a:28:9e:3c:72:3b:94:b2:e1:28:a1:d5:
b7:6b:0b:fe:44:98:7c:64:fc:06:e0:9a:08:98:07:
a7:5b:f6:56:28:9c:67:31:85:98:4b:e6:8b:9d:1d:
de:84:2f:ff:83:02:15:f6:ac:df:b3:db:75:81:e2:
42:33:a3:bb:84:47:5e:81:07:ad:62:3d:08:3b:be:
92:ed:18:8f:d7:60:cd:c7:c3:23:1e:f4:98:a4:34:
b8:43:d6:03:04:5d:ad:63:ce:72:6e:a4:22:9a:cd:
8f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:29:E1:C0:CF:D6:3D:47:4A:75:D0:AE:B0:26:42:35:1B:C1:53:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/45fa6d9c-9a58-3762-933a-ab420dcd2b9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:7d:00:73:2b:a9:ca:bc:01:5b:19:ec:55:6a:ce:f4:39:0d:
f8:01:86:b5:97:ee:23:e1:b4:cb:48:9c:7e:79:70:dc:73:f0:
4c:e9:ec:16:e8:98:22:9a:39:90:0b:9d:f6:49:5a:65:69:f3:
d3:cc:48:28:c3:20:9f:ce:f5:34:0d:71:19:bb:54:d9:9a:23:
2e:9b:f8:d8:0e:3f:34:c7:3c:c2:4d:ae:6a:f2:01:37:bd:8e:
8f:ef:65:68:0a:83:af:22:41:0a:be:81:57:ed:5a:23:95:d4:
0e:e3:32:63:db:4f:d0:39:81:25:db:fa:66:fa:b5:d9:36:af:
82:c1:42:50:54:9e:ad:28:8a:72:fb:93:9c:16:29:44:fd:dc:
b0:35:23:5a:4c:f3:dd:c5:a5:27:d4:85:77:db:5f:9c:76:06:
f1:c5:e0:2a:31:5c:a2:3c:ae:e6:74:c1:02:24:a9:9f:f3:18:
88:51:03:67:c8:a3:98:3b:11:29:02:94:5c:2d:d1:0a:75:57:
53:93:48:98:2a:fb:ca:ef:b4:b9:d1:a9:6d:68:24:3e:c2:6f:
68:64:02:7f:14:55:01:40:6f:bb:35:d3:bf:1b:a1:6e:2e:c4:
8d:ef:d9:9d:3e:b7:3b:f0:41:b2:94:c8:a8:b7:25:03:56:d1:
26:72:0f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:30:25 2026 by rpki-client