
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/629777dc-e692-3974-ac7c-0160d7ef2af3.roa
File: 629777dc-e692-3974-ac7c-0160d7ef2af3.roa (raw, json)
Hash identifier: lJ9q2x/w+XACy3ukkY8wDYtQ8Gb/vVhJErqsK6Fj2qg=
Subject key identifier: 73:0D:42:92:78:C8:9C:01:0C:53:46:61:E9:66:B3:D3:AF:0D:43:D0
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584EBD0CEA48C32ED53FEF6220F0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/629777dc-e692-3974-ac7c-0160d7ef2af3.roa
Signing time: Wed 05 Aug 2026 18:02:19 +0000
ROA not before: Wed 05 Aug 2026 18:02:19 +0000
ROA not after: Tue 03 Nov 2026 19:02:19 +0000
asID: 19905
IP address blocks: 173.21.8.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:bd:0c:ea:48:c3:2e:d5:3f:ef:62:20:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Aug 5 18:02:19 2026 GMT
Not After : Nov 3 19:02:19 2026 GMT
Subject: CN=731ed1b8-5c03-446c-b661-6127607303ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:45:be:57:80:0d:1a:fd:c1:42:2e:ee:71:1c:
83:13:26:21:68:93:0c:68:15:90:fa:90:e4:25:15:
7a:0a:23:4e:6b:75:61:c3:98:42:77:68:d5:98:36:
a4:70:9a:83:b5:30:a4:29:c0:df:22:e5:1e:7b:84:
82:6b:53:bb:2d:00:4b:7e:28:f0:53:01:f8:e7:34:
b4:01:9b:bb:97:27:22:87:46:af:06:b9:aa:d3:74:
80:8d:bc:91:a7:85:76:01:93:33:1c:ab:fe:ec:14:
88:e9:1d:ee:4b:1e:ea:82:2e:c5:48:f9:4c:be:26:
a2:ca:66:cc:5e:19:68:85:f3:8d:ad:d6:cb:6a:98:
c8:40:76:51:96:00:0a:03:36:fe:a8:4a:04:e1:a8:
89:d5:c8:ce:d9:4d:bd:4d:d8:ce:e9:29:3b:9c:4d:
58:29:66:15:52:77:ef:6f:8d:e0:e1:ac:16:26:3d:
8f:26:d4:87:69:5d:95:f5:04:13:dd:64:04:12:9a:
c9:1c:e8:a7:1d:0d:4b:7f:ef:8b:2a:52:44:4d:23:
88:a7:8f:d1:55:7f:36:e7:ef:61:69:41:63:dc:34:
19:15:ab:6c:26:ca:d8:a6:e5:b6:e8:be:29:d9:fc:
23:bd:f8:c2:64:d3:e2:5d:bf:d7:c8:47:7c:45:7e:
5d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:0D:42:92:78:C8:9C:01:0C:53:46:61:E9:66:B3:D3:AF:0D:43:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/629777dc-e692-3974-ac7c-0160d7ef2af3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.21.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:39:cd:68:80:d1:22:c7:e4:73:59:80:c2:a8:c4:28:9b:83:
5d:8d:e0:b7:e0:c8:0b:28:12:db:b0:a2:30:fa:55:cb:58:83:
af:ce:ef:41:f4:6e:40:08:76:fd:c3:02:5e:7a:1a:2b:d8:72:
aa:18:be:6c:8c:e9:20:c0:7e:4d:b7:87:4a:b8:45:d3:44:1a:
13:e2:b7:66:72:fe:5f:16:15:81:41:74:6c:59:a6:e1:b2:bb:
32:5d:ac:7c:57:ad:46:99:82:8f:62:ad:ec:af:64:d1:dc:13:
94:e7:cd:34:15:c9:06:f8:6a:38:8a:f6:7c:90:5f:d9:61:f6:
ac:7b:23:2a:41:05:8a:91:e5:a2:f8:64:69:9f:f8:cc:92:7b:
32:89:fd:21:a0:a9:0c:f0:b0:ab:55:a0:0d:92:bc:dc:f6:28:
34:18:db:53:7d:ba:05:a6:03:da:c8:59:05:fd:35:0b:83:94:
11:30:82:1c:57:ca:84:ae:70:c4:99:fe:f8:bb:44:1a:05:74:
d7:77:c2:02:70:1e:c5:4d:8e:4b:aa:39:b7:ae:ca:5b:dd:6c:
94:ab:39:a5:91:9d:ff:f0:28:b2:13:92:e5:37:d4:af:94:5b:
1f:40:2f:33:95:49:c8:8e:7a:91:a8:6f:0f:5c:f3:e4:26:89:
61:4b:80:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:24:08 2026 by rpki-client