
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/9c3e3edc-3909-344f-8448-01bc508f03d9.roa
File: 9c3e3edc-3909-344f-8448-01bc508f03d9.roa (raw, json)
Hash identifier: o4KdQowUBZhceRQmJbCZ/GzCik5NxvsQG/ZmpWJTwAA=
Subject key identifier: BB:D4:4B:3A:2A:72:40:7E:4C:26:97:2B:33:07:44:B1:24:C5:E2:C7
Certificate issuer: /CN=311e0039-6b7c-42f2-a76e-395b51d9ec97
Certificate serial: 010D0C9F4328584F3CE2A1FCC6A636C3ABB58700
Authority key identifier: 9A:90:99:7A:47:4A:98:A4:A1:24:89:41:55:90:BE:7C:B7:54:35:79
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/9c3e3edc-3909-344f-8448-01bc508f03d9.roa
Signing time: Sun 20 Sep 2026 13:00:12 +0000
ROA not before: Sun 20 Sep 2026 13:00:12 +0000
ROA not after: Sat 19 Dec 2026 14:00:12 +0000
asID: 400414
IP address blocks: 23.140.152.0/24 maxlen: 24
130.51.124.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/311e0039-6b7c-42f2-a76e-395b51d9ec97.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/311e0039-6b7c-42f2-a76e-395b51d9ec97.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:3c:e2:a1:fc:c6:a6:36:c3:ab:b5:87:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311e0039-6b7c-42f2-a76e-395b51d9ec97
Validity
Not Before: Sep 20 13:00:12 2026 GMT
Not After : Dec 19 14:00:12 2026 GMT
Subject: CN=03920c62-07a7-4908-b714-98d2ce7a68b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:19:b0:dc:fe:83:c4:fb:86:c4:66:8a:49:6f:
54:2a:f1:ce:97:8b:2f:0e:7f:29:c4:0b:26:85:75:
50:b2:4f:8a:a0:10:96:fc:7f:93:cc:c1:39:56:76:
98:4a:68:3a:6f:a6:5e:36:52:fd:e8:7c:c2:d8:fb:
36:76:cf:4e:e0:8d:89:d2:ee:e2:55:15:c1:ed:1f:
43:c1:bd:a9:6e:29:a9:58:8c:ae:5b:03:fd:d8:6d:
d6:e1:fe:84:38:97:c3:50:76:0b:94:e5:ff:50:28:
a9:74:b9:2d:4a:59:3a:0c:45:65:11:9d:d5:9f:32:
02:e8:30:87:18:16:fa:68:82:fe:86:da:f1:60:72:
64:32:1f:12:18:b8:c4:b7:2a:5f:5d:83:73:25:22:
01:46:ad:84:ae:48:ff:3b:24:d3:3b:97:52:be:77:
6c:b8:df:60:4e:b0:54:2a:2c:36:ff:72:6d:2c:e1:
80:d5:72:da:46:11:e4:b6:79:d8:59:54:d5:b9:b7:
ba:5f:53:a4:91:1c:04:9c:f1:28:9d:d8:8c:e5:2d:
2c:83:cb:9d:6b:9d:63:cd:4d:bb:2a:cf:02:43:b2:
e3:cf:47:03:58:d8:19:45:55:3b:da:44:dc:03:e1:
d3:65:c1:77:16:43:bc:95:a9:37:a6:6b:1f:32:4e:
a2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D4:4B:3A:2A:72:40:7E:4C:26:97:2B:33:07:44:B1:24:C5:E2:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/9c3e3edc-3909-344f-8448-01bc508f03d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/311e0039-6b7c-42f2-a76e-395b51d9ec97.crl
X509v3 Authority Key Identifier:
keyid:9A:90:99:7A:47:4A:98:A4:A1:24:89:41:55:90:BE:7C:B7:54:35:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97.cer
sbgp-ipAddrBlock: critical
IPv4:
