
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cdca7cc9-4b6f-3860-99f1-9b351d8a618a.roa
File: cdca7cc9-4b6f-3860-99f1-9b351d8a618a.roa (raw, json)
Hash identifier: tOzRF3KxNJ02Fs3KWmu9PYwyp/GM6BaxUPj1NzQId5E=
Subject key identifier: AB:AE:D8:42:BC:43:04:05:15:CF:F0:B6:C0:80:D0:AF:4B:BA:3A:FC
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584EDC922DC7D341E1B5497E6300
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cdca7cc9-4b6f-3860-99f1-9b351d8a618a.roa
Signing time: Mon 17 Aug 2026 01:00:12 +0000
ROA not before: Mon 17 Aug 2026 01:00:12 +0000
ROA not after: Sun 15 Nov 2026 02:00:12 +0000
asID: 40647
IP address blocks: 2620:74:21::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 20 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:dc:92:2d:c7:d3:41:e1:b5:49:7e:63:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Aug 17 01:00:12 2026 GMT
Not After : Nov 15 02:00:12 2026 GMT
Subject: CN=02c18098-32ed-4884-aa56-19bb00785a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a3:f7:32:0b:7a:a0:4d:67:48:b2:db:69:1d:
0a:24:08:fd:ba:6f:98:0d:31:3f:8c:c3:cb:a4:57:
7b:93:07:4a:d5:f9:83:8c:51:1b:78:d6:cb:f1:19:
c3:12:ed:30:0c:12:fb:95:f5:be:62:4b:a6:7b:22:
d0:cf:fa:9c:7f:cd:00:25:03:fe:d1:a4:a2:bd:5b:
2c:ef:db:65:e9:50:e6:54:46:b2:27:db:3a:73:aa:
e0:47:eb:fa:1b:62:c2:59:ec:cf:c8:6e:f9:10:a0:
be:25:a9:01:07:d6:9e:b7:5a:c4:63:1d:0c:ba:b4:
50:b4:24:00:03:03:a3:78:56:a2:f4:ab:be:3f:40:
f3:0c:bb:1c:0f:db:bb:82:44:9c:19:9e:51:0d:0f:
94:3a:31:b9:d7:0b:9f:46:12:d1:08:fd:b4:bd:15:
fa:0a:81:d4:52:c7:a8:84:ba:cd:e4:31:25:45:98:
9a:e2:dd:b0:2f:21:a2:5d:58:73:af:9b:e5:41:a6:
0b:27:9e:77:ad:a0:04:62:32:41:fd:7a:4d:f3:06:
28:d0:9a:30:5c:47:6b:40:e3:1a:fa:f6:dc:8e:79:
f7:98:97:25:0b:65:88:c9:dd:e0:a4:39:f4:4e:f8:
bf:25:f9:a8:1c:12:7b:12:0d:25:3f:4f:67:e1:9a:
46:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:AE:D8:42:BC:43:04:05:15:CF:F0:B6:C0:80:D0:AF:4B:BA:3A:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cdca7cc9-4b6f-3860-99f1-9b351d8a618a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:21:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:52:96:f9:06:46:2d:33:fd:d8:4d:9e:4a:0a:08:45:18:99:
57:a5:75:a7:6e:58:20:cd:e1:f8:51:d9:39:b7:68:65:6b:11:
7b:9c:28:83:f8:80:ba:d0:a5:a5:f4:58:c6:e0:70:f2:94:a0:
20:60:a2:90:b6:7e:a9:5a:94:06:ff:11:32:f4:70:f8:5c:fd:
0e:93:ad:c1:6d:d2:d6:5d:f2:8a:7b:90:6b:e3:bb:ce:5f:8b:
fd:60:48:24:45:e4:ef:08:7c:84:19:45:57:50:be:03:3d:e4:
0f:a3:0b:fa:13:6d:13:08:c8:c2:a7:22:35:8b:6d:97:ab:af:
95:46:ac:e0:15:29:bd:f5:5c:ff:12:8b:4e:18:a0:bf:05:40:
73:05:e6:d8:9a:1d:23:59:01:c5:88:13:e0:fe:b4:cf:ff:ae:
98:0c:4f:e7:49:7d:d8:f3:8c:0a:91:42:d9:c2:5d:01:e9:ff:
f6:e1:50:08:e3:65:13:9b:17:84:8d:dc:35:ea:cd:92:14:b5:
dc:b3:b9:5d:4c:0f:f9:e1:c5:ba:10:a2:ec:e4:fb:47:d3:f0:
32:25:7e:12:dc:48:37:b4:0c:d3:a1:ce:6d:b2:63:62:45:4f:
23:d7:25:95:86:34:ea:fe:24:61:29:2d:f6:71:a9:80:28:66:
76:ea:ac:0c
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE7cki3H00HhtUl+YwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk
MDJjMTgwOTgtMzJlZC00ODg0LWFhNTYtMTliYjAwNzg1YTJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKP3Mgt6oE1nSLLbaR0KJAj9um+YDTE/jMPL
pFd7kwdK1fmDjFEbeNbL8RnDEu0wDBL7lfW+YkumeyLQz/qcf80AJQP+0aSivVss
79tl6VDmVEayJ9s6c6rgR+v6G2LCWezPyG75EKC+JakBB9aet1rEYx0MurRQtCQA
AwOjeFai9Ku+P0DzDLscD9u7gkScGZ5RDQ+UOjG51wufRhLRCP20vRX6CoHUUseo
hLrN5DElRZia4t2wLyGiXVhzr5vlQaYLJ553raAEYjJB/XpN8wYo0JowXEdrQOMa
+vbcjnn3mJclC2WIyd3gpDn0Tvi/JfmoHBJ7Eg0lP09n4ZpGUwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFKuu2EK8QwQFFc/wtsCA0K9Lujr8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2RjYTdjYzktNGI2Zi0z
ODYwLTk5ZjEtOWIzNTFkOGE2MThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAbUpb5BkYtM/3YTZ5KCghFGJlXpXWnblggzeH4
Udk5t2hlaxF7nCiD+IC60KWl9FjG4HDylKAgYKKQtn6pWpQG/xEy9HD4XP0Ok63B
bdLWXfKKe5Br47vOX4v9YEgkReTvCHyEGUVXUL4DPeQPowv6E20TCMjCpyI1i22X
q6+VRqzgFSm99Vz/EotOGKC/BUBzBebYmh0jWQHFiBPg/rTP/66YDE/nSX3Y84wK
kULZwl0B6f/24VAI42UTmxeEjdw16s2SFLXcs7ldTA/54cW6EKLs5PtH0/AyJX4S
3Eg3tAzToc5tsmNiRU8j1yWVhjTq/iRhKS32camAKGZ26qwM
-----END CERTIFICATE-----
Generated at Wed Aug 19 16:53:45 2026 by rpki-client