
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2a39e022-3d32-35c8-84fe-b0d322477975.roa
File: 2a39e022-3d32-35c8-84fe-b0d322477975.roa (raw, json)
Hash identifier: sk19Tg/nH+SgTnyDx+ZZ8Neg/NUl6lDc5ua/sZvKy34=
Subject key identifier: C9:BB:A3:A5:7A:86:A9:61:9E:98:F0:D2:AC:D1:78:65:0A:80:DE:45
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D143D3C025861774F6E4A64C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2a39e022-3d32-35c8-84fe-b0d322477975.roa
Signing time: Fri 06 Mar 2026 14:00:40 +0000
ROA not before: Fri 06 Mar 2026 14:00:40 +0000
ROA not after: Thu 04 Jun 2026 13:00:40 +0000
asID: 19905
IP address blocks: 173.26.192.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:14:3d:3c:02:58:61:77:4f:6e:4a:64:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 6 14:00:40 2026 GMT
Not After : Jun 4 13:00:40 2026 GMT
Subject: CN=f16badf4-6517-4298-b9cf-ba739a22ed4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d1:7a:d1:15:b9:5b:02:97:d2:92:94:b4:e1:
11:72:3a:48:e2:0d:83:4d:a2:5a:e1:09:db:3a:d4:
67:2d:e7:7f:2b:74:6b:b1:9a:66:1f:fd:e8:ce:55:
3c:3c:20:5c:f3:63:67:65:b3:f4:c1:d4:96:17:2f:
2f:f5:2b:4c:21:0e:60:62:ed:fc:a7:14:a2:27:78:
bc:48:97:5e:8c:6f:55:ac:71:7b:6b:fd:1b:63:f6:
38:fd:d4:8f:60:8d:bd:b8:21:85:20:8c:e8:16:8f:
ae:60:c0:18:c9:bd:04:fb:44:d4:9b:67:7a:3b:88:
07:54:11:09:18:c3:b4:16:90:7c:dc:90:15:04:dc:
f9:a3:bd:01:07:23:89:e6:bf:87:1c:7a:18:4a:b3:
c5:ee:aa:c0:b4:1d:ca:86:cb:81:47:60:b9:99:91:
20:07:89:7d:b7:8b:e3:d7:1b:06:3f:1e:49:f9:82:
ab:47:d9:22:19:36:e6:cb:a5:90:57:98:1e:58:fb:
be:ea:b8:b1:c7:86:1a:bf:10:f3:ae:e4:3a:78:5a:
1d:df:28:21:b3:04:ae:1d:b7:9b:c9:04:3a:c9:b8:
ea:6c:8a:de:11:8b:08:34:3c:34:1c:06:1b:5f:81:
4a:cb:96:7a:58:7b:3b:31:d3:bf:7e:0e:1e:5b:49:
12:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BB:A3:A5:7A:86:A9:61:9E:98:F0:D2:AC:D1:78:65:0A:80:DE:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2a39e022-3d32-35c8-84fe-b0d322477975.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.26.192.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:dc:d7:00:b8:c4:bc:1e:71:40:9c:ca:0d:7f:1c:b5:d7:f2:
6a:04:17:4a:a7:f0:15:b4:32:6e:94:e5:72:2b:74:08:2a:5b:
3b:7f:ce:6d:0c:37:6d:bf:49:2b:bb:8d:86:1d:39:17:79:58:
51:c0:25:22:cc:f3:79:0a:12:b6:cb:7c:cd:dd:bc:ba:b0:c3:
2c:95:6b:b0:af:6a:a6:b1:63:ba:6e:f9:bb:06:f4:ee:ad:75:
03:fd:e8:8d:e1:30:64:98:fc:7b:49:e2:b8:89:bc:4a:b9:a4:
a2:5c:c2:a5:3e:49:06:34:df:c8:ad:d2:eb:9b:90:d1:d9:e3:
c3:31:78:97:fc:4e:b9:51:9b:38:d5:ad:a8:3e:ac:d6:e5:94:
82:f8:86:46:14:19:e5:4f:2b:87:31:b8:85:37:4a:31:f8:50:
ba:86:98:bd:f3:ca:c2:c7:7c:59:a6:b5:eb:71:5f:3d:52:04:
b4:ac:61:21:9e:83:f3:51:be:22:0e:42:38:3d:cb:e4:57:ef:
d3:fa:bb:ee:12:2c:8f:6a:31:c9:87:05:bd:b8:52:64:74:ba:
4a:54:a9:3a:6f:a0:63:01:11:17:19:7d:b1:f7:41:05:e0:ae:
a3:ad:f5:ae:a0:a3:22:b1:d4:2d:9a:ca:70:54:bc:22:71:c7:
e1:35:0d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:46:29 2026 by rpki-client