
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0a5b58c3-1120-3ab3-881e-3291973497bd.roa
File: 0a5b58c3-1120-3ab3-881e-3291973497bd.roa (raw, json)
Hash identifier: FvnDk3PugjKTgABmRPa9qF0GpAnRLJInr+CS4WMxrEY=
Subject key identifier: 0F:FA:AF:69:EA:B2:D8:B3:77:D0:93:C0:4D:5B:67:08:88:02:74:DC
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D20AF427A6097EA4AEF8006B0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0a5b58c3-1120-3ab3-881e-3291973497bd.roa
Signing time: Wed 11 Mar 2026 01:00:32 +0000
ROA not before: Wed 11 Mar 2026 01:00:32 +0000
ROA not after: Tue 09 Jun 2026 01:00:32 +0000
asID: 19905
IP address blocks: 173.21.16.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:20:af:42:7a:60:97:ea:4a:ef:80:06:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 11 01:00:32 2026 GMT
Not After : Jun 9 01:00:32 2026 GMT
Subject: CN=539fe247-0366-45b2-8bf3-c21f6c23088a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:25:e3:52:e6:83:86:4f:26:48:d3:0e:1c:28:
ae:53:0f:aa:6f:e2:a1:fb:6b:68:64:05:7b:e5:da:
27:a9:b7:b8:fc:fc:88:94:43:6b:24:e4:b2:8d:36:
fc:30:1c:5d:b8:5f:2c:1e:ed:30:d6:24:fe:3d:00:
75:a7:b8:87:3a:c9:eb:54:5c:35:eb:6d:7a:86:75:
1c:97:f8:9f:70:17:98:06:19:be:59:44:58:cb:7a:
f0:d5:b0:cf:a1:19:15:1c:1c:cb:25:79:19:96:38:
d1:3e:cf:00:8d:3f:29:21:80:c1:46:bd:ae:01:08:
0d:93:63:7c:7c:4c:03:5f:4c:62:2e:1d:ca:0d:e3:
48:3e:9a:a9:14:75:75:a5:4f:2a:87:8f:27:b1:1e:
c6:54:e2:a2:00:d1:66:64:8c:ac:07:d1:47:c4:e5:
11:49:e1:bf:49:b9:0b:5a:9b:ea:cb:c6:0d:33:99:
17:3d:c1:4e:60:f0:61:5a:3f:0c:c3:14:7b:45:b4:
fb:b8:69:87:38:25:13:eb:36:fb:0e:4b:49:79:3a:
3c:b1:be:6a:ab:d8:e2:24:3f:ee:0c:6a:a7:2b:d8:
57:47:04:15:8d:e7:d7:59:e8:16:f0:33:a1:90:ac:
eb:3d:52:da:46:bd:34:de:2a:85:3d:de:c0:4d:a2:
16:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:FA:AF:69:EA:B2:D8:B3:77:D0:93:C0:4D:5B:67:08:88:02:74:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0a5b58c3-1120-3ab3-881e-3291973497bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.21.16.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:9d:60:39:9c:3d:62:6d:4f:12:09:02:9b:8b:60:83:f6:fb:
7b:bb:07:ce:c5:62:68:54:1e:e1:ae:77:b2:3b:50:dd:8b:20:
d4:76:d3:7f:65:f8:2e:44:88:3e:8f:21:e1:2e:9e:7b:bf:ff:
61:6f:86:84:5b:9d:49:e0:b7:a9:2a:7c:a1:86:71:0b:85:f3:
e1:1f:7d:ed:05:c3:d2:8e:c5:83:69:91:30:ef:7a:83:b1:19:
97:fa:4f:89:ac:cd:0a:08:52:c4:42:2c:c9:37:34:d8:6c:5a:
38:ff:da:dd:e1:d2:e6:ca:cd:00:4d:d8:24:d5:97:29:0a:b4:
dc:44:29:ac:e9:9d:37:97:51:59:32:2e:73:48:eb:cd:a9:e1:
89:a5:e0:e9:70:a8:ef:78:ec:e5:66:fa:b8:3e:31:d2:c1:8a:
42:dc:72:75:27:aa:51:5b:01:0e:98:db:ef:8f:ab:55:b0:7b:
fc:9f:e8:92:5d:d0:ed:31:94:b4:95:68:8d:eb:c6:8d:48:9b:
33:31:f2:56:72:60:63:bd:a8:92:01:ce:f6:7b:3c:bb:86:c5:
96:61:2f:d0:88:51:dd:25:a7:60:c1:df:43:52:64:37:44:c6:
41:07:9d:47:b7:11:bf:bf:16:94:81:e9:8d:46:20:93:ff:b6:
f0:d2:8a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:44:57 2026 by rpki-client