
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3b8538c7-b1af-312d-985d-bfad849eca5a.roa
File: 3b8538c7-b1af-312d-985d-bfad849eca5a.roa (raw, json)
Hash identifier: Eh4d61G45yPjaY3vRL67EnCrYGZlyqUiJxtt9m/7VcY=
Subject key identifier: F3:EB:00:F6:28:43:E2:7C:50:8A:D4:A2:9A:3A:D1:A5:BA:0E:5E:73
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D2379FA85319535107A3A41E0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3b8538c7-b1af-312d-985d-bfad849eca5a.roa
Signing time: Thu 12 Mar 2026 01:00:32 +0000
ROA not before: Thu 12 Mar 2026 01:00:32 +0000
ROA not after: Wed 10 Jun 2026 01:00:32 +0000
asID: 19905
IP address blocks: 173.29.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:23:79:fa:85:31:95:35:10:7a:3a:41:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 12 01:00:32 2026 GMT
Not After : Jun 10 01:00:32 2026 GMT
Subject: CN=798e18b8-f098-4806-9bb1-82e1d5ba4bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:eb:37:92:68:e8:9e:9d:7b:4c:22:fe:66:0e:
34:fb:e6:13:0a:ca:d3:0c:3e:b7:07:c7:49:a7:48:
bb:e0:83:63:50:64:3e:7b:d3:8a:a9:9f:58:01:9f:
60:22:b0:c8:cf:64:3d:47:1f:7c:20:8b:6e:5e:43:
05:cb:cd:82:2a:09:85:0c:c1:13:0c:01:75:98:b7:
d3:7e:b7:3d:51:b3:71:52:5a:3e:88:b3:09:fd:f0:
5e:ed:83:1b:cd:7a:15:07:04:63:13:94:8e:19:4a:
f1:e5:66:82:01:5d:0f:11:d9:2a:2c:ef:5f:49:bb:
b2:45:89:73:3d:53:6b:c0:b6:04:48:69:84:76:8b:
23:27:9b:f0:59:99:e2:dc:81:1e:0c:f4:1f:e5:67:
90:cb:75:24:99:23:f7:ea:81:8e:d8:e4:db:e2:ad:
c4:88:82:64:5d:3e:1e:70:90:bd:cb:d1:a6:27:e0:
a8:92:ea:28:38:ed:33:de:7e:f9:89:9d:a6:8e:4f:
b5:52:be:21:d8:e6:04:94:2c:df:e2:a6:19:a5:6a:
e1:16:5a:1a:fd:23:b3:69:ae:11:bb:44:fb:15:cd:
2b:61:34:6f:0b:ee:46:dc:b5:98:04:a4:8a:7e:7a:
10:09:be:2f:52:ab:1e:a4:1b:bc:28:84:a0:eb:78:
0f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:EB:00:F6:28:43:E2:7C:50:8A:D4:A2:9A:3A:D1:A5:BA:0E:5E:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3b8538c7-b1af-312d-985d-bfad849eca5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.29.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:52:24:4e:01:b9:63:44:d5:8c:8b:c4:42:93:57:0c:e2:cd:
4d:a8:4c:8a:a1:bd:21:f5:31:1f:f3:09:04:c6:97:b7:69:33:
31:b0:03:e7:b8:ec:c5:87:5d:c2:58:9a:13:1b:03:6d:4a:a7:
3f:eb:95:c9:d2:b9:32:25:d5:06:cc:65:c8:fe:cb:f6:bc:31:
fe:8a:9e:f8:16:af:57:48:91:56:d0:77:57:98:4a:c3:92:79:
06:fb:cf:45:b7:c5:7d:59:08:9f:07:a7:7e:96:62:bf:66:e2:
a3:db:7a:a9:0b:b6:b0:f8:b4:8b:7e:87:f0:19:85:1c:66:7d:
1c:a8:3f:4a:22:4f:81:3e:dd:1a:29:c4:8f:29:c2:c8:6c:fe:
cf:08:3d:5a:1d:e9:d0:66:56:55:58:38:ed:b4:f5:42:59:96:
25:1b:61:12:a3:15:55:fa:db:62:ac:aa:91:37:e2:f7:af:a5:
75:7e:81:fe:ac:01:48:ad:42:27:9b:3c:13:7d:91:de:a8:55:
ac:92:26:ba:ff:e3:24:8f:a8:fa:dd:36:3c:b7:58:f8:a8:6f:
cf:c7:4d:49:6a:c1:e1:ec:2e:14:32:84:66:3c:09:92:54:46:
2e:dd:56:bf:81:b6:27:76:08:a6:05:74:c4:77:04:1c:20:d4:
95:fa:c9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:42:49 2026 by rpki-client