
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0c9a58ca-719c-3b6a-8ae3-bc48cd31dcca.roa
File: 0c9a58ca-719c-3b6a-8ae3-bc48cd31dcca.roa (raw, json)
Hash identifier: iskwvkGcJSH25vf/Gyged+kxlbh289BxR/veynadTC8=
Subject key identifier: 55:B6:A1:7F:0D:42:AA:6E:25:B3:D2:97:90:92:A6:4A:13:E2:AA:76
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D237A3B26A5B0909867C27A2C
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0c9a58ca-719c-3b6a-8ae3-bc48cd31dcca.roa
Signing time: Thu 12 Mar 2026 01:00:32 +0000
ROA not before: Thu 12 Mar 2026 01:00:32 +0000
ROA not after: Wed 10 Jun 2026 01:00:32 +0000
asID: 19905
IP address blocks: 173.31.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:23:7a:3b:26:a5:b0:90:98:67:c2:7a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 12 01:00:32 2026 GMT
Not After : Jun 10 01:00:32 2026 GMT
Subject: CN=8d1e165b-2804-496b-95d9-9354a0cf796e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3a:b0:d7:1e:31:93:c3:8d:60:ee:ed:f3:bd:
95:6c:44:dd:1e:bd:e1:e8:d8:e4:5f:d0:15:ee:38:
e4:29:ae:07:4f:af:d9:fa:45:35:c6:ab:50:ac:9a:
f3:31:c6:24:0f:ed:ed:e6:3d:db:c7:b3:75:9c:cd:
dc:55:d0:51:a9:53:a1:0e:5b:75:b9:9f:82:94:f3:
4c:bd:75:c7:a9:82:b8:3e:5f:0f:a4:ed:e9:5b:c3:
dd:fc:c1:25:0e:71:71:7f:55:b2:fd:9a:98:8b:cd:
47:64:e5:22:e9:f6:54:9b:bb:00:51:1e:b4:3e:37:
e6:c7:40:71:c4:fc:a9:70:6f:1c:33:19:b4:a0:7d:
ad:f8:2d:0f:36:83:70:05:ea:9e:23:20:87:10:8c:
bc:3b:d1:2b:e7:63:e4:a1:e0:6d:e6:6d:0c:96:47:
6b:78:63:72:ca:13:1d:92:20:f7:50:12:46:9f:39:
bc:5e:ee:a7:f9:f1:4f:8d:d9:7c:26:3d:12:5c:56:
3c:01:41:1a:84:02:63:5d:60:fd:70:1c:c8:26:62:
36:3c:59:dd:ca:ea:34:03:4f:88:45:3f:f8:08:fd:
77:ff:b6:de:fc:46:d2:22:90:ad:63:f4:20:2d:41:
6f:15:d7:3f:64:a1:4d:29:fd:d7:60:8e:0d:b3:5e:
b3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B6:A1:7F:0D:42:AA:6E:25:B3:D2:97:90:92:A6:4A:13:E2:AA:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0c9a58ca-719c-3b6a-8ae3-bc48cd31dcca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.31.169.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:71:9d:1f:4c:8f:eb:ab:4b:67:71:fa:0c:ef:c6:21:f9:7f:
24:3e:aa:eb:61:2c:42:4c:2d:c5:98:2f:9c:60:0a:fa:3e:fe:
f0:a9:34:b2:56:e4:bb:60:4b:9e:4c:6b:fa:c5:30:9a:f4:5d:
2c:b1:1a:a9:09:b9:35:3a:bf:cc:b5:70:e3:ff:37:7b:43:80:
5a:6b:77:85:74:b8:86:84:5c:38:d2:da:ee:51:91:5a:4c:41:
89:91:04:b6:28:96:50:b1:ef:e5:b8:fa:54:d9:a6:ad:8b:7a:
a4:5f:ec:24:59:a0:92:d5:18:ac:6a:02:67:cc:0f:7c:59:25:
a9:f6:35:b2:ee:01:a6:e9:21:f2:58:5e:96:d4:c7:21:59:18:
7e:22:2e:99:66:0e:f2:78:1b:de:68:c6:85:44:08:98:06:bf:
84:ac:1d:36:12:49:ae:b0:c3:4f:ec:c6:69:ae:96:28:18:1e:
a4:f0:e5:b8:98:d0:e2:27:45:90:1a:a4:e7:0e:e1:92:90:ec:
64:f3:98:d6:3a:59:6d:3e:b7:4b:7f:ba:ce:05:93:c5:dd:2b:
f1:61:a0:82:88:25:94:dc:58:c0:f1:0a:85:37:82:d7:4b:0e:
f7:a5:89:bc:51:e0:02:ea:14:b3:55:ae:7f:46:ff:58:a8:1d:
f9:90:96:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:41:39 2026 by rpki-client