
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/db240b6c-595b-339e-8c97-985b4f53d411.roa
File: db240b6c-595b-339e-8c97-985b4f53d411.roa (raw, json)
Hash identifier: 2zT12OIKbywowgco0YF/ouGSmNUvlxKp25e+SoTpoJk=
Subject key identifier: EE:8E:6C:28:8A:E7:3F:DF:D3:0B:02:E3:09:E3:02:DD:C4:FD:2E:5E
Certificate issuer: /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial: 010D0C9F4328584F4C3D52B4AAAC977ECEE8C340
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/db240b6c-595b-339e-8c97-985b4f53d411.roa
Signing time: Sat 26 Sep 2026 01:00:13 +0000
ROA not before: Sat 26 Sep 2026 01:00:13 +0000
ROA not after: Fri 25 Dec 2026 02:00:13 +0000
asID: 1239
IP address blocks: 134.202.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 04:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4c:3d:52:b4:aa:ac:97:7e:ce:e8:c3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
Validity
Not Before: Sep 26 01:00:13 2026 GMT
Not After : Dec 25 02:00:13 2026 GMT
Subject: CN=e3a8290e-6950-4f5e-803e-0c18ff67f847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d9:ab:cc:59:22:e3:1f:fe:78:63:4d:f1:63:
e0:ce:1f:a8:bf:c9:b5:4e:2c:b6:f6:26:1e:86:d2:
d6:19:bd:08:e4:86:9c:dc:08:66:b5:c3:90:ba:c6:
9f:2f:1a:10:45:1f:0b:4c:50:ec:ce:e7:39:06:3c:
ef:f8:23:81:91:45:e6:ff:a0:3f:da:ca:98:fd:b0:
fd:23:63:9c:d9:9a:b6:fb:01:b4:a2:78:40:f2:d1:
c0:af:d3:12:3d:7f:17:1a:8e:77:18:7a:28:53:26:
78:39:ec:1f:32:13:ab:5e:9c:0f:bb:db:a0:80:ae:
0f:50:e2:de:c5:c7:44:d4:82:45:65:56:04:06:b4:
4a:c0:c5:0e:c1:9b:10:b8:e2:95:32:22:bf:58:57:
cd:17:a1:45:a3:9c:98:9f:02:c7:14:eb:2c:f1:43:
5f:a7:4f:19:10:23:35:e7:d4:03:de:76:54:d0:e3:
f9:9f:56:4f:26:0b:cd:d4:15:ee:7e:91:0e:2b:c3:
c4:95:95:91:56:40:3b:0d:6f:94:71:b3:b6:90:4e:
3d:a1:fa:0c:ad:f2:de:44:32:17:63:83:c1:5d:aa:
bf:b7:6e:16:b8:f5:d2:12:fe:68:6b:7c:05:56:d0:
94:7e:21:00:b7:9f:6e:ac:bd:05:79:67:6b:e0:d4:
08:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8E:6C:28:8A:E7:3F:DF:D3:0B:02:E3:09:E3:02:DD:C4:FD:2E:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/db240b6c-595b-339e-8c97-985b4f53d411.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
X509v3 Authority Key Identifier:
keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
sbgp-ipAddrBlock: critical
IPv4:
134.202.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:2e:ea:ae:a1:fd:06:da:b6:b4:3a:68:b2:3b:e9:de:1c:47:
6b:1e:67:03:03:f1:cf:df:4c:6f:fe:93:5f:41:20:eb:53:7e:
31:c1:17:63:69:70:34:b1:83:71:2b:91:a3:4b:76:6b:94:a7:
b1:c7:75:4e:9d:c4:62:48:46:07:3c:82:ac:4b:18:0a:42:45:
85:c3:1d:48:69:66:82:58:5b:48:a8:91:29:9b:f3:c4:9a:73:
cd:07:45:08:b2:ec:42:34:b4:10:ce:00:68:2b:9b:6f:96:21:
9e:bd:d6:06:f9:f8:dd:57:51:44:d1:0d:7a:83:6b:76:a0:91:
a7:be:d6:20:59:43:c0:62:b1:1d:0b:9e:c8:02:59:28:0e:75:
5b:cb:75:2e:15:c6:d8:06:9e:d3:e7:7e:b6:d4:f3:3e:52:12:
10:a2:d2:c9:67:e4:02:26:80:57:65:a0:ee:9e:8d:10:36:5b:
16:b8:c0:5b:1c:71:45:21:51:4e:6e:1a:63:42:9d:48:d4:46:
8d:39:7c:bc:c5:8a:20:d9:24:db:06:f7:83:ca:f9:f6:c6:92:
48:39:80:98:c9:43:e4:cb:0c:9b:df:60:06:32:93:e1:39:83:
35:60:86:4e:f1:f9:81:31:b7:65:5d:31:66:9f:17:35:98:23:
7f:71:8a:4d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPVK0qqyXfs7ow0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzk3NmMwOTEtMTEzOC00OTE3LTk2NDktNTU3NTYxOGFi
N2VhMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk
ZTNhODI5MGUtNjk1MC00ZjVlLTgwM2UtMGMxOGZmNjdmODQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNmrzFki4x/+eGNN8WPgzh+ov8m1Tiy29iYe
htLWGb0I5Iac3AhmtcOQusafLxoQRR8LTFDszuc5Bjzv+COBkUXm/6A/2sqY/bD9
I2Oc2Zq2+wG0onhA8tHAr9MSPX8XGo53GHooUyZ4OewfMhOrXpwPu9uggK4PUOLe
xcdE1IJFZVYEBrRKwMUOwZsQuOKVMiK/WFfNF6FFo5yYnwLHFOss8UNfp08ZECM1
59QD3nZU0OP5n1ZPJgvN1BXufpEOK8PElZWRVkA7DW+UcbO2kE49ofoMrfLeRDIX
Y4PBXaq/t24WuPXSEv5oa3wFVtCUfiEAt59urL0FeWdr4NQIKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO6ObCiK5z/f0wsC4wnjAt3E/S5eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zOTc2
YzA5MS0xMTM4LTQ5MTctOTY0OS01NTc1NjE4YWI3ZWEvZGIyNDBiNmMtNTk1Yi0z
MzllLThjOTctOTg1YjRmNTNkNDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzk3NmMwOTEtMTEzOC00OTE3LTk2
NDktNTU3NTYxOGFiN2VhLzM5NzZjMDkxLTExMzgtNDkxNy05NjQ5LTU1NzU2MThh
YjdlYS5jcmwwHwYDVR0jBBgwFoAUTla3pe8dsKcVPlQushcc4BOG8oEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zOTc2YzA5MS0xMTM4LTQ5MTctOTY0OS01NTc1
NjE4YWI3ZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhsooMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE8u6q6h/QbatrQ6aLI76d4cR2seZwMD8c/fTG/+k19BIOtTfjHBF2Np
cDSxg3ErkaNLdmuUp7HHdU6dxGJIRgc8gqxLGApCRYXDHUhpZoJYW0iokSmb88Sa
c80HRQiy7EI0tBDOAGgrm2+WIZ691gb5+N1XUUTRDXqDa3agkae+1iBZQ8BisR0L
nsgCWSgOdVvLdS4VxtgGntPnfrbU8z5SEhCi0sln5AImgFdloO6ejRA2Wxa4wFsc
cUUhUU5uGmNCnUjURo05fLzFiiDZJNsG94PK+fbGkkg5gJjJQ+TLDJvfYAYyk+E5
gzVghk7x+YExt2VdMWafFzWYI39xik0=
-----END CERTIFICATE-----
Generated at Sat Oct 10 14:41:23 2026 by rpki-client