
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4bd88430-0165-3b92-90b2-213e7ef25d95.roa
File: 4bd88430-0165-3b92-90b2-213e7ef25d95.roa (raw, json)
Hash identifier: 1eSQduJW7S8d7OB/AzACylFR8OsvjmXkQONFcS1gwb0=
Subject key identifier: 29:66:2B:CE:F3:74:B5:F3:8A:6A:73:7D:08:F2:6F:2B:9F:88:C3:AE
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584ED9C736BBD5B6F979CCBA7260
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4bd88430-0165-3b92-90b2-213e7ef25d95.roa
Signing time: Sun 16 Aug 2026 01:00:14 +0000
ROA not before: Sun 16 Aug 2026 01:00:14 +0000
ROA not after: Sat 14 Nov 2026 02:00:14 +0000
asID: 19905
IP address blocks: 173.25.248.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d9:c7:36:bb:d5:b6:f9:79:cc:ba:72:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Aug 16 01:00:14 2026 GMT
Not After : Nov 14 02:00:14 2026 GMT
Subject: CN=3b02452a-5ab4-4db0-bbc5-2c4fd10c5a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:db:da:00:b7:ad:d9:05:27:3c:f1:51:e5:48:
cd:d0:a6:dc:8b:8d:84:f9:c5:1a:26:2d:4e:32:5b:
de:da:23:26:d0:bb:68:0a:3c:cb:e3:c7:fc:2f:d0:
87:d1:94:b8:15:82:cc:89:df:01:df:12:0d:28:b2:
4a:ed:02:6a:3f:c8:04:dd:20:71:92:b0:3b:7b:5e:
bd:81:e9:fa:58:b9:f5:17:66:2d:4c:a8:31:da:03:
99:d2:62:92:45:2b:32:00:f8:e3:eb:0a:7f:3d:3d:
2b:94:a1:86:d6:6c:10:f8:9d:05:03:01:35:80:81:
99:e6:05:22:ca:b1:fb:7a:6d:fc:8c:31:54:ca:54:
9c:69:9a:b4:fc:d9:bf:40:b2:87:ca:7e:41:3a:67:
d6:a3:c4:f3:fb:5e:31:bb:e9:57:1f:bc:7b:cf:6c:
8a:5f:f3:e4:11:d8:b9:57:c5:0d:6b:a8:6f:a7:60:
c6:a7:22:f8:5e:41:86:44:0b:0c:83:1b:ca:bb:9c:
53:44:c9:04:81:5d:51:60:0a:09:ad:92:40:81:3a:
e0:56:7a:60:f1:53:a9:7f:a0:d9:a9:a0:09:77:a0:
b4:3e:b6:16:56:e3:9e:c1:e4:c4:8f:14:db:9f:1e:
61:d0:f6:21:d4:c8:29:de:2e:ee:dd:9d:49:8c:ae:
15:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:66:2B:CE:F3:74:B5:F3:8A:6A:73:7D:08:F2:6F:2B:9F:88:C3:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4bd88430-0165-3b92-90b2-213e7ef25d95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.25.248.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:f1:ee:a0:68:d7:9d:9a:11:ac:70:82:cf:24:b5:46:01:57:
e2:e8:0b:b7:6c:9d:93:e3:7e:2a:90:c1:a2:ab:d7:0e:cb:d7:
6b:28:29:c7:11:51:ce:f5:9e:39:25:6c:1b:94:82:51:4d:63:
b8:d3:06:69:d9:73:15:df:0a:b3:15:75:79:ca:a4:8d:b5:25:
84:d1:73:c2:3e:2f:aa:b4:27:8a:a4:0b:aa:4e:2f:2e:65:2e:
2e:82:e7:45:ce:04:ae:69:fc:63:88:61:1e:fc:18:a4:18:7e:
4a:41:03:67:d3:6d:a5:0d:fc:58:e9:02:6b:be:ed:89:23:5e:
f8:4f:5a:cf:a6:6c:5a:3a:4c:69:a4:d8:6f:b1:10:1e:6e:09:
6d:40:81:df:7d:56:e1:b6:7b:8f:91:1b:88:0f:27:de:c3:de:
25:e8:29:d9:0b:c1:81:c5:4d:a0:e9:55:83:55:e0:b3:23:c0:
35:ac:43:4c:4a:62:fb:a3:a1:be:85:19:fb:87:0a:b9:eb:95:
76:df:19:f3:cd:fe:fd:6c:86:78:9a:82:2c:cf:7a:a5:26:fe:
f1:e9:b7:ce:3b:ba:b9:e6:35:f6:11:a8:8e:49:3a:e6:36:72:
21:94:e9:f0:b5:66:c7:52:11:27:8c:28:82:35:8b:f1:42:ed:
ec:b4:d0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:08:42 2026 by rpki-client