
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef7ff300-591b-3e30-9d51-5402d83de4b6.roa
File: ef7ff300-591b-3e30-9d51-5402d83de4b6.roa (raw, json)
Hash identifier: xGCPRUpGLd0IMvCOcHmHlszRxngWiwkz2Oz9VjXpozc=
Subject key identifier: A8:61:52:1D:B3:71:A0:1A:AB:2F:CA:54:B6:6C:C9:9A:1F:E7:97:3C
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584E253F144F732A1A2BA40BC380
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef7ff300-591b-3e30-9d51-5402d83de4b6.roa
Signing time: Fri 12 Jun 2026 09:00:11 +0000
ROA not before: Fri 12 Jun 2026 09:00:11 +0000
ROA not after: Thu 10 Sep 2026 09:00:11 +0000
asID: 396565
IP address blocks: 2620:74:2a::31/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:25:3f:14:4f:73:2a:1a:2b:a4:0b:c3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jun 12 09:00:11 2026 GMT
Not After : Sep 10 09:00:11 2026 GMT
Subject: CN=3d3cad9b-a5ae-476e-83af-7288d3baea5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fb:67:e6:2c:83:f8:fc:ae:d7:b5:f1:02:01:
c0:4a:58:f4:86:76:51:1b:5b:2f:78:29:60:b1:b5:
a2:9f:ca:a6:ab:6f:9c:2c:f5:e8:82:d6:1e:5b:00:
d5:2b:bc:2f:67:4d:6c:71:be:fd:50:3d:68:72:3c:
ce:e6:f9:9e:7f:12:80:d1:c9:e9:22:20:b4:bc:f7:
eb:24:5f:78:86:b1:35:97:c9:4c:84:09:6e:e7:15:
73:69:94:a8:dd:92:0e:38:cd:67:e0:e5:aa:35:61:
9e:38:35:86:9a:82:28:46:e1:39:ed:a6:f9:6c:06:
91:c5:b6:69:2b:f2:f7:c6:26:1b:97:4c:85:d1:5f:
32:4f:26:4e:82:5a:4b:69:b0:c8:de:20:cf:72:10:
a2:69:90:ad:6c:e4:0c:dc:85:f8:db:7e:72:7e:d8:
9d:a8:e9:44:77:6b:4d:c1:df:99:b0:06:84:d3:50:
56:00:8a:8a:46:d5:ca:4e:6e:30:17:21:2a:ff:b0:
19:6d:04:b7:ff:60:08:bb:06:34:0a:2e:92:bf:b3:
80:0f:02:f5:ab:00:8c:dc:84:3a:12:0a:df:2b:40:
be:d2:57:4c:01:2f:d2:94:10:c6:ff:2a:1b:cf:07:
f4:7f:7b:b8:00:42:cf:7c:f7:da:23:d7:93:fb:4b:
e0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:61:52:1D:B3:71:A0:1A:AB:2F:CA:54:B6:6C:C9:9A:1F:E7:97:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef7ff300-591b-3e30-9d51-5402d83de4b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2a:0:0:0:0:31/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:b2:ff:72:0d:1e:8f:d2:6a:e4:ae:af:f2:f1:62:88:c2:46:
cb:1f:f8:f9:a4:d4:3a:89:3e:16:18:98:ac:6c:28:ed:44:aa:
2e:0d:7f:0b:96:f6:f1:e7:c8:cf:32:2a:0c:f9:99:20:e2:00:
5c:99:1d:ed:f8:4b:80:c8:9c:f9:7b:e6:5d:cb:13:92:3b:86:
a5:87:3b:49:28:f6:da:c3:f2:7f:a9:25:fc:b5:f8:ea:dd:2f:
8e:fc:1b:7e:3a:62:e1:f7:8a:a4:47:31:b7:71:91:e2:f8:82:
62:aa:ae:61:ff:a0:6f:71:1a:fb:73:5a:d0:b5:c5:1f:81:58:
9c:6f:b5:34:ed:f7:fb:87:54:b5:16:c8:c1:83:c3:64:07:eb:
6d:0e:7d:0f:72:09:ff:70:e2:8c:d1:cc:a9:11:c9:1d:c4:2c:
41:b9:98:04:00:d8:65:2d:b8:1a:7c:19:62:73:99:4d:50:bf:
8e:15:3b:85:5a:83:83:87:f9:65:37:dd:0c:1d:8b:8b:22:82:
2e:e1:82:9a:82:67:c8:46:4b:71:8b:14:d0:c1:79:ee:b2:d5:
99:e4:3a:d7:22:8d:4e:8b:ae:43:57:6f:79:95:1e:1c:a9:e2:
8f:fc:3d:2a:8e:b5:95:87:6a:95:0f:a0:a1:bf:0a:1e:23:83:
91:b9:02:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:36:42 2026 by rpki-client