
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5af4c2f-75b2-3392-9daf-0ba63d360bf9.roa
File: a5af4c2f-75b2-3392-9daf-0ba63d360bf9.roa (raw, json)
Hash identifier: pgZYeLQiIjPYhJNLl4OhhuKVBqRhr7K+KffJBdZ7wf4=
Subject key identifier: D7:90:D3:E4:5F:E5:E1:B0:5A:88:D8:A0:FD:80:67:4E:83:EC:8D:5A
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584D7B6A9618C96AE67EA6C9C980
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5af4c2f-75b2-3392-9daf-0ba63d360bf9.roa
Signing time: Sun 12 Apr 2026 13:00:30 +0000
ROA not before: Sun 12 Apr 2026 13:00:30 +0000
ROA not after: Sat 11 Jul 2026 13:00:30 +0000
asID: 396571
IP address blocks: 2620:74:20::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7b:6a:96:18:c9:6a:e6:7e:a6:c9:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Apr 12 13:00:30 2026 GMT
Not After : Jul 11 13:00:30 2026 GMT
Subject: CN=87d5bc42-76f3-4ae4-99eb-312dcd7ac259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:15:2b:7c:ff:ae:74:a5:12:12:e0:a7:83:ef:
8e:0b:f2:8a:c8:b3:19:27:a2:60:cd:4f:ea:26:39:
63:45:56:83:5b:6e:52:af:11:33:9c:b6:44:be:20:
5a:d1:fa:f4:91:6c:da:e6:3d:db:28:1e:d0:13:09:
c2:fa:a9:0c:a2:26:ff:49:f6:b1:8f:08:40:04:57:
ff:5e:ef:76:6d:85:c1:9d:e2:a0:55:13:b1:12:f7:
ad:61:1a:a2:b6:d3:70:e6:0c:d0:b4:4b:36:17:a0:
df:28:fe:a0:63:69:ff:0f:5b:38:8c:c0:ba:f4:98:
ea:74:d3:e1:34:7c:54:3a:97:e9:bc:69:4c:a6:e2:
4f:43:ea:f2:80:6e:de:00:56:05:15:77:6b:07:43:
02:8d:44:62:94:9b:58:17:27:07:ec:c6:f0:5d:8d:
a1:a3:df:ad:f6:aa:57:de:fe:31:e8:dd:8d:4a:42:
4c:10:36:2e:50:2a:5c:26:e1:99:dd:14:3f:cf:20:
db:c0:19:2e:72:6a:27:0e:10:6c:f4:fd:92:88:db:
b0:14:b2:8b:42:c5:a8:9d:ec:b7:42:02:13:5c:86:
75:8e:91:b2:8c:3a:6e:48:8e:e5:17:45:08:f9:7b:
26:3c:95:cd:3e:a8:76:b4:8f:46:84:50:f6:53:3a:
fd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:90:D3:E4:5F:E5:E1:B0:5A:88:D8:A0:FD:80:67:4E:83:EC:8D:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5af4c2f-75b2-3392-9daf-0ba63d360bf9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:20:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:38:57:d5:82:0b:71:d6:0f:e3:d9:cb:e1:94:07:4d:c5:ad:
50:c6:56:b3:5a:03:de:88:64:41:53:f5:8a:8a:b7:d7:ce:2e:
f0:12:bb:30:a9:2e:ec:df:31:47:b0:25:17:9b:b5:76:d7:a0:
35:1a:99:d7:b2:59:8e:a2:28:2a:0f:e4:f3:d8:b4:7b:70:c8:
ab:8e:fa:01:22:2e:f1:f8:93:11:6a:4e:ea:c5:8e:6d:bb:5d:
45:45:92:2e:f3:78:ff:41:51:3b:6b:34:7a:4c:d5:ca:a6:70:
1c:96:b3:28:23:b6:8b:91:e1:eb:28:99:27:d8:42:4d:d7:71:
94:5a:81:ef:78:f8:0b:30:5f:2b:ec:ee:b0:d2:5e:f6:e3:a8:
60:c8:60:92:c3:a0:da:31:d6:9a:17:a1:3b:28:16:18:36:50:
e6:ae:d3:93:e9:7b:19:4e:70:19:8d:4a:42:4b:16:84:3d:24:
84:e0:6b:29:ba:df:c6:15:23:93:fd:8f:0b:57:63:bb:8f:61:
40:9f:7b:5f:7a:4a:36:e0:fa:85:41:b3:06:f0:c5:97:40:39:
70:49:ca:e2:65:0d:08:3f:b6:0a:4c:10:c1:af:86:48:fc:fc:
16:d4:17:60:e0:f6:16:7c:1a:57:a8:44:90:95:8c:6d:4f:8b:
c0:ec:61:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:04:13 2026 by rpki-client