
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bdea2189-ee06-3460-8978-83fa706b885b.roa
File: bdea2189-ee06-3460-8978-83fa706b885b.roa (raw, json)
Hash identifier: 4hTx21xCM+4QrwUXzBt4jCFCClh+r2M49mF0yLd2woE=
Subject key identifier: DA:65:9C:9F:EC:5F:BF:0A:92:6E:FE:03:BD:C0:57:21:43:A3:E6:A4
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584CF587A976AE03C5D32A460340
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bdea2189-ee06-3460-8978-83fa706b885b.roa
Signing time: Mon 23 Feb 2026 14:00:41 +0000
ROA not before: Mon 23 Feb 2026 14:00:41 +0000
ROA not after: Sun 24 May 2026 13:00:41 +0000
asID: 396584
IP address blocks: 2620:74:2c::31/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f5:87:a9:76:ae:03:c5:d3:2a:46:03:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 23 14:00:41 2026 GMT
Not After : May 24 13:00:41 2026 GMT
Subject: CN=03354698-8371-41dd-94e8-415e743646b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1b:de:b7:9e:dc:7f:83:cf:f7:b3:f1:be:61:
81:8d:0f:32:04:ee:3b:9a:9a:1d:79:4c:c0:61:e3:
9a:6b:55:a3:c7:d2:17:a2:b0:2b:38:67:03:38:e8:
51:d5:cd:4c:2b:89:d9:f3:3f:d5:02:ea:d4:1e:81:
0f:62:71:65:36:2e:52:6c:0c:09:e3:4f:c9:a3:e1:
73:cf:97:cc:62:e1:f1:7a:f8:4a:73:d6:ff:8d:66:
b2:19:27:71:6e:eb:46:da:45:a9:53:10:6b:ae:64:
07:c2:d1:da:b2:98:31:58:ac:5c:f3:b0:5e:6c:21:
e1:42:f5:b8:2d:c0:f6:e9:27:31:b5:2b:94:cd:c2:
96:df:cf:50:eb:5b:1f:b9:01:c1:21:f0:01:9f:29:
a1:06:f7:81:d1:11:69:33:a1:d7:c9:9c:39:7e:6b:
16:5c:11:72:13:1d:5e:7a:d9:9e:55:40:aa:b9:9e:
b9:85:39:02:d8:f6:8e:76:96:d5:8e:e2:85:89:d6:
d9:7e:e1:f5:5f:a8:52:43:12:3a:f1:5c:3a:84:f3:
6a:04:ac:92:c2:18:44:93:f0:63:bc:34:33:c7:d7:
1d:d6:b5:3b:89:9e:e0:1d:4f:72:da:3e:0b:1f:d6:
cd:14:37:90:3e:96:f2:95:e7:0a:2f:80:bc:db:b8:
bb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:65:9C:9F:EC:5F:BF:0A:92:6E:FE:03:BD:C0:57:21:43:A3:E6:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bdea2189-ee06-3460-8978-83fa706b885b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2c:0:0:0:0:31/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:7e:af:56:5d:c7:3a:8e:44:92:11:14:3c:38:b9:45:14:c4:
c3:89:94:19:f4:60:37:33:8b:17:76:f3:fe:43:d8:7f:db:22:
c6:a1:68:44:c1:4d:2c:89:cf:35:db:19:85:a0:f4:f4:ef:06:
7c:9d:b0:9d:3c:bb:15:96:98:5e:13:f3:4e:73:51:40:81:0a:
06:dc:55:22:de:fe:7b:d5:fd:6d:9c:1a:0f:f1:99:e8:90:19:
3d:d3:c2:eb:88:4b:9a:f3:91:38:0c:0f:93:54:f2:cc:17:db:
d3:ab:33:e9:a3:f2:f7:4f:e6:c5:55:91:f1:76:0e:49:76:cc:
62:e5:b4:78:00:22:d2:34:e8:a8:3b:d5:20:26:80:cc:1a:6f:
c1:dd:10:d2:4f:83:35:a3:dd:3b:90:49:b2:bf:fa:0c:cc:ef:
7d:c5:79:2c:16:0d:5c:ab:36:11:d9:8b:cd:8f:b9:bb:a1:70:
77:97:c6:83:f3:58:4c:a9:89:26:de:42:5b:9c:0a:5b:d0:bb:
78:2f:c8:e4:cb:a7:ec:53:52:2a:68:cd:db:d1:23:a2:23:5e:
8d:31:ae:74:ee:d0:4e:88:19:f8:81:a8:20:a4:28:bd:79:50:
b0:72:c7:cb:3c:60:6e:79:f7:9c:e2:51:d8:95:f4:8b:ac:e4:
40:dc:11:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:34 2026 by rpki-client