
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/401b248b-fbb5-32a6-9309-2b3aa7822986.roa
File: 401b248b-fbb5-32a6-9309-2b3aa7822986.roa (raw, json)
Hash identifier: RNhSKmTfv9kzXS6Ol2HVO0nvr9F0lsXTkK+Q3HNfCF0=
Subject key identifier: B7:10:C1:DC:97:32:94:25:8B:6A:BF:48:C1:47:78:06:D5:B5:3A:41
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584EA7A0B35C96B0F2BE4AD98400
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/401b248b-fbb5-32a6-9309-2b3aa7822986.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 30036
IP address blocks: 173.21.192.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:a0:b3:5c:96:b0:f2:be:4a:d9:84:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=914aaa3b-1db3-400a-8152-57089c313d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0b:52:2b:b5:a7:8e:fe:72:a9:1b:97:66:34:
90:c4:01:d8:e5:ba:2d:a6:7c:de:ae:d3:e6:f6:2c:
66:1e:55:f1:dc:4d:34:b3:1c:21:ea:57:cf:ec:f3:
78:e6:c2:e1:65:84:57:4d:76:1e:2e:bd:98:1a:2c:
e9:13:88:8f:3a:a8:16:37:c2:dd:a1:8d:85:6b:fe:
1a:35:e4:50:c2:bb:f1:02:59:0e:3e:0e:b0:19:b2:
f3:eb:36:05:f1:94:aa:2c:5a:1c:43:10:37:56:3c:
76:74:e8:e0:88:f4:40:89:ae:c0:5a:67:ed:64:80:
bc:69:e8:71:e5:1b:4e:ff:4d:e8:03:88:1b:ac:e1:
75:77:40:a4:d4:68:10:8a:e2:95:d8:c8:86:41:04:
7a:45:51:a6:2c:f0:45:68:7f:95:5f:92:24:9b:5f:
81:b2:06:cc:7a:9d:2b:de:74:ba:89:0d:e1:a6:9d:
f6:7b:05:d2:92:49:1a:d0:e9:bc:cf:00:21:37:75:
29:4c:61:1e:3b:b5:21:ff:6a:47:f4:98:6f:e2:08:
34:c1:7c:ab:ae:16:c1:07:9e:7c:81:d7:47:ce:9e:
9e:b8:e9:65:d0:0a:95:65:5f:c3:6c:4c:81:f8:56:
d3:0f:23:44:38:94:6c:b4:5a:8e:21:12:ff:93:d0:
73:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:10:C1:DC:97:32:94:25:8B:6A:BF:48:C1:47:78:06:D5:B5:3A:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/401b248b-fbb5-32a6-9309-2b3aa7822986.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.21.192.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:50:cd:7e:4c:3f:e4:30:9d:a4:f4:a2:12:c9:28:30:cc:ad:
06:20:08:33:00:7e:ba:e6:5e:57:6f:71:bb:34:e0:4c:37:51:
8b:0a:7a:48:50:ab:14:57:24:67:50:1c:0c:40:40:5b:71:a6:
9b:06:53:88:8c:f6:7b:fb:fa:21:65:87:f7:0e:de:fb:43:2c:
a7:5b:0e:f9:63:62:dd:93:08:48:43:78:17:ce:e5:4b:84:aa:
e6:e1:d3:c5:d5:5a:4f:c1:05:16:94:48:83:25:67:89:f1:de:
54:d5:d3:86:d6:f8:bb:bf:34:87:b7:86:b7:9e:f3:2c:2f:11:
73:4b:b0:bf:2d:3c:a2:81:62:2f:d7:e3:90:81:f7:a2:51:f5:
b5:41:05:62:16:b5:70:72:3f:c0:18:5b:57:6a:8b:41:85:3f:
94:3d:ea:0a:e8:f7:51:80:e0:15:68:78:95:45:1c:50:d1:1e:
b6:15:ab:24:fb:35:97:2b:f6:c8:f4:5e:22:a9:f6:e9:13:1d:
eb:2c:12:7c:55:f2:8f:5c:d2:37:a0:a7:2e:4d:09:14:c7:12:
d8:91:93:e0:c5:9f:1f:ce:ed:37:76:14:6a:ad:2a:93:76:07:
94:ca:f6:94:82:d3:d0:c3:82:3d:52:f8:13:fc:14:f8:cc:31:
1a:d1:ba:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:09:04 2026 by rpki-client