
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8dc85beb-071e-346d-948c-e27bdf53d3f3.roa
File: 8dc85beb-071e-346d-948c-e27bdf53d3f3.roa (raw, json)
Hash identifier: i351qoEjfIJrjYf+GnOxQS767u0FZdpzRxtb6GLJfPc=
Subject key identifier: 39:42:FD:25:AA:7B:4E:D5:F7:D5:96:3B:8C:84:6A:6C:76:D0:41:62
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584E253F0DB74BEA2A64EF6EEF30
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8dc85beb-071e-346d-948c-e27bdf53d3f3.roa
Signing time: Fri 12 Jun 2026 09:00:11 +0000
ROA not before: Fri 12 Jun 2026 09:00:11 +0000
ROA not after: Thu 10 Sep 2026 09:00:11 +0000
asID: 396571
IP address blocks: 2620:74:2a::31/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:25:3f:0d:b7:4b:ea:2a:64:ef:6e:ef:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jun 12 09:00:11 2026 GMT
Not After : Sep 10 09:00:11 2026 GMT
Subject: CN=1c7e75d4-f6a5-44e0-80a2-b38aa2d87a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b5:58:ff:b7:0b:28:cc:76:3c:09:14:5d:d3:
a6:df:5b:dc:6d:e8:52:a0:2b:6f:ea:a2:17:d3:43:
68:1d:f3:d9:ce:c6:15:bc:ee:5b:07:1b:84:d7:08:
5b:46:b5:c0:1d:91:98:20:f1:c7:3c:b6:e4:c5:92:
89:ff:6f:e6:59:3d:44:5c:b2:10:3e:d3:7d:ae:f4:
19:3c:95:ca:68:dd:d6:41:ed:08:c3:a1:e7:3c:e4:
e2:5b:3f:5a:c4:6b:64:3c:0a:64:a4:2e:0a:a4:ec:
5e:cd:5d:2d:d9:3f:07:c3:b2:9b:76:9f:b7:1d:6e:
cf:01:c5:12:af:bc:75:27:36:9b:1e:e7:60:41:44:
14:c6:f2:01:65:11:2f:59:6f:a3:f3:78:cc:80:80:
a0:c1:f2:3a:9b:e6:70:5c:74:1b:c9:43:e9:8d:7f:
10:66:8c:81:28:fd:0e:19:c6:4d:40:98:17:a8:56:
7c:9b:1f:2b:45:1a:7f:9b:81:21:45:4f:1a:43:12:
2e:11:a3:66:ad:7d:56:0b:17:3d:28:61:0d:cb:6e:
5d:8b:5f:d8:f6:1f:db:6a:bb:93:54:84:f7:39:cc:
82:88:8d:b2:ca:95:ff:00:35:cf:e1:c4:48:5d:bd:
38:e0:0e:de:87:d8:d2:89:19:6c:0f:6f:12:45:84:
33:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:42:FD:25:AA:7B:4E:D5:F7:D5:96:3B:8C:84:6A:6C:76:D0:41:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8dc85beb-071e-346d-948c-e27bdf53d3f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2a:0:0:0:0:31/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:11:18:0e:bc:82:ae:5c:27:78:ab:bf:b6:d9:fb:c8:7b:a4:
7a:9b:1f:87:ce:fa:50:a0:84:e4:b4:d9:cb:d9:7e:66:a4:dc:
cf:f6:45:dd:23:4f:57:ec:e8:c3:41:2e:de:eb:1a:3b:14:0e:
3d:de:af:8f:c6:a4:46:c2:57:ed:37:a9:72:d2:bc:fe:7d:d4:
ff:93:76:8f:6b:60:07:50:58:a0:5d:ff:a1:61:f5:40:d0:ea:
59:e0:4a:7e:e1:eb:e2:dd:3e:37:d8:3a:f1:49:97:27:da:6b:
22:01:72:88:29:bf:9d:48:70:00:58:d3:89:42:d2:b0:0f:52:
c6:b9:f4:c8:74:a4:e3:ea:ce:28:71:a8:59:f2:76:cd:b5:f6:
55:75:81:72:30:f7:19:1c:96:2c:f9:f5:eb:ce:c7:d5:d0:b0:
0c:73:f0:36:1e:27:12:0f:e4:b2:9e:8c:2a:ad:43:03:38:9c:
06:68:9a:79:41:f4:a3:bd:50:63:03:11:cb:6f:c2:00:89:ca:
db:29:42:ff:03:25:84:49:c9:26:81:cf:6f:5d:30:d8:d7:25:
d3:29:b2:bd:3c:bd:72:aa:78:f7:e2:93:32:08:52:cc:7a:da:
83:84:9c:27:56:9d:5b:30:ea:0f:e8:85:a2:17:e4:4d:be:40:
7d:07:2d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:03:31 2026 by rpki-client