
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/b8d91776-1543-38be-9850-76776625fbbd.roa
File: b8d91776-1543-38be-9850-76776625fbbd.roa (raw, json)
Hash identifier: OmXd0JypaiLsw60pt7SpxDREYx8sOsqH8vCTVxWdqiM=
Subject key identifier: D4:A2:D3:38:39:C3:6E:44:84:17:49:D0:45:67:04:95:33:3B:F0:0D
Certificate issuer: /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial: 010D0C9F4328584B987242DBB3B8670302280BC0
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/b8d91776-1543-38be-9850-76776625fbbd.roa
Signing time: Tue 21 Oct 2025 13:00:39 +0000
ROA not before: Tue 21 Oct 2025 13:00:39 +0000
ROA not after: Mon 19 Jan 2026 14:00:39 +0000
asID: 6079
IP address blocks: 134.202.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Oct 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:98:72:42:db:b3:b8:67:03:02:28:0b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
Validity
Not Before: Oct 21 13:00:39 2025 GMT
Not After : Jan 19 14:00:39 2026 GMT
Subject: CN=a32fbec5-90d4-4973-905f-efc0c1822748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0a:f3:69:b7:aa:79:af:9c:f1:ff:72:7f:08:
d7:50:92:3c:3c:ab:fe:cf:03:77:34:05:8f:85:58:
48:b1:63:11:c5:82:52:60:1b:6a:3b:dd:2b:e0:6d:
bc:dc:08:7c:6d:d5:49:e5:dc:bc:f1:27:88:a9:f9:
3b:68:f1:78:1b:6c:fd:8a:cb:d5:37:21:51:c2:20:
db:9a:e3:45:29:89:d7:bf:d3:b0:d5:85:20:fa:e7:
7a:cf:d3:ea:f3:a3:83:b3:53:60:7d:12:da:66:e6:
7c:8a:84:af:89:d9:e1:85:2f:a6:73:35:39:20:60:
e1:81:72:71:04:cc:34:63:fa:60:5b:06:7c:f3:e6:
44:6c:8a:e2:65:8a:da:30:61:4f:60:18:8f:75:9f:
c3:b7:b0:af:d4:d1:97:41:56:46:4d:1c:a9:82:5f:
47:5e:7e:3e:39:41:a4:f8:33:f3:68:c8:86:ee:9b:
21:c4:9e:32:74:18:8e:64:3d:ea:aa:c2:04:4b:4f:
e3:3c:7e:a8:b7:93:4b:fe:47:b5:5d:f6:8e:c5:30:
d2:6f:63:4f:61:ec:56:60:fe:4a:34:19:46:7a:a8:
00:ce:2e:2f:9b:da:87:d9:3b:bb:87:8c:75:03:6c:
fb:b3:35:17:0e:56:c1:af:2d:43:94:4c:f2:0b:31:
ee:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A2:D3:38:39:C3:6E:44:84:17:49:D0:45:67:04:95:33:3B:F0:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/b8d91776-1543-38be-9850-76776625fbbd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
X509v3 Authority Key Identifier:
keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
sbgp-ipAddrBlock: critical
IPv4:
134.202.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:33:94:56:b7:3e:72:53:37:3a:62:07:6c:3a:0f:78:98:4e:
b9:9d:93:9f:e7:32:1f:a9:44:cb:81:e6:31:cb:5c:5e:d2:8d:
74:69:52:95:c0:49:30:47:2a:19:89:a3:7c:be:40:4e:38:22:
ba:c3:c3:a6:96:9a:fd:55:54:8c:e4:f3:4a:8b:41:86:14:1f:
56:a5:16:a4:db:b5:7d:10:be:9e:84:ac:c1:b2:f7:0f:5e:ce:
4e:98:21:bf:19:12:70:9a:2e:b6:16:66:63:ac:42:62:8e:7d:
9e:ef:47:31:c3:32:d7:50:ba:32:22:64:a3:32:f8:5a:4c:ce:
11:f9:a7:6c:56:e6:04:2b:e5:a5:45:d9:f2:62:a8:d2:93:b4:
bd:1a:9a:74:99:b0:72:10:cc:f3:c4:5d:71:6b:c5:13:51:4a:
f0:74:f4:a6:fe:e8:54:0c:0f:65:57:9c:b6:c2:a4:4b:86:7c:
cf:08:62:02:e5:d0:2f:ec:58:de:1d:50:64:f3:93:87:bc:91:
d7:59:43:50:95:19:33:c2:aa:68:74:dd:b5:0c:fb:3e:c7:18:
19:89:2f:18:82:61:43:fd:4f:26:5b:47:22:7f:aa:05:57:a4:
00:e9:b1:e6:dc:61:be:46:e3:38:73:33:9f:99:6a:ec:56:2f:
fa:a4:d9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 08:30:27 2025 by rpki-client