
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ddc885cb-5a0d-3766-add7-f08d7df7aace.roa
File: ddc885cb-5a0d-3766-add7-f08d7df7aace.roa (raw, json)
Hash identifier: F6iZCYujW0VZ+A5jOeXRutnFXZM8J2CmKD0T/pDIFGk=
Subject key identifier: 01:F9:E2:5E:B6:49:A4:6B:F0:AD:BA:51:CF:DD:43:00:D5:A3:CD:3C
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584EFE122DEC2F3EFD6961C2C100
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ddc885cb-5a0d-3766-add7-f08d7df7aace.roa
Signing time: Sat 29 Aug 2026 01:00:12 +0000
ROA not before: Sat 29 Aug 2026 01:00:12 +0000
ROA not after: Fri 27 Nov 2026 02:00:12 +0000
asID: 397211
IP address blocks: 2620:74:20::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:fe:12:2d:ec:2f:3e:fd:69:61:c2:c1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Aug 29 01:00:12 2026 GMT
Not After : Nov 27 02:00:12 2026 GMT
Subject: CN=18d03d06-7e13-4bcf-9d78-9799c54314ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:66:8a:69:ab:db:8b:57:c7:4b:e4:4c:74:50:
e7:35:04:41:37:6a:c4:4d:bb:15:58:e9:25:c0:fe:
47:77:f1:9a:b0:44:b2:98:1f:c3:8e:09:72:2d:29:
c7:79:c6:4f:ef:19:5f:a6:cf:51:a4:c4:fe:9d:a1:
e0:e8:8b:6a:c5:a1:00:cb:57:19:d8:c4:d3:99:67:
df:85:a3:9f:d2:15:96:02:24:36:7d:03:a2:8d:f7:
8a:f9:00:87:7e:4b:ab:b8:8f:30:88:43:9a:3a:c8:
2f:9a:06:7e:d1:e2:a0:12:4e:dd:65:70:6b:0e:fb:
73:ce:03:a3:2e:a2:59:1b:fc:6e:6c:2f:8c:e2:b8:
8b:21:b8:0c:60:72:a4:38:ae:d9:6b:a4:23:56:0d:
9c:23:ec:12:1c:a9:cb:3d:de:c5:f8:d1:1d:2d:62:
8e:d7:bc:cd:25:e3:cb:8b:e5:7a:79:b8:fa:dd:9b:
62:7d:14:7c:e8:17:a8:8b:fc:fd:89:71:0a:4d:7d:
f5:c0:4e:02:d8:15:d2:14:b0:67:9c:9d:50:fa:e2:
d5:40:09:36:98:62:5a:d5:a3:af:f9:77:52:05:7a:
69:95:a5:61:d8:cc:3a:ce:ad:ea:d5:cd:0b:db:4f:
81:f0:a2:a9:78:04:9b:09:08:fa:72:b1:df:80:3b:
63:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F9:E2:5E:B6:49:A4:6B:F0:AD:BA:51:CF:DD:43:00:D5:A3:CD:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ddc885cb-5a0d-3766-add7-f08d7df7aace.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:20:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:70:f3:f9:f6:fa:14:ca:0a:5b:23:99:62:1c:44:f9:28:ca:
fe:57:40:1a:be:3f:0e:d9:19:8f:a0:78:c9:37:14:c4:28:a5:
20:9c:b1:39:eb:cd:cb:62:0e:1e:d2:7e:8b:be:01:d7:4b:82:
50:61:89:24:fb:89:c1:4a:21:90:16:59:8c:3a:8e:be:91:0f:
60:46:c6:d4:31:0a:b8:fb:63:ed:07:19:37:17:58:23:40:03:
9a:f7:d1:3b:79:87:31:33:d1:e4:e6:51:38:21:1b:a2:52:8d:
7e:eb:eb:b2:e4:82:5f:a9:62:13:e4:f5:ca:d3:e7:58:0f:f1:
d6:7d:a2:9b:74:1d:f5:45:b2:9f:88:3f:9a:6b:07:4a:62:60:
c2:8c:7f:cd:9a:f3:9f:4a:93:a1:e2:75:ce:8e:c5:fa:f8:be:
29:55:4c:84:7f:e7:76:62:e8:44:7c:a8:67:91:ff:09:b6:8c:
f7:6f:cd:56:72:cb:c6:c2:c7:03:ed:a4:06:b6:38:ae:40:36:
f8:5c:1d:6e:b3:c9:d2:97:df:96:f5:03:34:81:6b:ac:be:b6:
7c:58:bb:8c:83:b4:7c:bc:02:5e:20:62:8b:f7:ed:a0:4b:f6:
fb:7f:7e:75:8e:22:29:b5:a4:09:11:65:db:e8:48:ac:d7:5f:
d8:5a:34:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:34:45 2026 by rpki-client