
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6d683079-2364-323c-bad0-939097cb71b8.roa
File: 6d683079-2364-323c-bad0-939097cb71b8.roa (raw, json)
Hash identifier: cgwEeavJy7Gl3vCH1vTIaqlXqKdSDfQpGBsAbKE+xxg=
Subject key identifier: 89:16:30:6E:4D:8A:97:F3:40:72:86:5C:71:79:26:54:74:59:86:5D
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D237A41A99E1A002F8C94DCA0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6d683079-2364-323c-bad0-939097cb71b8.roa
Signing time: Thu 12 Mar 2026 01:00:32 +0000
ROA not before: Thu 12 Mar 2026 01:00:32 +0000
ROA not after: Wed 10 Jun 2026 01:00:32 +0000
asID: 30036
IP address blocks: 173.20.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:23:7a:41:a9:9e:1a:00:2f:8c:94:dc:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 12 01:00:32 2026 GMT
Not After : Jun 10 01:00:32 2026 GMT
Subject: CN=51f34076-99fb-4ddb-95fb-7e9bc7ab603d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:46:83:2c:07:5b:1e:5b:b3:e8:88:f9:93:3a:
3e:03:6d:cc:db:59:97:28:d3:16:d0:59:74:e9:4d:
a3:dd:50:c1:7d:16:67:b1:62:fa:93:ab:d1:c9:f2:
97:48:dc:61:13:a9:5b:22:29:5c:b1:ac:a6:70:74:
c6:81:7f:49:5a:eb:95:d1:0f:45:23:50:ec:83:ab:
c9:cc:6a:29:4e:2b:b6:1d:eb:47:a6:fe:eb:8e:7c:
a0:e3:1e:ec:70:95:ac:2e:e7:81:84:cc:f2:4e:15:
dd:45:bf:ff:bd:d9:cb:d4:8b:d0:23:73:eb:d9:06:
6c:88:92:5b:7d:0a:cd:e4:15:e5:e9:00:76:1d:82:
e1:53:36:84:f8:ba:ff:e1:0d:dd:b9:c3:44:df:ae:
17:7a:fa:6a:93:30:be:c7:30:4d:ab:7d:3f:f6:58:
ee:06:46:a4:89:56:42:ba:e4:9c:7c:34:0d:c6:27:
ae:d7:d9:f9:cd:90:fb:b9:36:50:f7:74:d8:ca:26:
1c:57:35:ee:3d:ab:57:64:aa:6f:91:1a:de:02:1e:
14:60:06:70:13:db:f9:c9:e5:b0:34:db:08:6a:e2:
0d:62:bf:f8:71:5c:29:3d:34:c2:f8:60:51:7e:36:
6b:9f:9c:0b:d7:f4:05:2a:cd:20:63:fd:95:f5:75:
63:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:16:30:6E:4D:8A:97:F3:40:72:86:5C:71:79:26:54:74:59:86:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6d683079-2364-323c-bad0-939097cb71b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.20.43.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:63:34:17:99:0e:17:a8:31:3e:44:1a:c5:3a:1a:d4:25:3c:
3a:31:dc:37:08:f3:b4:db:fa:8e:9a:25:4c:0c:c8:83:00:90:
e1:f8:ab:28:4a:83:81:ce:06:d6:8b:d8:c4:29:a1:70:9b:e8:
6c:64:e4:f9:f8:9c:8f:45:ae:54:ff:1a:cb:14:f1:78:f1:01:
d3:73:08:3f:fd:a5:77:e7:e7:d2:40:4c:ed:72:04:6b:da:ab:
2d:44:18:d2:24:99:59:4a:f1:1e:e4:3f:a1:33:47:a1:61:80:
30:e8:4f:6b:be:f6:33:6d:a3:cf:5e:36:37:08:91:5b:c0:d4:
a6:27:03:a4:8d:d4:32:ba:fd:d4:98:5a:2e:47:65:1a:6c:ec:
50:16:ff:b3:c1:36:21:7a:06:de:e2:33:a6:93:31:57:64:2a:
0b:7c:0d:93:c1:7d:00:7f:53:0a:0d:2b:37:e6:38:f7:eb:e8:
eb:eb:de:a6:29:7d:6f:42:e5:64:42:10:f0:87:9c:8e:50:68:
ff:83:42:a5:c6:a9:48:a6:31:91:0e:68:78:50:ce:6e:42:42:
6a:84:39:f0:61:1c:bf:84:07:41:23:ba:84:ce:0e:3a:df:4a:
6a:e6:46:1c:a0:ac:ea:89:45:73:ff:4f:7f:c2:07:e4:68:ab:
98:f0:ed:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jekGpnhoAL4yU3KAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk
NTFmMzQwNzYtOTlmYi00ZGRiLTk1ZmItN2U5YmM3YWI2MDNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0aDLAdbHluz6Ij5kzo+A23M21mXKNMW0Fl0
6U2j3VDBfRZnsWL6k6vRyfKXSNxhE6lbIilcsaymcHTGgX9JWuuV0Q9FI1Dsg6vJ
zGopTiu2HetHpv7rjnyg4x7scJWsLueBhMzyThXdRb//vdnL1IvQI3Pr2QZsiJJb
fQrN5BXl6QB2HYLhUzaE+Lr/4Q3ducNE364XevpqkzC+xzBNq30/9ljuBkakiVZC
uuScfDQNxieu19n5zZD7uTZQ93TYyiYcVzXuPatXZKpvkRreAh4UYAZwE9v5yeWw
NNsIauINYr/4cVwpPTTC+GBRfjZrn5wL1/QFKs0gY/2V9XVj4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIkWMG5NipfzQHKGXHF5JlR0WYZdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNmQ2ODMwNzktMjM2NC0z
MjNjLWJhZDAtOTM5MDk3Y2I3MWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRQrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABZjNBeZDheoMT5EGsU6GtQlPDox3DcI87Tb+o6aJUwMyIMAkOH4qyhK
g4HOBtaL2MQpoXCb6Gxk5Pn4nI9FrlT/GssU8XjxAdNzCD/9pXfn59JATO1yBGva
qy1EGNIkmVlK8R7kP6EzR6FhgDDoT2u+9jNto89eNjcIkVvA1KYnA6SN1DK6/dSY
Wi5HZRps7FAW/7PBNiF6Bt7iM6aTMVdkKgt8DZPBfQB/UwoNKzfmOPfr6Ovr3qYp
fW9C5WRCEPCHnI5QaP+DQqXGqUimMZEOaHhQzm5CQmqEOfBhHL+EB0EjuoTODjrf
SmrmRhygrOqJRXP/T3/CB+Roq5jw7WE=
-----END CERTIFICATE-----
Generated at Thu Mar 12 03:46:14 2026 by rpki-client