
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/123cfc75-ee2c-3a64-af65-154a3f602d33.roa
File: 123cfc75-ee2c-3a64-af65-154a3f602d33.roa (raw, json)
Hash identifier: ZRtTghDvFpiJgEFNflJxxFMgr1t+3Ww5NEwqYye0jLs=
Subject key identifier: 57:58:36:56:0D:68:D6:79:D0:9D:61:F3:CB:49:FE:DB:8B:29:4C:71
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F4328584E4F1F353EE6AE1A7AA0336558
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/123cfc75-ee2c-3a64-af65-154a3f602d33.roa
Signing time: Sat 27 Jun 2026 09:00:12 +0000
ROA not before: Sat 27 Jun 2026 09:00:12 +0000
ROA not after: Fri 25 Sep 2026 09:00:12 +0000
asID: 19437
IP address blocks: 131.153.100.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:4f:1f:35:3e:e6:ae:1a:7a:a0:33:65:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Jun 27 09:00:12 2026 GMT
Not After : Sep 25 09:00:12 2026 GMT
Subject: CN=1d122015-f946-493b-84a1-111f50cd4625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f8:8e:1f:5a:e7:7a:61:1e:42:6a:dd:72:81:
40:44:00:5a:e3:3c:f1:7e:e5:18:b8:0e:e8:09:f4:
79:81:d5:1c:31:37:2f:9b:f0:ca:03:cf:25:47:8a:
7e:38:b5:c8:51:b1:51:7d:f4:0d:05:d2:e8:b0:a9:
55:5a:46:fa:2a:9e:ff:9b:db:5e:39:02:27:66:19:
73:77:00:bf:1d:b5:11:03:33:a0:fd:fc:ba:3b:88:
22:32:e3:0a:e1:74:ab:7e:ca:1c:3a:58:a8:00:42:
0e:d7:0b:96:a4:f4:db:54:4b:da:d2:d5:d6:03:be:
ce:ed:23:31:84:ec:0b:33:85:fd:ab:72:a7:c4:b7:
97:fa:56:ad:08:33:78:b5:f6:40:9d:d0:a0:0c:d8:
46:52:81:77:5c:5b:62:1c:d1:4e:57:68:3e:9c:fc:
64:47:1a:4f:9f:3f:74:45:f5:11:c6:b9:04:4c:5c:
e0:28:e4:cd:89:c1:de:cf:f2:71:61:7e:66:be:7f:
20:3f:95:64:b7:a5:76:6e:6e:79:93:21:f2:d0:d8:
9d:82:72:be:d0:b8:99:d2:a2:e4:77:d7:f1:5d:7a:
53:fb:28:9a:b1:4d:32:61:7f:3e:0a:84:ae:2a:f7:
8f:70:7e:3c:ad:12:0d:2e:1c:61:3c:fd:4e:c6:05:
c8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:58:36:56:0D:68:D6:79:D0:9D:61:F3:CB:49:FE:DB:8B:29:4C:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/123cfc75-ee2c-3a64-af65-154a3f602d33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
131.153.100.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:3e:6a:93:36:6d:e7:a1:c5:4f:d8:26:b0:5d:aa:99:16:3c:
3c:6e:a7:f7:d2:cf:8e:a6:88:67:f6:1c:d2:f2:21:67:d3:e6:
05:dd:e9:b5:a5:43:bc:ca:a4:f1:7d:12:41:29:31:34:6d:12:
6b:14:b6:da:89:40:70:79:ca:6e:35:96:e2:c4:c3:b3:cc:da:
8b:0a:65:45:a7:08:4d:fe:10:58:82:24:4a:16:b7:d1:91:1e:
d4:f7:13:71:87:e4:ca:08:1e:5f:33:b4:74:fe:9b:35:e9:a4:
0f:24:e5:b2:13:14:21:10:4e:07:54:b8:62:a3:1d:93:bc:4c:
1f:ae:ad:91:a4:2b:67:cf:76:47:f8:99:43:10:b9:ff:c5:99:
c2:f4:24:ab:5a:ee:b2:3d:1d:32:e3:62:f8:c4:33:10:80:e7:
2f:ad:a2:de:d8:8d:af:2e:e3:34:41:34:b0:03:6b:56:8c:df:
cb:ae:32:09:1a:52:58:08:6b:4c:d1:f6:0a:16:ec:48:40:c1:
29:06:0d:da:1d:ca:15:62:89:dc:62:b5:b8:24:48:88:ee:a5:
7a:9c:0c:a6:22:f0:03:e7:a8:c8:68:3e:89:a4:f1:b9:14:9c:
5e:72:f0:1e:63:e7:6b:07:c0:94:a7:13:02:07:5b:0c:ff:d5:
4b:62:48:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5PHzU+5q4aeqAzZVgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh
N2Q5MB4XDTI2MDYyNzA5MDAxMloXDTI2MDkyNTA5MDAxMlowLzEtMCsGA1UEAxMk
MWQxMjIwMTUtZjk0Ni00OTNiLTg0YTEtMTExZjUwY2Q0NjI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/iOH1rnemEeQmrdcoFARABa4zzxfuUYuA7o
CfR5gdUcMTcvm/DKA88lR4p+OLXIUbFRffQNBdLosKlVWkb6Kp7/m9teOQInZhlz
dwC/HbURAzOg/fy6O4giMuMK4XSrfsocOlioAEIO1wuWpPTbVEva0tXWA77O7SMx
hOwLM4X9q3KnxLeX+latCDN4tfZAndCgDNhGUoF3XFtiHNFOV2g+nPxkRxpPnz90
RfURxrkETFzgKOTNicHez/JxYX5mvn8gP5Vkt6V2bm55kyHy0NidgnK+0LiZ0qLk
d9fxXXpT+yiasU0yYX8+CoSuKvePcH48rRINLhxhPP1OxgXI5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFdYNlYNaNZ50J1h88tJ/tuLKUxxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw
ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMTIzY2ZjNzUtZWUyYy0z
YTY0LWFmNjUtMTU0YTNmNjAyZDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1
ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh
YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2
ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5lkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHg+apM2beehxU/YJrBdqpkWPDxup/fSz46miGf2HNLyIWfT5gXd6bWl
Q7zKpPF9EkEpMTRtEmsUttqJQHB5ym41luLEw7PM2osKZUWnCE3+EFiCJEoWt9GR
HtT3E3GH5MoIHl8ztHT+mzXppA8k5bITFCEQTgdUuGKjHZO8TB+urZGkK2fPdkf4
mUMQuf/FmcL0JKta7rI9HTLjYvjEMxCA5y+tot7Yja8u4zRBNLADa1aM38uuMgka
UlgIa0zR9goW7EhAwSkGDdodyhViidxitbgkSIjupXqcDKYi8APnqMhoPomk8bkU
nF5y8B5j52sHwJSnEwIHWwz/1UtiSAc=
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:17:23 2026 by rpki-client