
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6a3b2996-242b-3f9a-8071-623330e2f499.roa
File: 6a3b2996-242b-3f9a-8071-623330e2f499.roa (raw, json)
Hash identifier: xivzNP1AmCpg1plZFXoA6M0YcBho4rxoDyeXMxdT1b8=
Subject key identifier: 4D:3C:67:3F:37:0E:6E:28:6E:CD:D3:84:00:F9:A5:28:3A:CE:27:DF
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584EA7904E5F65DBDF1FB6E48040
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6a3b2996-242b-3f9a-8071-623330e2f499.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 397209
IP address blocks: 2620:74:20::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:90:4e:5f:65:db:df:1f:b6:e4:80:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=81972a53-4bb5-4d70-8dcb-dcf0bbaebfd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ec:2c:2e:4d:13:cd:ef:58:f8:13:c1:17:b0:
3b:9b:32:22:8d:f7:68:f1:9f:d9:ae:ad:25:69:c7:
01:8a:c4:2d:ac:aa:f3:73:3f:be:4b:b0:6b:d4:bc:
f1:cc:fc:c6:08:4e:16:7b:19:e8:e1:40:7a:27:0e:
15:cf:81:92:b2:fb:03:a7:60:26:7d:c9:fa:a5:46:
b9:49:4d:4e:96:ad:8d:62:17:e1:d9:47:44:c2:50:
d9:6f:8b:52:2a:90:b0:b4:30:1d:f0:1b:02:59:ed:
ed:37:e3:b8:db:24:8c:2e:f8:fa:7a:18:e6:3a:21:
68:a0:99:b9:df:c2:f4:5b:70:34:6d:1a:49:49:f8:
d6:33:d7:bc:83:7e:7c:61:1b:37:7b:fe:6f:a4:0a:
95:2b:f9:9c:a4:b3:4d:07:42:f1:38:71:29:04:e0:
26:ac:df:a7:8a:dd:7d:bf:dc:f5:a9:25:3c:02:10:
ad:06:7f:d8:29:54:a3:43:11:d8:8c:fe:9d:a3:2f:
68:14:7d:d1:c5:4f:4f:42:82:6b:6a:44:73:b2:94:
e8:6e:ba:21:91:9c:e6:fd:66:01:b2:24:ea:0d:a3:
d2:f9:2c:c6:ab:31:ba:18:7b:2b:5a:13:ab:03:5d:
33:29:92:3b:db:3b:10:28:8e:46:f4:73:2a:d9:21:
68:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3C:67:3F:37:0E:6E:28:6E:CD:D3:84:00:F9:A5:28:3A:CE:27:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6a3b2996-242b-3f9a-8071-623330e2f499.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:20::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:2a:b8:1a:19:3d:39:07:4e:38:ba:7a:ad:44:52:22:e4:bb:
a4:02:de:62:27:7a:ed:78:26:e1:de:b6:51:96:b5:d5:b7:ff:
73:89:b9:ee:09:13:4f:25:b0:1d:d0:40:f0:d7:98:83:7e:75:
ba:61:48:9f:41:8e:ee:01:e4:03:25:ac:c4:4d:8d:34:5f:61:
07:b5:70:21:1c:89:8c:61:c1:4e:5a:bc:1e:c1:f4:9c:d0:0c:
9e:df:79:a1:e1:5d:ca:ba:a1:21:79:95:92:bc:76:06:b2:72:
cc:02:f1:19:2d:bb:f7:35:56:e5:7f:b0:b9:e4:09:f1:c2:44:
f2:a4:86:0a:31:14:fe:3b:46:ec:39:a6:f2:a4:24:fb:fd:ad:
b5:dd:72:e9:0d:7a:35:ad:76:c1:63:9e:7a:74:f0:4a:59:15:
6e:3a:e6:17:03:6f:6a:33:ed:e5:19:49:b5:1a:45:fc:5a:a5:
04:39:6b:bc:d6:0e:97:e9:5a:23:e1:58:e6:84:be:ce:95:6e:
3d:c3:ac:ea:e2:e1:6d:05:43:42:6c:e0:e7:69:03:2d:25:3a:
ba:31:3a:fc:c6:72:e9:d5:d5:6a:8a:cf:c0:ad:38:9c:59:a4:
d6:ec:d7:10:ec:78:8a:7b:ba:fa:b4:03:a1:e8:b6:75:fc:1a:
fc:46:d7:51
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nkE5fZdvfH7bkgEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ODE5NzJhNTMtNGJiNS00ZDcwLThkY2ItZGNmMGJiYWViZmQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOwsLk0Tze9Y+BPBF7A7mzIijfdo8Z/Zrq0l
accBisQtrKrzcz++S7Br1LzxzPzGCE4Wexno4UB6Jw4Vz4GSsvsDp2Amfcn6pUa5
SU1Olq2NYhfh2UdEwlDZb4tSKpCwtDAd8BsCWe3tN+O42ySMLvj6ehjmOiFooJm5
38L0W3A0bRpJSfjWM9e8g358YRs3e/5vpAqVK/mcpLNNB0LxOHEpBOAmrN+nit19
v9z1qSU8AhCtBn/YKVSjQxHYjP6doy9oFH3RxU9PQoJrakRzspTobrohkZzm/WYB
siTqDaPS+SzGqzG6GHsrWhOrA10zKZI72zsQKI5G9HMq2SFojQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFE08Zz83Dm4obs3ThAD5pSg6ziffMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmEzYjI5OTYtMjQyYi0z
ZjlhLTgwNzEtNjIzMzMwZTJmNDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADEquBoZPTkHTji6eq1EUiLku6QC3mIneu14JuHetlGWtdW3/3OJ
ue4JE08lsB3QQPDXmIN+dbphSJ9Bju4B5AMlrMRNjTRfYQe1cCEciYxhwU5avB7B
9JzQDJ7feaHhXcq6oSF5lZK8dgaycswC8Rktu/c1VuV/sLnkCfHCRPKkhgoxFP47
Ruw5pvKkJPv9rbXdcukNejWtdsFjnnp08EpZFW465hcDb2oz7eUZSbUaRfxapQQ5
a7zWDpfpWiPhWOaEvs6Vbj3DrOri4W0FQ0Js4OdpAy0lOroxOvzGcunV1WqKz8Ct
OJxZpNbs1xDseIp7uvq0A6HotnX8GvxG11E=
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:39:56 2026 by rpki-client