23.140.152.0/24
130.51.124.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:68:65:3e:4b:53:af:b2:c1:8a:f0:b9:bd:93:a2:4f:65:81:
a8:f0:06:71:7e:ac:57:8c:90:66:7a:27:21:8c:8a:a0:5a:ee:
5c:a1:c4:52:c1:ce:04:2b:9a:a6:80:c0:2f:dd:ba:20:ba:d6:
12:23:8f:18:d0:54:ee:a2:92:69:53:97:4d:a8:b9:ad:6c:f1:
00:e4:57:b3:99:35:11:72:64:79:7e:fb:13:3b:f2:e7:d8:8b:
3a:3c:13:8f:b8:73:f9:aa:a7:21:15:49:9d:e4:16:ae:67:e1:
5d:ed:68:5e:58:8c:94:3a:b0:a6:b8:0a:ef:da:54:dc:82:ed:
a5:81:96:3e:b3:11:b4:41:1d:a3:0a:99:f2:dc:53:05:9f:de:
9b:bc:2e:eb:b1:a0:14:ac:bd:ba:8e:d6:83:0a:ed:f0:37:44:
20:8b:72:4f:30:21:3c:57:6d:90:71:fc:8d:df:47:32:f6:0b:
55:fa:b6:8a:6c:70:cc:6e:b8:54:01:62:26:16:fb:5f:04:cd:
79:59:fc:ab:51:0e:ce:78:51:15:e7:46:90:af:6d:c7:45:b9:
32:2c:6a:7f:01:71:b2:04:f2:a6:5c:7b:f8:c8:f2:5e:23:84:
13:61:cf:19:b8:69:fb:87:ff:d8:b2:ef:7c:c8:af:4c:e9:7b:
68:b4:55:d9
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE884qH8xqY2w6u1hwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzExZTAwMzktNmI3Yy00MmYyLWE3NmUtMzk1YjUxZDll
Yzk3MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk
MDM5MjBjNjItMDdhNy00OTA4LWI3MTQtOThkMmNlN2E2OGI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xmw3P6DxPuGxGaKSW9UKvHOl4svDn8pxAsm
hXVQsk+KoBCW/H+TzME5VnaYSmg6b6ZeNlL96HzC2Ps2ds9O4I2J0u7iVRXB7R9D
wb2pbimpWIyuWwP92G3W4f6EOJfDUHYLlOX/UCipdLktSlk6DEVlEZ3VnzIC6DCH
GBb6aIL+htrxYHJkMh8SGLjEtypfXYNzJSIBRq2Erkj/OyTTO5dSvndsuN9gTrBU
Kiw2/3JtLOGA1XLaRhHktnnYWVTVube6X1OkkRwEnPEondiM5S0sg8uda51jzU27
Ks8CQ7Ljz0cDWNgZRVU72kTcA+HTZcF3FkO8lak3pmsfMk6i/QIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFLvUSzoqckB+TCaXKzMHRLEkxeLHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zMTFl
MDAzOS02YjdjLTQyZjItYTc2ZS0zOTViNTFkOWVjOTcvOWMzZTNlZGMtMzkwOS0z
NDRmLTg0NDgtMDFiYzUwOGYwM2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzExZTAwMzktNmI3Yy00MmYyLWE3
NmUtMzk1YjUxZDllYzk3LzMxMWUwMDM5LTZiN2MtNDJmMi1hNzZlLTM5NWI1MWQ5
ZWM5Ny5jcmwwHwYDVR0jBBgwFoAUmpCZekdKmKShJIlBVZC+fLdUNXkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zMTFlMDAzOS02YjdjLTQyZjItYTc2ZS0zOTVi
NTFkOWVjOTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF4yYAwQB
gjN8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAEVoZT5LU6+ywYrwub2Tok9lgajwBnF+rFeMkGZ6JyGMiqBa
7lyhxFLBzgQrmqaAwC/duiC61hIjjxjQVO6ikmlTl02oua1s8QDkV7OZNRFyZHl+
+xM78ufYizo8E4+4c/mqpyEVSZ3kFq5n4V3taF5YjJQ6sKa4Cu/aVNyC7aWBlj6z
EbRBHaMKmfLcUwWf3pu8LuuxoBSsvbqO1oMK7fA3RCCLck8wITxXbZBx/I3fRzL2
C1X6topscMxuuFQBYiYW+18EzXlZ/KtRDs54URXnRpCvbcdFuTIsan8BcbIE8qZc
e/jI8l4jhBNhzxm4afuH/9iy73zIr0zpe2i0Vdk=
-----END CERTIFICATE-----
Generated at Mon Sep 28 16:12:59 2026 by rpki-client