
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/25a17b9b-c0ae-379d-86db-95e1d9cfc02d.roa
File: 25a17b9b-c0ae-379d-86db-95e1d9cfc02d.roa (raw, json)
Hash identifier: Z72MRbr2Mzu1NC/Fq/ixovbzNKUP0vjJpkUOcDhl7V8=
Subject key identifier: 17:14:C4:85:3E:BF:25:6D:F2:D4:5B:E6:11:3B:BB:AE:C4:9C:64:09
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584EA7A0E44A59A628C3B2D6E900
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/25a17b9b-c0ae-379d-86db-95e1d9cfc02d.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 30036
IP address blocks: 173.23.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:a0:e4:4a:59:a6:28:c3:b2:d6:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=ee1e28d3-bd4d-44e3-a8e9-b1354b33392e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:47:49:94:ce:c6:8d:25:e9:7a:27:af:9b:aa:
ca:ce:29:39:33:cf:a8:d1:ac:dd:91:dd:7b:67:18:
a2:5b:36:f7:25:30:28:09:db:1c:ab:1d:ba:05:7f:
9c:8e:a3:c9:83:40:a0:07:df:d8:72:b8:33:97:5b:
15:0f:bd:d1:82:cb:5a:04:33:74:dc:1f:af:20:37:
21:25:94:c4:0e:eb:98:1f:60:e1:53:5d:8a:18:1f:
1c:d3:c4:d7:b7:a7:77:f9:13:e2:91:3f:93:ea:15:
28:76:ed:50:7b:40:e6:30:b4:a9:b1:12:c2:c2:8e:
8e:b8:0e:3b:a7:de:61:a9:92:49:cc:7f:0c:a3:0f:
12:39:11:a0:11:a9:22:a6:27:5b:6a:6c:b7:c8:d4:
1b:90:d5:3a:91:61:db:82:7d:88:b1:b0:f7:3f:12:
e1:96:b8:6c:c4:fe:03:a1:32:9b:66:f5:68:5c:9f:
da:4e:31:c2:0c:0e:db:69:6c:16:cb:1f:c9:e8:21:
62:a9:c1:76:42:0b:d5:ce:c0:62:c6:40:24:80:e5:
22:a4:85:c7:27:21:c3:b6:33:d5:6e:c3:7a:4b:6b:
1c:0a:b3:d1:62:1c:70:49:31:23:06:45:e6:90:72:
e6:5d:fa:e7:2c:8a:e8:82:4c:fc:94:62:ef:af:53:
f2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:14:C4:85:3E:BF:25:6D:F2:D4:5B:E6:11:3B:BB:AE:C4:9C:64:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/25a17b9b-c0ae-379d-86db-95e1d9cfc02d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.23.59.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:a7:72:37:ad:a8:57:1c:a0:76:11:21:7f:be:0f:a5:e3:72:
c7:67:79:5b:7b:4f:d8:a0:58:e2:05:f1:41:d2:65:fa:1a:7c:
73:6d:85:6e:fc:4e:81:6b:3c:62:ce:85:69:13:b9:ed:31:25:
b6:a7:a3:82:f2:23:da:a3:68:36:3d:60:92:c4:23:79:67:cb:
fd:ec:2b:43:42:7b:fe:aa:1f:ba:3c:4c:52:5c:24:78:ff:c9:
42:d2:69:e3:83:04:50:6b:8e:26:83:0b:3f:5d:c2:c3:03:cd:
42:9f:dd:fd:d1:ae:28:b9:b7:91:20:52:48:13:54:3d:21:f9:
cb:6c:ba:1c:16:90:35:3c:9c:33:8b:e3:e2:b7:85:29:c1:07:
17:2d:c3:a8:55:df:93:c3:9a:27:6d:e1:f2:9e:a3:5c:7e:9c:
44:73:3c:73:25:3e:93:4e:7c:8f:19:a4:6c:0d:d5:25:8e:a3:
3d:df:50:10:00:39:75:b8:e8:55:59:76:16:1e:b1:78:45:fe:
61:77:ba:7c:22:b8:bc:99:a9:ce:26:62:59:27:e4:ed:ac:20:
b8:37:e0:ec:88:f6:ca:28:0f:9a:e2:b6:c6:3f:91:27:83:46:
c5:68:60:bf:37:0d:c4:a0:d0:98:76:68:51:55:d0:35:d8:eb:
48:b5:fe:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:02:15 2026 by rpki-client