
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cf838f86-57b6-3c56-91e8-5dc7c34088ac.roa
File: cf838f86-57b6-3c56-91e8-5dc7c34088ac.roa (raw, json)
Hash identifier: 8FOSiNdMjGCq38LkFYlgDA2FaG83LzbvMeZdKCdcUrE=
Subject key identifier: 70:8A:26:8A:E1:2B:F9:EA:6A:92:3D:E1:31:B3:2C:2F:E0:31:45:30
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F4328584E210FBAAA43D499ECBB83D8C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cf838f86-57b6-3c56-91e8-5dc7c34088ac.roa
Signing time: Wed 10 Jun 2026 21:00:11 +0000
ROA not before: Wed 10 Jun 2026 21:00:11 +0000
ROA not after: Tue 08 Sep 2026 21:00:11 +0000
asID: 20115
IP address blocks: 24.178.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:21:0f:ba:aa:43:d4:99:ec:bb:83:d8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Jun 10 21:00:11 2026 GMT
Not After : Sep 8 21:00:11 2026 GMT
Subject: CN=eb197ecc-101f-4154-82e3-10c0494eaa17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:13:53:b4:5c:66:5b:b1:fb:39:a0:58:70:50:
be:ec:e0:93:51:af:fe:3b:af:83:7c:17:ff:48:bb:
3a:72:c9:5e:f0:6e:90:b5:fb:e1:37:5b:39:6a:95:
c5:56:ab:38:15:e9:76:1e:b5:f2:65:db:53:54:47:
3d:2c:9e:2a:a3:3e:b7:a7:70:06:22:21:91:22:ca:
23:bb:5b:93:d5:86:be:c1:1e:4b:c7:2b:c5:8a:78:
7b:dd:db:cb:86:8f:52:e2:1e:6a:00:57:c6:4a:d4:
22:75:47:35:0c:dc:a8:1a:69:2e:51:48:2b:f9:14:
87:e1:e0:e9:c0:0a:c2:54:b2:5e:a6:af:25:18:6d:
8b:43:aa:da:81:9f:4f:46:f8:e2:0e:51:b6:a4:a2:
a4:bc:24:10:18:8c:76:75:d9:8f:7c:c7:70:34:aa:
9c:e7:ca:f9:8c:1e:67:fd:78:b6:f2:9b:e6:c3:a9:
4d:e5:4f:bc:1d:e1:86:38:eb:db:fc:ef:86:dd:7d:
3a:7d:73:d7:40:19:38:c8:c2:eb:b3:74:f7:6b:75:
ed:03:41:0d:26:6e:7d:d7:d4:3e:28:55:94:5b:83:
d5:25:3f:86:52:6e:f7:89:71:dd:82:e6:53:32:b1:
a8:13:73:af:cd:4f:6d:27:bf:dd:4f:6f:49:09:8f:
02:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:8A:26:8A:E1:2B:F9:EA:6A:92:3D:E1:31:B3:2C:2F:E0:31:45:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cf838f86-57b6-3c56-91e8-5dc7c34088ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
24.178.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:17:6d:ff:7e:59:cd:27:a6:6c:36:c7:f0:ad:76:4e:99:35:
1d:6a:dd:fe:00:c8:5e:52:cf:e8:ed:66:d1:11:98:2f:50:5c:
4f:2d:c5:7f:1d:7f:8c:09:86:7c:08:59:4c:c3:df:75:ef:5d:
95:85:0d:44:1f:e8:77:e2:cb:dd:d4:46:fe:3f:b0:2d:9c:3d:
82:55:39:5a:1f:c3:22:d0:d4:38:45:fd:f3:6b:d7:5d:68:57:
5c:db:42:11:3f:57:ed:b1:cc:37:64:54:a7:63:b8:2d:5a:cc:
37:7e:75:5e:39:84:3b:04:57:98:f3:7d:15:29:08:18:57:28:
77:0c:aa:22:f5:3a:c3:64:f0:65:99:d8:8a:4e:64:29:d9:97:
e8:12:3b:ba:39:b4:52:65:3a:ef:22:c2:52:a1:b4:62:d8:13:
2a:2d:36:5c:ea:12:89:82:06:86:8b:d9:af:38:f4:f2:6c:63:
32:b1:33:b2:9c:53:f2:e6:e4:b7:c7:9b:d6:23:cd:1d:63:6e:
f1:29:c4:02:bd:9e:37:dc:be:6b:65:87:6f:1f:57:65:cc:5f:
f5:23:b5:fb:bf:e9:38:16:7b:b8:f2:78:31:b9:bd:b2:31:b9:
1e:7b:be:fa:dd:d9:02:8b:99:ce:3b:49:c0:0b:45:f3:4d:9a:
d1:bb:d6:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4hD7qqQ9SZ7LuD2MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDYxMDIxMDAxMVoXDTI2MDkwODIxMDAxMVowLzEtMCsGA1UEAxMk
ZWIxOTdlY2MtMTAxZi00MTU0LTgyZTMtMTBjMDQ5NGVhYTE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhNTtFxmW7H7OaBYcFC+7OCTUa/+O6+DfBf/
SLs6csle8G6QtfvhN1s5apXFVqs4Fel2HrXyZdtTVEc9LJ4qoz63p3AGIiGRIsoj
u1uT1Ya+wR5LxyvFinh73dvLho9S4h5qAFfGStQidUc1DNyoGmkuUUgr+RSH4eDp
wArCVLJepq8lGG2LQ6ragZ9PRvjiDlG2pKKkvCQQGIx2ddmPfMdwNKqc58r5jB5n
/Xi28pvmw6lN5U+8HeGGOOvb/O+G3X06fXPXQBk4yMLrs3T3a3XtA0ENJm5919Q+
KFWUW4PVJT+GUm73iXHdguZTMrGoE3OvzU9tJ7/dT29JCY8CPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHCKJorhK/nqapI94TGzLC/gMUUwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvY2Y4MzhmODYtNTdiNi0z
YzU2LTkxZTgtNWRjN2MzNDA4OGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGLKfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADIXbf9+Wc0npmw2x/Ctdk6ZNR1q3f4AyF5Sz+jtZtERmC9QXE8txX8d
f4wJhnwIWUzD33XvXZWFDUQf6Hfiy93URv4/sC2cPYJVOVofwyLQ1DhF/fNr111o
V1zbQhE/V+2xzDdkVKdjuC1azDd+dV45hDsEV5jzfRUpCBhXKHcMqiL1OsNk8GWZ
2IpOZCnZl+gSO7o5tFJlOu8iwlKhtGLYEyotNlzqEomCBoaL2a849PJsYzKxM7Kc
U/Lm5LfHm9YjzR1jbvEpxAK9njfcvmtlh28fV2XMX/Ujtfu/6TgWe7jyeDG5vbIx
uR57vvrd2QKLmc47ScALRfNNmtG71pQ=
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:57:42 2026 by rpki-client