
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/071ad484-5df0-3550-b370-4c3a2c60f315.roa
File: 071ad484-5df0-3550-b370-4c3a2c60f315.roa (raw, json)
Hash identifier: XlOd9SYfOg97aZlsmofpNx5nI32etoHiroBalUwgt5o=
Subject key identifier: AB:60:3C:40:2E:6F:0A:5C:B5:23:BD:06:F7:F3:D6:C0:2F:AC:33:F0
Certificate issuer: /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial: 010D0C9F4328584B9CA2325CCFEFEB0074F23740
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/071ad484-5df0-3550-b370-4c3a2c60f315.roa
Signing time: Thu 23 Oct 2025 01:00:31 +0000
ROA not before: Thu 23 Oct 2025 01:00:31 +0000
ROA not after: Wed 21 Jan 2026 02:00:31 +0000
asID: 54004
IP address blocks: 134.202.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 04:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:9c:a2:32:5c:cf:ef:eb:00:74:f2:37:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
Validity
Not Before: Oct 23 01:00:31 2025 GMT
Not After : Jan 21 02:00:31 2026 GMT
Subject: CN=3a9e4a26-6d70-4894-8012-5397143bde56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a3:1b:7c:76:3f:b5:26:e2:cf:9b:6a:de:5c:
cc:ef:6c:95:e9:9c:02:0e:55:3d:57:33:93:5a:5e:
7d:c9:3d:e8:4b:2d:a8:de:2d:d5:36:18:db:a0:1c:
30:19:8a:41:a0:1a:7d:64:3d:7e:9b:7a:fd:d8:54:
d8:18:22:fd:7c:82:75:33:89:e6:ff:6c:84:a5:4d:
5f:ef:29:84:66:d3:3a:a2:c5:90:37:1d:b0:98:ef:
77:eb:5a:c9:fb:83:f9:7c:b3:f5:fa:54:a0:da:76:
c7:80:3c:dc:12:52:ae:fc:9b:46:85:8e:c0:37:d4:
d1:9b:45:05:d0:df:ba:9c:10:6e:48:ab:b2:92:f8:
c6:bf:e4:bf:a7:c1:97:be:d5:b8:55:d7:38:37:ef:
03:1b:31:4c:49:5c:ba:9f:07:5b:cf:71:0c:fa:b5:
f1:ec:9b:44:f3:e2:8a:e2:b3:cc:39:f1:8b:64:11:
bb:f5:11:18:7a:5e:46:9f:7c:56:86:bf:3a:dd:6d:
b9:7e:85:16:c3:4c:f4:10:76:13:28:7d:a1:a4:c8:
80:4e:2b:51:74:86:f0:dc:c5:90:a1:fb:35:c7:ca:
d1:bf:86:03:d4:2c:27:92:fb:96:f3:1f:93:21:e3:
16:be:9c:06:00:e8:1e:6e:5a:70:7b:e9:f9:51:21:
18:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:60:3C:40:2E:6F:0A:5C:B5:23:BD:06:F7:F3:D6:C0:2F:AC:33:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/071ad484-5df0-3550-b370-4c3a2c60f315.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
X509v3 Authority Key Identifier:
keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
sbgp-ipAddrBlock: critical
IPv4:
134.202.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:26:a0:2f:a1:47:38:b4:47:08:ca:a3:8a:85:64:ca:5c:08:
67:bb:53:aa:74:f5:ba:bb:43:a2:3f:9b:c8:8a:9c:f8:bd:2a:
