
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3042086e-a87d-399b-9e30-fb80daa4afd6.roa
File: 3042086e-a87d-399b-9e30-fb80daa4afd6.roa (raw, json)
Hash identifier: Qj4e/Am+kYUxC2FyUbI9LeEABmfsMP5ZDQjX93ACc38=
Subject key identifier: 96:B8:B4:47:55:D4:EA:97:8A:D3:88:97:72:06:29:63:1D:8B:53:81
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584D091263B7349472BD9EB8B080
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3042086e-a87d-399b-9e30-fb80daa4afd6.roa
Signing time: Mon 02 Mar 2026 14:00:41 +0000
ROA not before: Mon 02 Mar 2026 14:00:41 +0000
ROA not after: Sun 31 May 2026 13:00:41 +0000
asID: 20172
IP address blocks: 2620:74:2c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:09:12:63:b7:34:94:72:bd:9e:b8:b0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Mar 2 14:00:41 2026 GMT
Not After : May 31 13:00:41 2026 GMT
Subject: CN=2e65f337-d705-41a3-a4c8-40bff472bb04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d0:b7:f2:fc:33:ee:8f:ac:b3:ed:a9:7f:8d:
86:0e:52:7a:4e:74:c3:d4:c7:fa:fb:39:f7:6f:6f:
15:8d:bf:06:a9:b6:87:fb:5e:7d:9d:d6:fa:0d:8a:
14:d7:90:4d:67:df:18:72:b3:1b:6f:27:66:1a:b3:
60:aa:1a:1f:50:91:46:3d:30:2c:3a:f8:f6:9e:81:
da:77:79:e3:fd:0c:20:32:ca:c3:d2:81:16:0c:31:
3d:ec:bb:fb:82:3c:56:4a:2f:74:de:06:85:cb:27:
12:f9:f8:90:73:de:3e:49:ae:37:ec:b9:40:b4:0b:
da:09:38:da:0c:db:ea:ce:e2:95:bf:9c:35:e5:8c:
e5:42:3d:4c:7e:4f:16:33:63:7c:cb:43:76:78:c1:
56:a7:ae:76:36:68:d1:47:b3:07:6a:db:9e:1e:22:
e1:98:ce:ed:00:9b:fd:53:be:6c:f6:cd:b0:60:5a:
f6:85:f6:da:9e:32:da:ea:93:78:8b:2b:e0:96:9e:
de:ef:a2:43:2c:22:2c:6c:6f:4f:22:5a:10:9f:f1:
81:0d:27:aa:bd:4e:c8:6f:2e:ad:cd:f2:29:5f:ee:
81:17:2b:66:3f:4d:3f:44:ad:1a:c5:8a:c3:af:c0:
fa:c3:50:79:c0:77:c1:b5:2d:54:5d:92:c6:d4:95:
a0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B8:B4:47:55:D4:EA:97:8A:D3:88:97:72:06:29:63:1D:8B:53:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3042086e-a87d-399b-9e30-fb80daa4afd6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:79:f7:63:df:ec:08:e2:8d:62:13:c2:88:19:6b:e1:ac:2a:
f1:83:3e:b6:48:a6:9f:d6:dc:c6:de:18:15:fc:38:6c:ca:d2:
a7:c1:f6:2b:cc:83:8a:c8:2f:4c:d2:62:e2:6a:23:fc:fe:7c:
1d:60:86:5d:d3:3d:50:9d:61:99:88:37:2f:da:72:b5:a2:b8:
83:1c:44:96:7e:76:c2:f8:96:7d:73:6d:8a:81:f6:a9:69:1a:
3c:e1:6e:14:ea:e0:02:62:c4:34:b3:6e:9b:09:bc:9f:ae:ac:
c2:61:66:6f:ca:16:9b:c2:00:64:0e:26:48:05:52:a6:1e:0e:
3d:34:82:a4:c0:02:cc:66:bf:32:75:c9:8d:d4:3e:8d:04:fa:
56:17:b4:54:82:ec:1b:9d:c3:6b:5b:94:f0:28:57:f6:0a:e3:
d4:43:fc:6d:39:0d:c5:dd:ef:27:1c:7a:4d:83:45:40:4c:2f:
ab:85:6b:24:b7:c2:6d:d2:b7:f8:91:a0:a1:7e:64:9c:84:1e:
9b:7f:97:c1:c2:a2:6e:d0:20:b0:b9:5e:d9:ee:e9:bc:c6:4c:
04:22:ce:05:40:5c:74:4a:98:cd:bd:e5:cd:e0:c3:11:e5:2e:
14:b5:2a:3b:19:e0:80:51:57:20:06:a3:74:68:a2:97:15:63:
89:ae:0d:4d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0JEmO3NJRyvZ64sIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk
MmU2NWYzMzctZDcwNS00MWEzLWE0YzgtNDBiZmY0NzJiYjA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNC38vwz7o+ss+2pf42GDlJ6TnTD1Mf6+zn3
b28Vjb8GqbaH+159ndb6DYoU15BNZ98YcrMbbydmGrNgqhofUJFGPTAsOvj2noHa
d3nj/QwgMsrD0oEWDDE97Lv7gjxWSi903gaFyycS+fiQc94+Sa437LlAtAvaCTja
DNvqzuKVv5w15YzlQj1Mfk8WM2N8y0N2eMFWp652NmjRR7MHatueHiLhmM7tAJv9
U75s9s2wYFr2hfbanjLa6pN4iyvglp7e76JDLCIsbG9PIloQn/GBDSeqvU7Iby6t
zfIpX+6BFytmP00/RK0axYrDr8D6w1B5wHfBtS1UXZLG1JWgFwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJa4tEdV1OqXitOIl3IGKWMdi1OBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzA0MjA4NmUtYTg3ZC0z
OTliLTllMzAtZmI4MGRhYTRhZmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAId592Pf7AjijWITwogZa+GsKvGDPrZIpp/W3MbeGBX8OGzK0qfB
9ivMg4rIL0zSYuJqI/z+fB1ghl3TPVCdYZmINy/acrWiuIMcRJZ+dsL4ln1zbYqB
9qlpGjzhbhTq4AJixDSzbpsJvJ+urMJhZm/KFpvCAGQOJkgFUqYeDj00gqTAAsxm
vzJ1yY3UPo0E+lYXtFSC7Budw2tblPAoV/YK49RD/G05DcXd7yccek2DRUBML6uF
ayS3wm3St/iRoKF+ZJyEHpt/l8HCom7QILC5Xtnu6bzGTAQizgVAXHRKmM295c3g
wxHlLhS1KjsZ4IBRVyAGo3RoopcVY4muDU0=
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:51:32 2026 by rpki-client