
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/08cfbc8f-ad4b-3bde-9029-1164f0b530da.roa
File: 08cfbc8f-ad4b-3bde-9029-1164f0b530da.roa (raw, json)
Hash identifier: zUCx1Nq/R84M7Tg89Fnp/2qcBbt6yCpheVK6vxdpfXw=
Subject key identifier: 6B:71:D4:84:08:70:C8:F6:CE:B0:70:60:D0:F4:93:C3:2F:9F:3A:8E
Certificate issuer: /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial: 010D0C9F4328584E2AD44F45563E426568575680
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/08cfbc8f-ad4b-3bde-9029-1164f0b530da.roa
Signing time: Sun 14 Jun 2026 09:00:11 +0000
ROA not before: Sun 14 Jun 2026 09:00:11 +0000
ROA not after: Sat 12 Sep 2026 09:00:11 +0000
asID: 42
IP address blocks: 67.21.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 20 Jun 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:2a:d4:4f:45:56:3e:42:65:68:57:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
Validity
Not Before: Jun 14 09:00:11 2026 GMT
Not After : Sep 12 09:00:11 2026 GMT
Subject: CN=b0e0bce4-5c7f-40c4-8c53-e2c63b24ece0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2b:d1:86:56:30:6b:13:e4:42:ba:75:3f:22:
a0:fb:57:e4:64:11:21:3b:84:e0:eb:bc:44:ca:df:
db:77:0c:96:20:c6:f6:60:d1:cc:a6:d5:3d:21:2d:
99:79:31:f7:42:1e:f0:c0:f4:61:5a:e3:5e:4b:5f:
e0:b3:7e:a9:c9:e4:ca:e7:32:20:23:44:fd:7c:73:
31:f5:f9:54:22:37:4e:ab:0b:d1:2f:fb:09:c2:f5:
b5:87:51:a1:d7:f9:4e:87:ce:5c:d2:ee:d0:1e:ed:
8d:8c:f6:5d:7a:04:75:6e:c5:86:13:91:59:47:21:
71:1d:c5:76:b9:74:dc:a3:64:36:f5:f2:d9:c2:8a:
78:66:10:20:50:23:f8:70:31:29:61:68:88:c5:40:
fe:5f:a9:33:cd:45:61:fd:93:03:ba:c9:6e:15:25:
22:83:4c:2c:7b:84:d1:14:bf:21:0c:4b:76:3f:15:
ff:49:c2:f6:4c:51:67:a6:1a:bd:dd:4a:5a:9b:b0:
9b:10:eb:55:ef:74:63:aa:61:d1:3a:9c:df:b6:3c:
70:86:9f:fe:62:5f:24:66:fd:30:76:8e:af:31:b7:
64:9d:bf:a2:34:93:8f:31:91:e4:dd:b1:41:dd:3e:
8a:f8:d7:1d:54:f7:41:8a:2f:a3:c2:c9:85:c0:7e:
ae:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:71:D4:84:08:70:C8:F6:CE:B0:70:60:D0:F4:93:C3:2F:9F:3A:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/08cfbc8f-ad4b-3bde-9029-1164f0b530da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
X509v3 Authority Key Identifier:
keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
sbgp-ipAddrBlock: critical
IPv4:
67.21.37.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:db:4f:c2:11:55:3f:dc:f4:45:8e:ac:2c:5c:48:21:bc:b7:
32:0e:ab:52:79:0a:c4:ce:51:76:ab:7f:ca:38:ae:34:c6:68:
50:b6:ae:22:64:47:34:64:4a:47:b6:4a:e5:3e:f1:25:67:dd:
4b:07:c8:27:80:75:84:c3:b6:aa:c3:60:66:8d:41:42:e2:13:
f2:c0:29:7d:99:47:14:c8:49:86:06:32:98:34:b1:4a:f8:7f:
3b:d2:b1:b7:ef:95:49:23:17:42:aa:b3:30:10:ef:96:0f:1c:
96:a1:d7:05:dc:1c:7c:96:8f:c1:07:0d:c9:8e:b0:62:7f:f7:
da:36:a2:b8:ed:83:90:78:78:e1:57:b8:21:3f:71:d0:87:8e:
e1:5b:09:04:4a:6a:88:c3:ad:8b:ee:0f:46:1e:f0:92:f0:e5:
9d:ff:8c:12:64:00:5e:4f:10:33:b9:75:4b:a5:4c:3b:55:48:
27:27:f7:51:b6:0f:96:41:90:7d:1b:ba:4d:d6:5b:af:b0:6e:
17:8d:80:e9:d4:6e:bc:e7:d7:2f:9a:72:8f:a4:1a:08:c3:09:
b0:5b:b1:f3:26:91:cb:fa:28:d6:a9:cb:68:42:76:fb:16:c7:
80:c8:db:40:56:8f:d9:12:ee:fb:10:4b:7e:0e:7d:2d:62:a1:
10:34:fc:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4q1E9FVj5CZWhXVoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3
MTAzMB4XDTI2MDYxNDA5MDAxMVoXDTI2MDkxMjA5MDAxMVowLzEtMCsGA1UEAxMk
YjBlMGJjZTQtNWM3Zi00MGM0LThjNTMtZTJjNjNiMjRlY2UwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCvRhlYwaxPkQrp1PyKg+1fkZBEhO4Tg67xE
yt/bdwyWIMb2YNHMptU9IS2ZeTH3Qh7wwPRhWuNeS1/gs36pyeTK5zIgI0T9fHMx
9flUIjdOqwvRL/sJwvW1h1Gh1/lOh85c0u7QHu2NjPZdegR1bsWGE5FZRyFxHcV2
uXTco2Q29fLZwop4ZhAgUCP4cDEpYWiIxUD+X6kzzUVh/ZMDusluFSUig0wse4TR
FL8hDEt2PxX/ScL2TFFnphq93Upam7CbEOtV73RjqmHROpzftjxwhp/+Yl8kZv0w
do6vMbdknb+iNJOPMZHk3bFB3T6K+NcdVPdBii+jwsmFwH6uQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGtx1IQIcMj2zrBwYND0k8MvnzqOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy
NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvMDhjZmJjOGYtYWQ0Yi0z
YmRlLTkwMjktMTE2NGYwYjUzMGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4
ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj
NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2
MGRlYzcxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQxUlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH7bT8IRVT/c9EWOrCxcSCG8tzIOq1J5CsTOUXarf8o4rjTGaFC2riJk
RzRkSke2SuU+8SVn3UsHyCeAdYTDtqrDYGaNQULiE/LAKX2ZRxTISYYGMpg0sUr4
fzvSsbfvlUkjF0KqszAQ75YPHJah1wXcHHyWj8EHDcmOsGJ/99o2orjtg5B4eOFX
uCE/cdCHjuFbCQRKaojDrYvuD0Ye8JLw5Z3/jBJkAF5PEDO5dUulTDtVSCcn91G2
D5ZBkH0buk3WW6+wbheNgOnUbrzn1y+aco+kGgjDCbBbsfMmkcv6KNapy2hCdvsW
x4DI20BWj9kS7vsQS34OfS1ioRA0/Iw=
-----END CERTIFICATE-----
Generated at Fri Jun 19 04:17:42 2026 by rpki-client