d9:2d:c6:e2:e9:b8:12:82:e4:b7:a9:92:7c:a8:40:4c:a0:e7:
8e:71:f7:c9:24:d9:68:d1:a7:ba:99:53:b4:6d:8c:36:5a:2b:
63:76:c6:bb:af:1a:f4:48:6e:9a:3d:03:66:3b:04:03:14:7a:
b1:15:b0:b9:4c:6e:b2:b7:72:78:ab:15:d4:02:ab:7a:24:ff:
c0:05:9a:f1:97:c0:03:bb:d9:46:da:e4:30:f4:04:91:b9:63:
15:78:04:68:99:cc:61:2a:1b:df:b5:e4:2f:12:3d:ca:41:f1:
09:7a:ba:ae:3f:85:f0:a9:c9:93:ad:5e:9c:7e:de:14:a0:a2:
48:43:93:ef:94:96:6e:7b:7d:a4:57:85:a3:0b:18:37:22:f2:
c7:09:17:b8:17:7b:11:f6:b6:20:6b:29:a0:6b:a7:f0:cb:0e:
c1:1f:73:0c:91:92:6f:78:5f:ef:a6:fa:06:78:16:4c:b1:60:
ac:49:09:03:d0:73:6d:f0:8f:0f:36:79:c2:53:8e:75:87:ac:
91:c3:f1:2d:41:c7:76:b0:3a:db:a9:be:e5:d9:ca:42:85:88:
34:95:57:90
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEucojJcz+/rAHTyN0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzk3NmMwOTEtMTEzOC00OTE3LTk2NDktNTU3NTYxOGFi
N2VhMB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk
M2E5ZTRhMjYtNmQ3MC00ODk0LTgwMTItNTM5NzE0M2JkZTU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKMbfHY/tSbiz5tq3lzM72yV6ZwCDlU9VzOT
Wl59yT3oSy2o3i3VNhjboBwwGYpBoBp9ZD1+m3r92FTYGCL9fIJ1M4nm/2yEpU1f
7ymEZtM6osWQNx2wmO9361rJ+4P5fLP1+lSg2nbHgDzcElKu/JtGhY7AN9TRm0UF
0N+6nBBuSKuykvjGv+S/p8GXvtW4Vdc4N+8DGzFMSVy6nwdbz3EM+rXx7JtE8+KK
4rPMOfGLZBG79REYel5Gn3xWhr863W25foUWw0z0EHYTKH2hpMiATitRdIbw3MWQ
ofs1x8rRv4YD1CwnkvuW8x+TIeMWvpwGAOgeblpwe+n5USEYvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKtgPEAubwpctSO9Bvfz1sAvrDPwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zOTc2
YzA5MS0xMTM4LTQ5MTctOTY0OS01NTc1NjE4YWI3ZWEvMDcxYWQ0ODQtNWRmMC0z
NTUwLWIzNzAtNGMzYTJjNjBmMzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzk3NmMwOTEtMTEzOC00OTE3LTk2
NDktNTU3NTYxOGFiN2VhLzM5NzZjMDkxLTExMzgtNDkxNy05NjQ5LTU1NzU2MThh
YjdlYS5jcmwwHwYDVR0jBBgwFoAUTla3pe8dsKcVPlQushcc4BOG8oEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zOTc2YzA5MS0xMTM4LTQ5MTctOTY0OS01NTc1
NjE4YWI3ZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhsqwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADgmoC+hRzi0RwjKo4qFZMpcCGe7U6p09bq7Q6I/m8iKnPi9KtktxuLp
uBKC5LepknyoQEyg545x98kk2WjRp7qZU7RtjDZaK2N2xruvGvRIbpo9A2Y7BAMU
erEVsLlMbrK3cnirFdQCq3ok/8AFmvGXwAO72Uba5DD0BJG5YxV4BGiZzGEqG9+1
5C8SPcpB8Ql6uq4/hfCpyZOtXpx+3hSgokhDk++Ulm57faRXhaMLGDci8scJF7gX
exH2tiBrKaBrp/DLDsEfcwyRkm94X++m+gZ4FkyxYKxJCQPQc23wjw82ecJTjnWH
rJHD8S1Bx3awOtupvuXZykKFiDSVV5A=
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:21:07 2025 by rpki-client