
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e36c274-1d21-35d0-9178-8b4ea7d784b1.roa
File: 8e36c274-1d21-35d0-9178-8b4ea7d784b1.roa (raw, json)
Hash identifier: tGPvx4IIniP59hxUokfi5FjS3O55DnTTSd3p5qyp0eU=
Subject key identifier: 73:92:36:DE:E8:11:6E:21:D6:B9:39:35:AB:EA:52:F3:70:32:8D:BF
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584E1E44775EE197B9198B233560
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e36c274-1d21-35d0-9178-8b4ea7d784b1.roa
Signing time: Tue 09 Jun 2026 21:00:12 +0000
ROA not before: Tue 09 Jun 2026 21:00:12 +0000
ROA not after: Mon 07 Sep 2026 21:00:12 +0000
asID: 40647
IP address blocks: 209.112.127.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:1e:44:77:5e:e1:97:b9:19:8b:23:35:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jun 9 21:00:12 2026 GMT
Not After : Sep 7 21:00:12 2026 GMT
Subject: CN=30d4c1bb-869d-4962-a890-534fd49078b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a7:3a:6b:73:39:94:d2:72:2d:23:3b:eb:12:
77:a3:53:28:cd:b2:ce:53:19:d4:99:6a:31:29:b1:
da:66:76:3c:8f:5f:d3:4b:11:88:34:5b:ac:e4:f9:
00:29:16:d6:92:2b:1a:8b:93:24:44:f5:5e:a1:bf:
26:ee:93:dc:e8:6e:7a:26:30:ce:66:b4:af:5a:3d:
aa:82:e7:0e:5e:d7:cd:66:e4:36:43:b6:88:84:43:
94:a4:36:dd:f6:66:a2:94:2d:b6:bb:59:af:a4:00:
06:c8:af:78:25:3b:5d:db:64:8c:3a:59:80:0a:b5:
62:a4:16:33:e3:76:45:81:a5:aa:9b:e4:12:64:67:
c5:cf:5b:83:26:57:1e:11:57:48:c9:a7:5b:70:f7:
9c:1b:62:a2:d4:36:aa:9e:76:36:1e:5b:70:21:5f:
a4:93:20:05:19:74:56:36:06:38:c7:e8:dd:9b:89:
5f:29:89:30:a2:36:12:f1:bc:98:78:52:e7:5c:8b:
55:f0:48:6c:32:c0:78:63:2b:e3:70:bf:8a:99:4f:
8b:e0:e5:ea:61:e9:f0:54:cb:2e:2d:a6:73:bb:c4:
7c:93:86:a2:6a:35:10:99:30:86:1f:6b:39:4c:48:
b4:da:94:6f:0a:dc:05:65:45:b9:a0:4e:a2:12:16:
35:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:92:36:DE:E8:11:6E:21:D6:B9:39:35:AB:EA:52:F3:70:32:8D:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e36c274-1d21-35d0-9178-8b4ea7d784b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.127.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:02:61:b8:ce:aa:a3:f4:38:95:62:eb:4e:3a:d6:1b:3e:c5:
96:07:09:59:d2:88:39:34:1a:64:95:52:95:b1:8c:f1:50:c3:
56:1b:74:50:ee:45:07:7b:d1:51:a3:52:45:91:cc:e0:00:de:
98:96:a0:da:f4:fe:f7:4c:38:5c:5d:b4:50:1d:04:b7:29:e7:
0b:0f:3c:ba:5a:9c:a9:b7:a4:51:6e:6a:a2:51:9f:d8:06:79:
79:f1:73:57:b4:2e:2b:28:7f:63:50:43:f8:31:86:ef:bb:b5:
a7:63:7a:44:50:b3:a7:9b:b5:db:3e:6f:9c:5a:8d:2a:90:77:
4a:2b:3b:5b:48:75:65:d7:67:2b:1f:da:d2:a1:3f:fa:96:82:
2f:61:ed:52:f4:25:5e:79:8f:34:91:31:6e:78:bf:50:9e:57:
ed:a3:e3:6b:f2:44:ff:f5:93:10:24:82:3c:f2:e5:0a:89:56:
c6:5c:bb:a1:6b:7d:a8:93:2e:0f:01:0a:71:df:9a:bd:b0:a6:
21:bb:44:2c:52:d7:83:4b:be:56:45:8d:9f:d0:80:d6:62:ad:
3f:22:03:03:38:94:36:6b:d5:0e:2e:0d:c8:6c:e8:a7:da:0a:
cf:d5:09:dd:d4:a1:e1:2d:bc:94:a0:81:e4:78:26:25:d5:12:
cd:b4:65:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:48:09 2026 by rpki-client