
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/924a3ec1-874c-311e-9203-35d1f1b5b990.roa
File: 924a3ec1-874c-311e-9203-35d1f1b5b990.roa (raw, json)
Hash identifier: Gchl8N+ARCWg2cQ5hAzoP2Hc29gO1YLThHpo12BMTqo=
Subject key identifier: AB:AA:7B:96:D8:A0:70:FA:A1:CE:70:1B:52:BE:09:F6:CE:98:FE:D3
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584F20F7C934A5344C01D903A480
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/924a3ec1-874c-311e-9203-35d1f1b5b990.roa
Signing time: Thu 10 Sep 2026 13:00:12 +0000
ROA not before: Thu 10 Sep 2026 13:00:12 +0000
ROA not after: Wed 09 Dec 2026 14:00:12 +0000
asID: 7342
IP address blocks: 2620:74:6f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:20:f7:c9:34:a5:34:4c:01:d9:03:a4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Sep 10 13:00:12 2026 GMT
Not After : Dec 9 14:00:12 2026 GMT
Subject: CN=8022d0be-ca34-46b6-bcca-e305b3d862c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cd:fd:39:df:3b:b7:cd:b2:88:e2:c9:34:d7:
f2:a7:c1:0b:35:3a:97:5e:8a:e7:19:88:ee:5e:67:
d7:66:a3:39:18:ca:8e:80:7e:20:66:d4:21:b9:f7:
d1:8e:be:76:b3:49:ae:04:e6:15:db:7b:4b:61:6d:
4e:9e:0f:07:72:63:8c:75:3b:d2:64:e1:96:13:50:
91:e4:2d:d8:72:2f:97:48:a4:aa:2a:1a:a1:4a:67:
cc:54:87:3f:ed:23:89:46:8a:5c:41:45:5c:d6:25:
e4:cb:56:5a:91:cd:fa:b2:e7:22:21:7b:6d:26:4c:
5f:1e:02:53:da:06:70:dc:d0:ab:e1:ca:24:aa:8f:
b5:02:04:8b:94:0e:d9:74:88:df:c1:8a:b2:b4:49:
36:52:9d:81:6f:43:a4:39:bf:3f:57:58:3e:19:97:
73:8e:b7:ca:b4:e3:92:c4:fe:15:06:05:7f:ad:30:
ab:d7:ba:45:c0:c0:ae:9b:62:be:99:d6:33:3c:f2:
62:f1:b0:13:4d:b1:63:2b:cd:dd:be:5e:ad:cf:56:
d4:b7:04:d8:23:ae:1e:65:30:1a:05:7f:ae:4f:a3:
8b:37:0e:71:4b:2a:31:fc:16:0b:43:da:32:86:a9:
65:5b:38:d9:d8:3b:16:85:c2:08:bd:f3:6b:69:52:
10:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:AA:7B:96:D8:A0:70:FA:A1:CE:70:1B:52:BE:09:F6:CE:98:FE:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/924a3ec1-874c-311e-9203-35d1f1b5b990.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:6f::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:07:de:a6:ff:3f:d4:20:8d:50:97:f8:d3:c0:0e:93:4d:d0:
56:90:6d:04:9b:9c:60:ab:af:3e:f4:8b:91:f9:8c:a2:39:02:
29:c5:b1:d9:a9:ad:0d:a0:5f:21:a5:ad:79:0c:f6:d1:e2:d5:
44:21:bc:74:8f:29:78:03:7e:e2:9d:f2:11:a8:dd:6d:1c:a7:
13:2b:69:32:5d:06:43:c5:fb:ef:76:40:72:67:66:d7:91:68:
e1:20:f4:b2:ce:29:b8:a1:86:6c:83:05:cf:ff:9d:09:9b:80:
c5:ab:7f:9c:24:d2:36:ce:f7:e6:7d:a2:46:58:a4:69:12:90:
7b:52:3a:82:28:28:41:9c:24:08:12:8e:7b:49:ff:e4:69:57:
77:71:a6:71:14:9b:0e:e2:7c:08:6d:2e:f8:26:4b:0d:75:de:
bf:c5:a7:16:45:3e:70:0b:68:d1:2e:7d:3a:e0:5b:c7:35:73:
8c:54:e0:71:27:7d:ac:ec:76:8c:90:f7:3e:95:57:e7:e2:f9:
9f:33:ec:21:84:9e:8a:16:d0:f4:97:72:09:71:7d:42:55:39:
ae:2f:2e:3b:ff:b3:73:d6:2b:d9:ef:cf:6a:19:34:65:c7:c7:
f9:06:27:8c:70:b5:11:fa:d7:c2:e7:04:45:1a:f8:c5:bc:db:
a3:55:e3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:49:47 2026 by rpki-client