
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/caef42fa-ca7a-38bc-b3e8-2241b351f688.roa
File: caef42fa-ca7a-38bc-b3e8-2241b351f688.roa (raw, json)
Hash identifier: 31E04eHKWb3CZRQ3V3Ru9dPFssW4v5adpc6zu6MgxEw=
Subject key identifier: 28:30:93:4A:3C:B4:C5:2B:7C:40:ED:4B:8D:23:D6:65:E6:90:86:C5
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584F4974821C20DE76B18C973400
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/caef42fa-ca7a-38bc-b3e8-2241b351f688.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 397209
IP address blocks: 2620:74:2b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:74:82:1c:20:de:76:b1:8c:97:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=5d31f219-458d-474a-9d0d-7f81a8d44829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d0:92:4a:2d:33:0e:ee:5e:d3:32:89:75:0c:
73:f2:fe:02:49:1d:5d:58:9e:f6:80:b6:85:c3:e5:
2e:36:9d:ca:1b:de:cb:3b:7f:a2:6e:f1:68:69:b0:
74:8a:94:31:29:4d:34:e5:f4:e4:dc:0d:90:27:c2:
62:af:2b:8c:58:8c:33:32:95:0f:0d:cc:98:12:52:
0c:55:23:4f:cd:25:ed:8c:1c:bb:5a:cf:41:a4:0f:
db:88:75:70:31:46:d2:1e:1c:b6:8e:0e:97:b0:e2:
90:64:b0:78:11:e2:02:bc:cf:14:06:e1:d0:d1:dc:
92:f2:a1:6f:0b:a4:2b:d1:7a:8d:93:86:a4:d0:d0:
60:88:73:66:3f:2a:f4:e4:51:b1:89:ab:42:e2:4f:
e6:44:3d:d0:81:5b:c0:9f:b1:4e:ef:40:dd:ad:03:
a0:0d:be:b0:40:ee:38:74:87:ee:da:c6:ca:c7:bb:
6f:25:05:81:81:71:5d:e1:f3:8d:63:01:90:c9:3d:
f9:46:10:3a:f1:24:d5:64:d0:df:a5:1c:47:13:90:
8e:e4:2e:de:d0:23:30:a8:fe:57:11:03:2f:b2:30:
75:15:dd:e4:c8:bd:e6:80:5f:f0:54:7b:f9:51:1e:
d8:d9:24:d8:98:bb:29:38:92:ae:ca:19:a0:e1:a9:
76:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:30:93:4A:3C:B4:C5:2B:7C:40:ED:4B:8D:23:D6:65:E6:90:86:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/caef42fa-ca7a-38bc-b3e8-2241b351f688.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:24:bd:c4:25:e7:f7:5d:4b:23:c9:84:cf:ff:d7:24:6e:e0:
85:10:1e:5a:e2:84:a3:bd:e9:e2:de:23:b1:c7:79:ab:43:f7:
53:ac:ed:eb:b5:7f:3f:2c:54:b2:41:a6:51:06:fb:40:ec:91:
46:8f:a0:43:91:a4:66:32:2c:16:66:15:b6:bb:b1:8c:fb:89:
77:00:8f:0d:46:9a:94:3b:18:1c:c8:e2:77:77:35:35:5d:27:
ac:42:ed:fe:a5:bd:d7:3e:98:c1:98:70:fd:88:62:32:66:b2:
83:7c:19:cc:47:20:2d:21:1b:36:59:50:4c:20:60:0f:28:ff:
25:59:05:31:44:a1:d3:1a:2d:f5:7a:06:c3:48:31:a3:54:e5:
1e:ca:18:a5:fc:4b:fa:60:fb:74:c6:51:1f:e4:b8:81:d2:3e:
14:50:6f:25:93:9c:f0:1c:a0:be:d2:1c:b2:af:b7:c4:52:99:
70:e9:5c:33:a7:21:a2:03:fb:4d:dd:7a:b5:4f:8e:1f:0c:3c:
a5:b6:94:41:4c:db:4f:da:b0:a7:ea:b7:e7:d3:3d:4e:da:97:
8a:59:98:67:21:7f:6b:77:fa:95:12:3b:48:80:b8:06:5a:1a:
eb:98:84:2e:af:d2:b1:98:9e:39:04:fa:07:a8:6e:00:42:5b:
73:b0:a6:43
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdIIcIN52sYyXNAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NWQzMWYyMTktNDU4ZC00NzRhLTlkMGQtN2Y4MWE4ZDQ0ODI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9CSSi0zDu5e0zKJdQxz8v4CSR1dWJ72gLaF
w+UuNp3KG97LO3+ibvFoabB0ipQxKU005fTk3A2QJ8JiryuMWIwzMpUPDcyYElIM
VSNPzSXtjBy7Ws9BpA/biHVwMUbSHhy2jg6XsOKQZLB4EeICvM8UBuHQ0dyS8qFv
C6Qr0XqNk4ak0NBgiHNmPyr05FGxiatC4k/mRD3QgVvAn7FO70DdrQOgDb6wQO44
dIfu2sbKx7tvJQWBgXFd4fONYwGQyT35RhA68STVZNDfpRxHE5CO5C7e0CMwqP5X
EQMvsjB1Fd3kyL3mgF/wVHv5UR7Y2STYmLspOJKuyhmg4al29QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCgwk0o8tMUrfEDtS40j1mXmkIbFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2FlZjQyZmEtY2E3YS0z
OGJjLWIzZTgtMjI0MWIzNTFmNjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACIkvcQl5/ddSyPJhM//1yRu4IUQHlrihKO96eLeI7HHeatD91Os
7eu1fz8sVLJBplEG+0DskUaPoEORpGYyLBZmFba7sYz7iXcAjw1GmpQ7GBzI4nd3
NTVdJ6xC7f6lvdc+mMGYcP2IYjJmsoN8GcxHIC0hGzZZUEwgYA8o/yVZBTFEodMa
LfV6BsNIMaNU5R7KGKX8S/pg+3TGUR/kuIHSPhRQbyWTnPAcoL7SHLKvt8RSmXDp
XDOnIaID+03derVPjh8MPKW2lEFM20/asKfqt+fTPU7al4pZmGchf2t3+pUSO0iA
uAZaGuuYhC6v0rGYnjkE+geobgBCW3OwpkM=
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:24:49 2026 by rpki-client