
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e5e40aad-6d99-3fe6-b82a-22e74b12a905.roa
File: e5e40aad-6d99-3fe6-b82a-22e74b12a905.roa (raw, json)
Hash identifier: IWmjEmLQ3mUgcUaItmLLdaJcoLP9w0v4zaRQVwtO22Y=
Subject key identifier: EA:80:3F:CF:35:49:28:BD:EB:CC:33:26:16:2D:C8:90:F8:F0:46:D0
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584F30528FE4D8CEE6C33BE3AE80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e5e40aad-6d99-3fe6-b82a-22e74b12a905.roa
Signing time: Wed 16 Sep 2026 01:00:12 +0000
ROA not before: Wed 16 Sep 2026 01:00:12 +0000
ROA not after: Tue 15 Dec 2026 02:00:12 +0000
asID: 30060
IP address blocks: 2620:74:a0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:30:52:8f:e4:d8:ce:e6:c3:3b:e3:ae:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Sep 16 01:00:12 2026 GMT
Not After : Dec 15 02:00:12 2026 GMT
Subject: CN=3eaf7349-d4c0-49c7-a4f1-b11a47414c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c2:72:ff:a3:b1:c2:ed:11:6b:21:1a:77:ae:
74:7c:96:79:bd:1e:a3:d5:a8:eb:f1:5d:07:e6:b8:
dd:e6:4a:80:68:ee:1a:54:cb:3b:54:86:7a:42:85:
a0:a0:94:de:cc:0d:8e:2d:bf:10:57:f9:f0:68:b1:
aa:87:ab:cd:e4:fd:d0:df:ab:74:1b:5a:5b:76:3c:
e6:8e:ec:5a:a6:94:1d:f9:25:50:c8:86:90:a1:7c:
30:be:5e:8b:7d:17:d9:33:60:5e:ff:89:90:b2:f0:
43:48:14:5b:0e:9d:e4:0a:12:da:49:e9:e9:3b:be:
36:d2:7b:58:e4:45:b1:40:55:e6:b5:a8:1d:f8:17:
50:22:42:e5:77:ce:61:25:da:b3:9e:88:78:5c:f7:
09:f6:26:45:ff:84:16:0f:fb:00:7a:d6:1b:b5:6a:
9c:dd:17:7b:6a:f5:50:0b:e5:40:80:a1:31:89:a8:
67:3b:06:8a:3c:4e:b0:6c:65:25:51:62:5e:60:c1:
3d:3e:b4:f7:21:b0:55:a6:11:80:c3:f1:09:4e:f6:
dd:8a:17:da:ad:76:8d:89:82:c2:f1:22:5c:78:c8:
9a:61:1b:7c:fb:84:74:2f:ae:f6:d6:24:03:21:38:
b5:5e:ba:95:00:a2:0c:9a:88:56:16:a0:b0:42:3c:
d1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:80:3F:CF:35:49:28:BD:EB:CC:33:26:16:2D:C8:90:F8:F0:46:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e5e40aad-6d99-3fe6-b82a-22e74b12a905.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:a0::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:d2:e9:43:cd:c3:2d:78:77:1b:1a:7d:8b:97:29:81:13:94:
67:7b:94:95:5e:42:3b:d8:cd:dd:24:e2:e1:70:87:1f:ff:04:
d2:6e:bf:3b:bc:c1:7f:a5:91:5f:2c:91:4b:51:5e:ee:e9:7f:
42:e1:78:84:1d:48:f8:e8:be:fa:85:e7:52:01:d4:ad:ff:db:
e0:ab:97:9c:83:ef:70:4f:9d:a9:16:3d:c8:4d:7a:d9:ad:58:
6a:7f:dd:c8:35:b3:65:73:8f:91:62:dc:c1:bc:e4:68:80:2d:
3e:de:b8:3d:fb:b9:e1:1b:6e:19:93:cf:8d:a0:7d:6e:a9:b6:
46:f1:d9:05:41:48:41:e7:83:b5:83:f4:fe:d4:d1:d0:c4:1c:
ec:25:64:f4:64:ea:e9:de:63:d6:cb:3b:89:4e:48:26:88:3f:
b2:d2:10:70:e3:5b:1d:15:62:6f:a6:8f:9e:2b:7d:62:dd:b5:
79:22:8a:0a:03:68:09:7b:b3:6e:51:96:d9:38:44:31:e4:6d:
89:1f:12:9d:36:b3:f9:6e:02:a7:b4:95:6b:d9:59:4e:74:3c:
c2:36:47:33:3a:cf:82:0f:fd:b3:11:b3:d4:fc:fb:00:97:6a:
55:34:fa:33:ba:88:e4:ce:b5:3e:09:a5:12:8c:6f:82:3e:62:
a8:f1:83:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:18:44 2026 by rpki-client