
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f4c13cb-84a0-3671-a229-376fbf5ea33a.roa
File: 3f4c13cb-84a0-3671-a229-376fbf5ea33a.roa (raw, json)
Hash identifier: 72QIGJbg4B6Kk5ijsX6tYVf99sHUo+AzmN4XS3Si8cA=
Subject key identifier: 72:4B:5B:59:08:BA:EB:63:1E:F0:07:40:DE:C4:C9:F1:8C:BA:EB:08
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584F5FC801DF4794DB5123E178C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f4c13cb-84a0-3671-a229-376fbf5ea33a.roa
Signing time: Sat 03 Oct 2026 01:00:12 +0000
ROA not before: Sat 03 Oct 2026 01:00:12 +0000
ROA not after: Fri 01 Jan 2027 02:00:12 +0000
asID: 19905
IP address blocks: 173.23.122.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 14 Oct 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:5f:c8:01:df:47:94:db:51:23:e1:78:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Oct 3 01:00:12 2026 GMT
Not After : Jan 1 02:00:12 2027 GMT
Subject: CN=ad86525d-58ee-4711-8a34-958a37dcc1f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:69:a3:b1:0d:89:d3:c8:09:01:e2:6d:09:1f:
a3:57:17:ce:80:78:ab:d8:d0:55:0d:21:47:40:34:
30:9f:85:94:78:d7:a0:99:59:5a:5c:c2:14:8e:4b:
8b:76:4c:55:ee:19:8b:9a:97:99:c8:37:4b:02:1e:
ff:82:1b:2f:e4:45:6e:03:c0:4a:76:c8:ae:b7:86:
2e:b8:99:46:f8:c9:84:e6:b6:ad:5c:84:1a:16:fb:
8f:ac:d5:4c:bc:92:26:25:e7:b2:b0:dd:f1:c6:43:
60:3e:ef:e1:22:37:8a:5d:e0:d4:f4:a4:63:a8:43:
48:96:21:39:85:ff:a5:85:7f:af:8a:e8:6e:b7:ca:
40:6e:49:73:9b:80:1b:88:d5:b1:0d:ce:79:bb:fe:
91:20:b1:23:76:44:68:04:77:e7:66:e2:24:0e:d0:
78:05:e1:c8:5f:c6:8b:7d:73:84:0d:54:3e:d8:3d:
dd:f8:49:74:d6:e2:c2:7a:91:d9:7a:cd:c9:e4:91:
1a:7f:a5:a3:b8:0e:e8:66:d3:99:d6:5f:d2:ef:df:
ad:b0:03:b0:db:17:75:a4:6e:54:66:30:2b:ac:9a:
75:e8:5d:fa:78:41:62:00:c7:8e:e8:d5:27:cf:cf:
26:7b:8b:15:8b:76:a4:fd:f7:c8:d1:e5:a9:a7:0f:
22:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4B:5B:59:08:BA:EB:63:1E:F0:07:40:DE:C4:C9:F1:8C:BA:EB:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f4c13cb-84a0-3671-a229-376fbf5ea33a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.23.122.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:15:00:f3:ba:c5:d2:85:43:fe:63:3d:d5:2f:b2:7b:27:47:
fe:7a:87:44:34:9b:d4:97:87:f4:70:c4:3a:8d:a8:86:83:11:
24:48:a8:8f:6a:d4:38:94:a0:3c:8e:bf:37:ed:5b:04:81:6c:
a2:7f:eb:15:e2:ec:89:6f:87:70:12:47:b7:03:49:65:3a:6b:
8f:7b:25:3f:fd:1a:89:39:69:c0:22:61:b8:04:35:45:a2:15:
82:95:7c:0c:57:b0:6a:7c:cc:4b:f7:58:17:83:a9:d7:5a:4f:
24:45:dd:42:06:d9:08:95:d2:b5:c3:8b:84:85:57:7b:47:8b:
ae:14:f8:de:52:ef:57:1e:09:65:84:d2:45:bb:1b:0c:87:dc:
4c:c8:fe:bd:ab:b4:41:03:f5:3c:e8:e4:37:dd:4f:8e:bc:f8:
c6:1a:10:04:05:d9:7c:39:61:ca:c5:4d:63:e4:1a:ee:41:4c:
41:2e:0c:80:78:80:c4:99:3d:18:78:26:66:9f:c1:ac:eb:6f:
d1:a5:96:6c:e7:0c:38:d4:46:d6:56:5b:c5:cb:e3:c5:97:31:
54:ba:ec:0b:80:ad:e3:86:ce:40:99:a7:66:d4:07:a3:de:39:
f8:34:97:b4:98:4a:ac:35:3d:2f:b9:90:b8:3c:b5:4a:d3:da:
f4:05:29:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:47:16 2026 by rpki-client