
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1faca7ae-7a1a-3b05-ac69-3f359af36bef.roa
File: 1faca7ae-7a1a-3b05-ac69-3f359af36bef.roa (raw, json)
Hash identifier: TGiiW7LF4Rk75ErQqzJFOgq+CmL4WR/cTkqwxX5meXU=
Subject key identifier: 37:CF:64:E1:E2:90:D7:8C:66:69:5C:3F:EA:55:96:78:55:93:43:6A
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584EA79CE94C0AE221B59AF2B480
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1faca7ae-7a1a-3b05-ac69-3f359af36bef.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 30036
IP address blocks: 173.21.160.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9c:e9:4c:0a:e2:21:b5:9a:f2:b4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=d4f589ef-7e8e-4c82-92cc-8161e4700abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ca:43:fd:b9:45:6f:41:a0:04:f8:cc:d2:67:
08:53:fe:6c:d1:05:c7:26:5e:c3:9f:23:9e:6c:1f:
68:67:b3:3e:15:67:b9:12:4f:ac:50:d7:8f:2c:37:
94:17:b1:63:d8:66:66:87:d3:a2:0d:09:73:09:1d:
ba:b8:0e:55:c7:6b:e5:9d:1c:31:7c:c3:7a:36:96:
ed:e1:e3:83:ad:c3:75:52:e1:19:87:6f:b1:25:fe:
45:4c:81:2b:f0:dd:73:c8:d9:21:68:ce:68:f8:bb:
9b:67:35:76:d6:19:16:32:d3:d6:b8:b5:e8:92:e1:
c3:ab:dd:63:db:96:16:db:cd:51:37:73:c9:da:97:
fe:98:d6:08:95:f3:a9:65:1e:71:a0:b9:02:04:1c:
a2:63:c3:08:ef:ee:81:7d:10:6b:4c:8e:88:0f:c9:
ed:f0:97:94:ab:f9:fd:e6:f8:9c:d7:62:23:01:7d:
96:cd:8c:db:f3:c9:41:b9:5b:1f:0c:46:72:7a:d3:
68:f3:0e:b9:bd:03:68:35:7d:d1:69:46:a7:14:56:
9b:e7:fe:f5:d8:f4:fd:21:ec:23:fb:fb:5a:9a:da:
45:cb:ea:af:17:6d:6d:d8:c1:a6:01:fe:42:14:36:
50:62:f6:dc:2c:f8:b9:23:1d:35:44:8e:89:38:25:
63:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CF:64:E1:E2:90:D7:8C:66:69:5C:3F:EA:55:96:78:55:93:43:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1faca7ae-7a1a-3b05-ac69-3f359af36bef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.21.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:9b:41:0a:0c:64:5f:65:38:6b:99:20:9e:a0:17:c9:4b:93:
bc:d6:6d:01:a2:98:bb:09:a3:ab:37:36:53:5c:44:bf:0b:18:
46:9b:2e:6d:2d:a2:e5:5e:79:33:a9:1a:de:5e:f6:c6:e3:0b:
ba:41:c3:a0:44:4c:27:0c:5d:a0:39:59:b1:09:dd:db:cd:f3:
bc:ca:df:30:ad:29:eb:b4:fa:e2:37:36:fe:29:17:6b:02:f8:
a3:b1:da:53:68:c3:2b:cb:4b:d4:c9:22:28:9e:d7:0a:2a:e8:
6e:50:9d:04:53:f7:bd:d3:26:87:77:69:49:4a:65:b2:9c:d4:
38:64:3d:c8:5f:2b:ca:57:de:b1:6a:8d:3e:cf:c5:93:3a:cb:
a4:73:36:ce:d0:ea:9d:66:10:8f:d1:15:ae:f1:44:87:b8:2e:
b4:ab:23:00:2b:10:35:66:d6:3e:f9:ad:df:97:48:6f:b5:b9:
38:e5:72:fc:81:ad:cd:a7:12:88:a2:08:a3:86:8f:9f:90:53:
c3:67:43:fe:0c:76:74:fd:7a:ed:de:82:00:33:77:b1:0b:fc:
b1:75:f5:45:0d:4e:91:25:8d:3d:92:94:66:37:0b:78:fc:c6:
d2:6d:0c:28:36:c4:37:82:fd:22:a7:3e:39:ff:10:e4:10:54:
56:03:78:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnOlMCuIhtZrytIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZDRmNTg5ZWYtN2U4ZS00YzgyLTkyY2MtODE2MWU0NzAwYWJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8pD/blFb0GgBPjM0mcIU/5s0QXHJl7DnyOe
bB9oZ7M+FWe5Ek+sUNePLDeUF7Fj2GZmh9OiDQlzCR26uA5Vx2vlnRwxfMN6Npbt
4eODrcN1UuEZh2+xJf5FTIEr8N1zyNkhaM5o+LubZzV21hkWMtPWuLXokuHDq91j
25YW281RN3PJ2pf+mNYIlfOpZR5xoLkCBByiY8MI7+6BfRBrTI6ID8nt8JeUq/n9
5vic12IjAX2WzYzb88lBuVsfDEZyetNo8w65vQNoNX3RaUanFFab5/712PT9Iewj
+/tamtpFy+qvF21t2MGmAf5CFDZQYvbcLPi5Ix01RI6JOCVjGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDfPZOHikNeMZmlcP+pVlnhVk0NqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWZhY2E3YWUtN2ExYS0z
YjA1LWFjNjktM2YzNTlhZjM2YmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErRWgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGmbQQoMZF9lOGuZIJ6gF8lLk7zWbQGimLsJo6s3NlNcRL8LGEabLm0t
ouVeeTOpGt5e9sbjC7pBw6BETCcMXaA5WbEJ3dvN87zK3zCtKeu0+uI3Nv4pF2sC
+KOx2lNowyvLS9TJIiie1woq6G5QnQRT973TJod3aUlKZbKc1DhkPchfK8pX3rFq
jT7PxZM6y6RzNs7Q6p1mEI/RFa7xRIe4LrSrIwArEDVm1j75rd+XSG+1uTjlcvyB
rc2nEoiiCKOGj5+QU8NnQ/4MdnT9eu3eggAzd7EL/LF19UUNTpEljT2SlGY3C3j8
xtJtDCg2xDeC/SKnPjn/EOQQVFYDeK4=
-----END CERTIFICATE-----
Generated at Fri Aug 21 02:27:32 2026 by rpki-client