
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d81d9c91-d7b3-3d65-8396-49c69e5e66dd.roa
File: d81d9c91-d7b3-3d65-8396-49c69e5e66dd.roa (raw, json)
Hash identifier: AHK7cKnbVB9U14gqsTV/Fq0i/DcRsnkim9AdiHYU69k=
Subject key identifier: 9F:B3:E0:13:02:ED:47:E5:8C:D5:DE:54:6C:06:8B:18:43:A9:70:08
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F4328584E5A4A0CBFDA524A8F414C83C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d81d9c91-d7b3-3d65-8396-49c69e5e66dd.roa
Signing time: Wed 01 Jul 2026 09:00:12 +0000
ROA not before: Wed 01 Jul 2026 09:00:12 +0000
ROA not after: Tue 29 Sep 2026 09:00:12 +0000
asID: 399646
IP address blocks: 136.0.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:5a:4a:0c:bf:da:52:4a:8f:41:4c:83:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Jul 1 09:00:12 2026 GMT
Not After : Sep 29 09:00:12 2026 GMT
Subject: CN=cf11ac04-75b9-437d-9e7d-8c6d07926b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a9:16:13:55:6f:56:c8:ca:c1:1d:ea:d9:23:
b2:45:fa:8f:d0:a4:1e:6f:7b:a4:04:31:94:f4:e8:
97:4b:15:58:76:a7:e0:f8:d9:cc:33:00:8f:0d:b1:
59:0a:ea:53:9b:fa:7f:9f:f8:3a:ee:e9:7d:8e:a1:
77:8a:8f:24:c1:6e:60:dc:df:a5:80:18:44:39:75:
98:f4:3f:83:fb:35:5b:a7:ba:89:d1:6d:71:a1:77:
92:28:fc:fe:6b:3d:98:5c:f5:4f:41:ce:0a:b7:f9:
89:d8:85:54:1a:05:8a:69:b0:86:de:35:d9:32:35:
71:40:af:2e:7f:36:c4:16:d9:77:f7:bf:88:68:54:
82:fa:6c:62:75:e5:eb:bd:27:fb:f4:d9:45:5e:37:
2a:61:bf:a6:85:f5:5f:45:97:80:cf:f1:ab:c9:36:
34:4c:6a:e4:0a:ba:42:0e:d6:fb:99:91:bb:6f:59:
12:e6:43:57:35:c7:55:00:de:a5:94:4a:a6:5a:83:
6d:bf:1e:d8:ad:2a:34:b9:6a:5a:a6:17:bf:03:c0:
b3:de:d7:08:5e:03:40:61:36:60:86:74:19:a8:38:
df:97:4d:7a:92:e9:4e:f9:0c:dd:2b:f3:cc:26:25:
71:65:d1:99:3b:b0:83:a0:5b:a3:1f:af:66:16:28:
d9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B3:E0:13:02:ED:47:E5:8C:D5:DE:54:6C:06:8B:18:43:A9:70:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d81d9c91-d7b3-3d65-8396-49c69e5e66dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
136.0.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:d7:5d:8c:95:96:45:25:80:de:54:8a:85:d9:99:0e:dc:0a:
92:88:8b:cc:0d:e3:28:ce:fa:24:6c:af:64:21:3b:40:25:53:
d4:aa:0f:b2:ab:61:5f:80:28:cd:23:8a:14:61:02:42:67:9d:
36:6a:a7:cd:b7:66:3d:a5:bc:cf:62:6b:be:e9:0c:68:29:37:
cd:a6:2d:6c:f6:0d:32:1e:91:41:c5:9d:57:ad:97:4e:83:ef:
d1:43:24:33:25:33:6f:06:df:42:c3:93:d4:fb:d0:fd:46:7b:
2b:18:87:36:e3:93:03:b7:ae:10:60:14:7c:56:f5:22:db:a3:
e5:6e:95:11:fe:e6:a0:00:8f:b7:70:25:e3:ec:e9:7a:1c:0a:
46:40:8f:57:65:2e:40:ce:0a:29:15:ae:17:ba:72:41:76:2d:
3f:76:db:45:f3:87:f4:1f:b3:1a:d5:1c:56:9c:f4:a9:af:e6:
8e:b6:d5:f9:ab:e4:06:d4:05:74:90:93:fe:93:95:d6:8e:b5:
35:fc:40:e3:56:90:6a:96:28:45:85:c6:01:12:cf:2e:f0:7d:
95:d6:12:6d:be:62:f2:35:8e:39:3c:e4:37:e1:c2:cf:d4:23:
71:aa:a5:8d:2b:67:56:fd:b8:d4:09:d4:83:bd:e8:e2:b4:03:
1c:63:d3:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aSgy/2lJKj0FMg8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk
Y2YxMWFjMDQtNzViOS00MzdkLTllN2QtOGM2ZDA3OTI2YjQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qkWE1VvVsjKwR3q2SOyRfqP0KQeb3ukBDGU
9OiXSxVYdqfg+NnMMwCPDbFZCupTm/p/n/g67ul9jqF3io8kwW5g3N+lgBhEOXWY
9D+D+zVbp7qJ0W1xoXeSKPz+az2YXPVPQc4Kt/mJ2IVUGgWKabCG3jXZMjVxQK8u
fzbEFtl397+IaFSC+mxideXrvSf79NlFXjcqYb+mhfVfRZeAz/GryTY0TGrkCrpC
Dtb7mZG7b1kS5kNXNcdVAN6llEqmWoNtvx7YrSo0uWpaphe/A8Cz3tcIXgNAYTZg
hnQZqDjfl016kulO+QzdK/PMJiVxZdGZO7CDoFujH69mFijZJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ+z4BMC7UfljNXeVGwGixhDqXAIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZDgxZDljOTEtZDdiMy0z
ZDY1LTgzOTYtNDljNjllNWU2NmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiAAoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHnXXYyVlkUlgN5UioXZmQ7cCpKIi8wN4yjO+iRsr2QhO0AlU9SqD7Kr
YV+AKM0jihRhAkJnnTZqp823Zj2lvM9ia77pDGgpN82mLWz2DTIekUHFnVetl06D
79FDJDMlM28G30LDk9T70P1GeysYhzbjkwO3rhBgFHxW9SLbo+VulRH+5qAAj7dw
JePs6XocCkZAj1dlLkDOCikVrhe6ckF2LT9220Xzh/QfsxrVHFac9Kmv5o621fmr
5AbUBXSQk/6TldaOtTX8QONWkGqWKEWFxgESzy7wfZXWEm2+YvI1jjk85Dfhws/U
I3GqpY0rZ1b9uNQJ1IO96OK0Axxj0+s=
-----END CERTIFICATE-----
Generated at Mon Jul 13 10:35:41 2026 by rpki-client