
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/d894e327-dd17-32e8-a5ca-0dd0c4765b8f.roa
File: d894e327-dd17-32e8-a5ca-0dd0c4765b8f.roa (raw, json)
Hash identifier: KrxI0CUQ0fHOQncbcH/xNAsmK7ki/nepWjD9q/bN1xg=
Subject key identifier: 8E:C7:60:D5:96:A7:7A:75:D1:8C:E4:11:8A:AB:46:40:61:B9:97:33
Certificate issuer: /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial: 010D0C9F4328584E253F0B1357A2FFDCBAFFDD00
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/d894e327-dd17-32e8-a5ca-0dd0c4765b8f.roa
Signing time: Fri 12 Jun 2026 09:00:11 +0000
ROA not before: Fri 12 Jun 2026 09:00:11 +0000
ROA not after: Thu 10 Sep 2026 09:00:11 +0000
asID: 3356
IP address blocks: 134.202.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 04:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:25:3f:0b:13:57:a2:ff:dc:ba:ff:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
Validity
Not Before: Jun 12 09:00:11 2026 GMT
Not After : Sep 10 09:00:11 2026 GMT
Subject: CN=38250806-ca7b-43dc-bfa1-0b33d0745a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ff:a2:12:68:25:08:bb:00:04:62:e0:78:03:
9e:ec:b8:4d:74:a2:5c:c5:77:ff:8a:c1:cf:54:a5:
26:48:3a:68:b0:09:25:e0:87:60:b3:a2:b3:5f:71:
f3:31:81:9d:c6:3f:09:11:4a:78:7d:6b:61:e1:0f:
e2:28:69:80:1d:f7:f0:e6:2e:13:e5:b2:ee:de:80:
1f:be:2a:48:e9:8f:75:8f:0e:16:a9:cd:c8:bb:49:
32:ba:9f:a9:c8:6a:5c:f4:55:33:da:ee:a7:cd:1a:
dd:f1:dd:8d:2d:f4:a9:42:e3:91:80:9a:54:66:69:
e0:18:ac:d2:82:d1:db:89:77:e4:ee:76:9e:dc:a6:
82:90:fb:f5:d5:9c:9f:f3:93:da:0f:0f:0c:11:b8:
46:41:4a:a8:6b:9a:cf:44:cd:8f:93:c3:d3:18:af:
f5:7f:eb:64:77:82:18:f4:ff:0f:ac:30:fa:3f:6f:
f5:05:ae:e8:e0:3f:75:e8:df:8e:62:03:c6:1a:8d:
65:d0:70:7a:d7:da:82:a4:8f:58:06:e4:85:04:44:
3a:d3:cb:00:7a:61:92:97:5e:1a:84:01:5b:a7:41:
d3:f2:f8:69:10:7d:44:54:db:b4:13:89:e9:13:ec:
f4:16:79:8b:4c:7a:46:da:99:8c:70:5e:fc:59:ed:
d2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C7:60:D5:96:A7:7A:75:D1:8C:E4:11:8A:AB:46:40:61:B9:97:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/d894e327-dd17-32e8-a5ca-0dd0c4765b8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
X509v3 Authority Key Identifier:
keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
sbgp-ipAddrBlock: critical
IPv4:
134.202.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:42:7c:8c:34:5c:83:68:98:42:c0:54:1a:c6:b7:9a:69:67:
08:cb:c6:e4:fa:b1:ee:3a:0f:06:c2:af:c2:aa:0f:5b:4b:b6:
58:bd:e2:10:61:a6:ea:93:40:f9:25:93:76:a6:f2:b1:55:91:
75:22:7b:a1:31:e3:63:53:72:c7:c1:50:65:6d:7e:01:a1:41:
60:94:8c:f6:54:9d:64:9e:62:b7:c3:fb:0a:c2:52:17:23:d3:
21:a1:d3:10:e8:13:36:92:92:56:5f:10:a6:6f:af:23:9b:92:
2a:2e:a0:88:78:c8:84:dd:8e:71:95:05:9b:1b:97:b6:63:9a:
e0:86:df:30:4c:90:b6:c0:20:6e:5e:bb:4d:09:d3:1c:90:36:
63:9e:7f:8c:93:04:9a:0f:45:30:09:7c:03:1d:01:84:e2:e9:
56:23:5e:98:69:68:e8:45:41:59:e3:64:8c:02:32:07:9d:1a:
96:f1:b9:c0:a5:8a:3d:27:a0:3e:d2:61:43:88:7d:06:d9:01:
2a:1d:a0:54:58:19:f2:aa:b9:5a:4e:ee:6f:3f:a0:bd:d7:d2:
23:00:88:c6:f7:c5:be:68:73:62:85:77:d5:6c:05:09:79:05:
6a:6f:43:6c:c3:24:ee:d0:e6:70:14:80:24:40:03:b6:81:8e:
34:3f:37:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:35:20 2026 by rpki-client