
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6a28c32c-81fe-3de2-bfad-19bc6870a304.roa
File: 6a28c32c-81fe-3de2-bfad-19bc6870a304.roa (raw, json)
Hash identifier: IbsxGCH/fDYz0CRQSdn0t1Q0oUmpjDGtqfV0ZqbhZYA=
Subject key identifier: 35:E9:2D:12:A8:D1:A3:CF:2D:BC:AA:66:A5:07:89:4D:02:CD:A6:9B
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584F5FC8013B0BC459C9A52F3B80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6a28c32c-81fe-3de2-bfad-19bc6870a304.roa
Signing time: Sat 03 Oct 2026 01:00:12 +0000
ROA not before: Sat 03 Oct 2026 01:00:12 +0000
ROA not after: Fri 01 Jan 2027 02:00:12 +0000
asID: 19905
IP address blocks: 173.20.48.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 16 Oct 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:5f:c8:01:3b:0b:c4:59:c9:a5:2f:3b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Oct 3 01:00:12 2026 GMT
Not After : Jan 1 02:00:12 2027 GMT
Subject: CN=249df517-8868-4d62-8954-99bdc0cdca99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f7:a8:23:b4:7b:0e:47:1e:b8:cc:15:79:33:
98:09:51:20:f6:bb:11:19:a6:a2:2b:04:e0:81:6d:
2f:10:fa:1f:d3:60:74:05:00:16:13:f1:f0:ba:e2:
97:d0:b8:e4:7b:c9:21:c9:17:a6:89:a4:35:d8:33:
df:52:af:f8:d4:90:75:39:4d:63:79:5b:35:a9:3d:
1d:b5:5a:b0:bf:fd:51:f0:6e:35:6e:fc:a2:0e:47:
4e:fc:ff:f3:cf:4f:43:ce:16:96:23:90:fd:e0:fb:
3f:35:18:c6:da:92:a9:3d:8e:85:54:63:91:88:0c:
ce:72:cc:71:0d:15:7d:91:49:51:de:8f:4b:a1:d1:
64:7e:37:e2:44:38:29:c1:40:59:b6:89:8c:7c:4e:
cc:e1:6f:46:f7:22:2b:6d:eb:9d:26:93:49:67:05:
8c:b0:1b:29:a9:65:48:f1:2a:bd:7f:1b:67:f5:a8:
10:c6:7e:58:08:b3:e4:2e:51:01:aa:a2:45:83:9a:
33:03:8d:2d:3b:9f:b0:a3:c2:74:a2:64:c0:e7:38:
0a:7c:5a:be:3f:b0:ec:69:94:a6:2a:3b:4e:f5:1b:
8b:4b:37:5b:d6:88:f6:9c:e0:ce:fc:b0:52:61:0b:
a0:50:5a:32:9e:e7:fa:ab:63:bc:7d:9c:c2:97:00:
25:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E9:2D:12:A8:D1:A3:CF:2D:BC:AA:66:A5:07:89:4D:02:CD:A6:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6a28c32c-81fe-3de2-bfad-19bc6870a304.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.20.48.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:a1:c3:2c:55:bc:8c:89:c9:12:8a:1e:8d:78:a0:e6:74:b1:
3f:2b:c1:83:6f:21:ab:ac:8f:4c:98:b7:2d:c9:ec:9e:4d:fc:
81:67:8d:03:55:8a:cf:7b:6d:b1:b9:f7:1c:ef:16:d7:75:ff:
53:c0:d1:c3:58:30:d2:81:13:d6:e6:16:2c:42:d6:30:b2:4f:
10:5e:ca:79:f4:1e:1c:2b:bc:d1:5c:95:18:d4:84:fa:a8:5b:
44:f3:4b:de:9d:92:b4:43:0a:01:ac:9f:e1:66:ce:2c:d4:cd:
ff:89:18:4c:7c:85:cc:26:a1:18:a2:dc:1d:cb:02:9a:b8:29:
cd:68:bb:be:fc:d3:6b:e6:32:7f:28:2a:5d:fc:5e:c5:32:30:
58:a6:e9:78:0b:15:26:3d:ee:fd:1d:0a:59:c7:6d:db:6a:c9:
03:e0:3e:89:0b:7e:9e:91:a1:5c:9f:48:e9:5d:eb:a2:3c:ec:
0d:38:74:69:8b:26:8b:59:2d:d6:4b:22:c8:c0:32:97:0c:47:
a5:da:ca:5f:a1:ae:b1:e7:08:08:fa:53:21:b9:8e:6e:72:e1:
3c:36:98:ce:63:ac:fd:3b:99:64:a4:74:25:7e:62:26:a5:ed:
56:a3:b2:21:37:63:cf:05:f3:d4:d4:89:92:07:16:a3:f1:41:
8f:60:ef:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:31:46 2026 by rpki-client