
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b137c512-566f-3c33-b76b-9f4a5ad8ebbf.roa
File: b137c512-566f-3c33-b76b-9f4a5ad8ebbf.roa (raw, json)
Hash identifier: YVpRWFrt84D9l8LOvr9ihVm2Tu16zZrm7u26+/hZBIk=
Subject key identifier: 4C:92:67:ED:D3:64:85:53:40:C9:29:A5:3F:C2:4C:31:5A:47:7F:52
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584F49874BF9CBA28AF9A0A30A40
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b137c512-566f-3c33-b76b-9f4a5ad8ebbf.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 36617
IP address blocks: 198.41.0.10/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:87:4b:f9:cb:a2:8a:f9:a0:a3:0a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=ca565945-b919-4d23-a4fa-13b2b84cd4f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:64:a0:1f:ef:83:cc:29:7d:df:e7:a5:88:2c:
ed:0d:94:4a:b7:a9:17:7f:fd:59:29:d9:73:7d:a4:
ed:ce:9f:44:39:fc:8e:4f:17:e8:ba:07:29:af:c0:
28:6d:53:ba:4b:40:a5:36:5c:4c:15:49:70:51:06:
01:bd:35:07:f1:76:aa:93:eb:04:fb:55:39:93:fb:
4a:d2:45:54:1f:30:e3:10:d2:7b:2b:c3:30:f9:df:
da:28:b4:cc:83:7f:8a:f3:6e:9e:c9:2c:be:85:ec:
96:19:c5:31:f8:fc:95:6f:02:3e:9e:1b:c5:d7:e2:
ea:11:fc:9d:62:44:83:07:59:af:f4:13:1f:d5:dd:
49:67:3c:16:86:df:2a:57:21:6f:94:70:aa:35:a4:
2a:dc:76:de:05:39:64:61:f9:55:0c:65:e9:c0:3f:
bc:d7:0c:ba:51:92:14:e2:94:47:4a:3a:fb:b9:b3:
ad:12:b3:39:ba:5e:a8:d7:2d:e9:30:24:4b:96:44:
04:f9:04:19:04:d6:c6:db:ad:81:9d:e9:bf:ac:1c:
9f:ae:95:c1:9e:c0:10:55:ef:25:89:24:d1:42:77:
6a:50:27:23:45:aa:c2:ea:c3:95:31:51:8a:89:30:
78:2b:8d:ef:75:ec:63:df:f1:b7:11:6b:ea:3f:79:
df:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:92:67:ED:D3:64:85:53:40:C9:29:A5:3F:C2:4C:31:5A:47:7F:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b137c512-566f-3c33-b76b-9f4a5ad8ebbf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.0.10/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:31:02:10:cd:3a:35:5e:6a:bf:18:15:75:42:39:b6:04:bf:
10:60:82:03:01:43:5a:42:63:54:cb:b8:0c:c4:5c:25:95:01:
b4:0b:0d:b8:12:eb:8c:7b:c9:64:20:54:1d:7c:21:ad:39:01:
ae:67:06:31:5e:2e:fd:8d:86:7e:76:62:63:3c:ff:c9:20:98:
75:ec:bd:f3:68:0a:2f:92:4e:3e:ba:42:00:e5:25:0b:10:c1:
a2:5a:1d:3d:55:39:f2:9e:07:07:11:ef:81:03:ef:c9:42:6c:
d1:61:19:69:11:39:22:89:36:db:43:45:4d:d2:4a:8e:01:fa:
58:c5:a6:13:86:90:b6:3b:52:50:bc:ef:4c:a3:cb:87:26:23:
59:55:a1:91:d4:7d:89:dd:fa:dc:9e:21:25:5e:46:e3:d9:5f:
81:ab:f3:f8:6e:09:fa:61:96:4a:fb:fb:11:13:22:b4:14:ed:
10:07:89:a3:69:ef:01:43:26:44:a5:67:2d:7b:f5:9d:87:4e:
bd:55:3e:b1:b2:e1:44:4d:e3:75:ce:ed:7a:73:6b:e1:8a:05:
37:cf:d6:0e:c5:fe:1c:78:cc:e1:55:12:47:c4:e4:c1:52:7d:
97:a4:49:d1:e9:5e:aa:21:8a:42:d9:92:94:c2:a5:dd:aa:27:
ca:0a:65:a1
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Jh0v5y6KK+aCjCkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
Y2E1NjU5NDUtYjkxOS00ZDIzLWE0ZmEtMTNiMmI4NGNkNGY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA72SgH++DzCl93+eliCztDZRKt6kXf/1ZKdlz
faTtzp9EOfyOTxfougcpr8AobVO6S0ClNlxMFUlwUQYBvTUH8Xaqk+sE+1U5k/tK
0kVUHzDjENJ7K8Mw+d/aKLTMg3+K826eySy+heyWGcUx+PyVbwI+nhvF1+LqEfyd
YkSDB1mv9BMf1d1JZzwWht8qVyFvlHCqNaQq3HbeBTlkYflVDGXpwD+81wy6UZIU
4pRHSjr7ubOtErM5ul6o1y3pMCRLlkQE+QQZBNbG262Bnem/rByfrpXBnsAQVe8l
iSTRQndqUCcjRarC6sOVMVGKiTB4K43vdexj3/G3EWvqP3nfowIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEySZ+3TZIVTQMkppT/CTDFaR39SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjEzN2M1MTItNTY2Zi0z
YzMzLWI3NmItOWY0YTVhZDhlYmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCJMQIQzTo1Xmq/GBV1Qjm2BL8QYIIDAUNaQmNUy7gMxFwllQG0Cw24
EuuMe8lkIFQdfCGtOQGuZwYxXi79jYZ+dmJjPP/JIJh17L3zaAovkk4+ukIA5SUL
EMGiWh09VTnyngcHEe+BA+/JQmzRYRlpETkiiTbbQ0VN0kqOAfpYxaYThpC2O1JQ
vO9Mo8uHJiNZVaGR1H2J3frcniElXkbj2V+Bq/P4bgn6YZZK+/sREyK0FO0QB4mj
ae8BQyZEpWcte/Wdh069VT6xsuFETeN1zu16c2vhigU3z9YOxf4ceMzhVRJHxOTB
Un2XpEnR6V6qIYpC2ZKUwqXdqifKCmWh
-----END CERTIFICATE-----
Generated at Fri Sep 25 19:52:47 2026 by rpki-client