
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0976502a-f131-3d7a-a31f-fc656ea083be.roa
File: 0976502a-f131-3d7a-a31f-fc656ea083be.roa (raw, json)
Hash identifier: qBE2RpoUxWbswLSI+qHgjf6IpX9EXHL8Gho1S88VgCs=
Subject key identifier: 9A:D0:5F:86:D1:34:E6:18:12:95:C8:95:08:76:C5:EA:B1:3A:ED:AB
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584EAA520DC024746EDD9EBDB856
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0976502a-f131-3d7a-a31f-fc656ea083be.roa
Signing time: Thu 30 Jul 2026 01:00:12 +0000
ROA not before: Thu 30 Jul 2026 01:00:12 +0000
ROA not after: Wed 28 Oct 2026 01:00:12 +0000
asID: 30036
IP address blocks: 173.20.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:aa:52:0d:c0:24:74:6e:dd:9e:bd:b8:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jul 30 01:00:12 2026 GMT
Not After : Oct 28 01:00:12 2026 GMT
Subject: CN=35614252-903a-4494-996f-082642bb7e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:21:c7:2c:7a:f2:45:af:e3:97:68:f5:fc:8f:
fd:11:94:1f:23:76:15:b1:25:2b:45:c6:d0:01:00:
dd:a7:30:19:54:1f:21:c8:af:2f:c0:be:b6:42:7c:
5c:85:2d:03:a7:3e:20:c7:ed:d3:fa:b2:32:7d:eb:
88:68:2f:5b:50:43:ef:fd:4f:d0:82:ec:db:16:9f:
57:0d:2c:71:ad:d2:39:7b:90:18:40:60:14:83:76:
05:96:25:ba:a9:0f:3e:53:bb:8c:07:1c:eb:a3:43:
59:fe:75:8a:24:ca:34:59:b3:fe:86:0a:b2:74:f5:
67:c6:db:37:c9:0d:0d:52:54:aa:78:e1:f2:4f:a6:
b7:2e:15:7d:0b:4e:fc:a5:b9:9b:21:e0:90:28:98:
86:2f:0c:e2:4f:a5:64:c2:bd:f2:60:37:87:fb:62:
8f:cb:a8:0f:f5:b2:64:cd:e6:ff:d4:42:59:60:eb:
1e:08:b0:db:10:05:77:38:63:33:dc:2d:8d:67:25:
91:e1:04:84:4a:e4:74:83:f1:69:80:8f:cb:32:cd:
b0:d7:48:5d:24:5c:86:bf:c2:8b:fb:c1:63:f1:9a:
0b:ca:13:97:4b:48:08:73:96:24:ab:22:84:a5:7e:
3b:f5:46:90:b5:0a:a7:b3:56:14:b7:36:26:a8:d3:
e6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D0:5F:86:D1:34:E6:18:12:95:C8:95:08:76:C5:EA:B1:3A:ED:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0976502a-f131-3d7a-a31f-fc656ea083be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.20.63.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:22:79:b9:d3:e9:4f:0e:d7:14:b7:c5:51:0d:e3:1e:73:53:
64:80:21:37:f9:19:d2:dd:ae:43:77:f1:b5:31:bc:a6:dc:e6:
9a:4b:9e:ec:9c:ca:be:82:8b:47:12:cd:c0:7c:3e:07:ae:67:
da:68:1e:3f:96:87:36:06:68:71:7b:47:52:23:fc:e9:15:6a:
54:03:e8:74:3b:35:c7:dc:b6:be:ad:2c:c8:09:83:8d:bd:e1:
8c:61:6a:3c:99:2e:d8:7a:50:3f:e7:a5:bc:0c:ff:2a:3b:fc:
d6:6e:4c:36:ff:42:08:d0:8b:95:80:21:c7:dc:44:2b:7d:20:
77:d3:a2:30:3a:be:3d:35:53:10:91:d0:cc:e5:2c:eb:41:47:
12:4a:5e:19:00:79:48:bc:bc:56:7c:d3:ec:d4:e3:00:a2:43:
42:4a:d0:3a:02:e7:41:7a:1b:24:20:c1:47:f4:60:a4:8e:94:
36:70:3d:bb:f9:18:fd:2c:ae:bd:9c:87:3a:1b:20:68:e6:6b:
4b:a8:7b:35:21:ca:c3:0d:46:d1:3b:1f:1d:96:56:2e:a2:a2:
9d:16:73:9e:86:20:ce:aa:d7:e0:c4:25:ae:dd:d5:80:78:8f:
d1:2d:aa:94:0a:8a:42:66:03:8d:95:8d:30:13:82:8a:01:88:
45:53:2b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:29:59 2026 by rpki-client