
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/24c35fde-4dd9-39b8-a4eb-7fb0bf93e57f.roa
File: 24c35fde-4dd9-39b8-a4eb-7fb0bf93e57f.roa (raw, json)
Hash identifier: 0nBw+wReZAZNma/4mum5Vp1ZmtvsXapEaa8l3cYuz3w=
Subject key identifier: 6D:D9:2F:38:6E:CE:50:0D:D6:B4:9C:CB:4E:D6:97:B5:F1:74:1E:2A
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584F5E62F49D95CAF20A17BD51A0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/24c35fde-4dd9-39b8-a4eb-7fb0bf93e57f.roa
Signing time: Fri 02 Oct 2026 13:00:13 +0000
ROA not before: Fri 02 Oct 2026 13:00:13 +0000
ROA not after: Thu 31 Dec 2026 14:00:13 +0000
asID: 19905
IP address blocks: 173.20.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 14 Oct 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:5e:62:f4:9d:95:ca:f2:0a:17:bd:51:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Oct 2 13:00:13 2026 GMT
Not After : Dec 31 14:00:13 2026 GMT
Subject: CN=5918025e-1607-4174-a021-4740b7c844e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:01:bd:f9:50:8b:e1:6f:a1:74:98:8a:9f:e8:
ef:18:80:45:38:2e:43:a9:42:51:59:86:5d:c6:d6:
d8:6e:3a:16:f0:e1:a9:4d:4c:0d:62:c7:92:89:9f:
37:f9:35:f4:ae:54:0f:4a:64:67:97:22:72:34:59:
f8:7c:a7:74:60:fa:67:48:dc:5a:c3:3b:e1:5c:67:
3e:f3:53:3d:4c:ff:70:d2:82:f6:6a:a9:75:80:02:
2d:9d:ae:f9:a3:c6:25:67:8d:37:6c:f5:54:a3:16:
60:e2:44:a4:52:a0:ea:32:26:b6:bf:37:b5:40:59:
b3:59:03:fc:6c:fa:74:03:01:33:7d:52:38:ab:34:
0d:54:eb:e2:e8:50:30:cf:72:67:d3:0d:cb:75:b2:
a0:58:ad:29:57:65:e6:b7:61:76:21:1a:15:48:1c:
74:99:e1:cc:27:f4:f2:69:50:c7:48:8a:d4:82:b4:
60:99:2b:93:eb:c0:48:b5:75:51:1a:ba:fc:ba:37:
40:aa:9f:19:b0:c6:df:61:01:98:4e:be:05:d1:27:
12:a3:ed:65:98:05:98:2e:be:f3:f7:4e:ee:d6:b3:
dc:87:b2:48:1c:01:65:50:63:98:eb:4e:16:80:c4:
e7:34:34:81:72:e6:f5:db:3c:a3:10:47:50:82:ee:
d9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D9:2F:38:6E:CE:50:0D:D6:B4:9C:CB:4E:D6:97:B5:F1:74:1E:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/24c35fde-4dd9-39b8-a4eb-7fb0bf93e57f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.20.72.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:0b:49:b8:36:de:51:10:d2:91:07:5f:f2:53:06:ea:50:2c:
ef:19:8b:8b:13:c1:df:43:b9:e8:19:9a:9b:b9:d6:ca:7d:61:
28:67:13:6f:b2:a3:ef:48:de:dd:f0:49:2b:41:f0:fd:a9:ac:
87:c9:17:9d:51:21:ac:26:19:04:cf:97:75:ea:a1:96:c8:7d:
c2:df:b8:c8:1e:77:d2:44:46:64:35:5b:37:93:3e:74:46:7a:
55:c7:96:24:4b:59:0d:39:9c:db:d5:2e:bf:69:35:d4:b3:18:
14:7e:4e:80:de:5d:e6:c3:79:47:d2:66:fb:92:ad:9b:e5:78:
87:be:c8:03:32:5d:1a:bc:b9:4f:6f:81:43:0f:9e:dc:d0:0e:
17:34:41:84:52:1a:68:11:c3:d0:02:c8:5c:f6:e5:5b:c3:0f:
fe:6a:36:c5:dc:a6:2a:28:6a:0f:e4:ff:23:99:a9:ec:49:f1:
e5:b4:9e:58:8b:63:bb:c8:80:75:a7:5b:76:8d:a7:43:5c:c2:
41:89:77:04:01:07:2d:c4:ba:2c:2a:58:77:00:f5:62:2c:cb:
16:90:84:b0:85:b9:cd:86:23:39:6e:a8:37:2b:fe:cf:dc:b7:
55:5e:f4:3a:04:f1:40:74:33:78:5e:53:f6:1d:50:5d:3c:57:
2d:e4:62:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:28:50 2026 by rpki-client