
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6e80f94d-b3ef-3902-a29c-a7c71d0b76bf.roa
File: 6e80f94d-b3ef-3902-a29c-a7c71d0b76bf.roa (raw, json)
Hash identifier: A78np8nk0XEjYRusz3tIp9E090sIKDIKVu29p3rzu/4=
Subject key identifier: 80:4A:17:7C:FE:7C:E4:A8:C7:FE:61:62:19:2E:2A:2D:F7:23:92:B8
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584F4972F73E83B5DF8166413940
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6e80f94d-b3ef-3902-a29c-a7c71d0b76bf.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 19905
IP address blocks: 173.20.2.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 16 Oct 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:72:f7:3e:83:b5:df:81:66:41:39:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=759ef286-22bc-4979-b3f9-2c74bf1e7783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:50:18:3d:38:36:37:59:c6:44:d6:38:7d:60:
7f:32:a6:4a:7e:b0:1c:78:1f:cd:63:ae:d5:ef:e9:
b8:7e:18:e1:98:b2:e0:d9:58:43:0c:5f:2e:06:1f:
a9:fe:ce:82:eb:ff:82:1a:fd:7f:2c:4f:03:d0:19:
d3:40:ed:94:9f:a7:5d:45:5b:fd:08:02:42:ac:f1:
92:8f:b5:fc:e2:18:24:e1:91:f4:5a:77:b3:a3:90:
81:9d:f3:24:fd:d3:28:93:52:e5:b3:15:67:3e:f1:
c7:5b:ab:58:c8:17:b1:f5:28:22:1d:5c:b1:4c:80:
45:eb:5c:a4:75:dd:26:0f:89:ba:5c:16:29:31:a4:
78:87:54:2e:52:f6:99:3e:0d:e8:42:3d:91:55:f8:
64:fd:c1:4b:ce:b9:de:95:1b:29:64:14:26:c8:29:
de:59:c6:2b:ee:cd:08:8b:45:84:0f:65:82:cf:1e:
c9:f7:ff:42:0f:64:5f:39:fa:d0:a6:89:3a:43:c6:
37:42:42:3a:65:67:a4:04:b9:fb:ba:1e:29:9a:32:
04:cf:36:6d:db:11:6e:35:9e:99:f8:4d:25:c2:42:
8c:6a:9c:9a:e1:7b:08:e8:65:b1:28:82:07:7c:98:
c1:ff:76:81:05:2f:62:3e:c0:0e:4b:dd:3f:15:b6:
6f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4A:17:7C:FE:7C:E4:A8:C7:FE:61:62:19:2E:2A:2D:F7:23:92:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6e80f94d-b3ef-3902-a29c-a7c71d0b76bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.20.2.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:82:4a:0d:39:8a:f2:16:57:d2:65:a5:8e:10:26:dc:73:1e:
b2:04:3e:a6:2f:2e:89:dd:a6:a7:af:62:0a:52:d2:02:48:51:
f3:f5:56:9d:3e:b8:d8:56:dd:cf:bd:5e:38:8f:ba:64:47:a1:
ca:c5:12:6f:f2:e6:9a:77:e9:5b:e3:f1:c9:6a:67:2f:cc:ca:
8b:01:be:42:ac:89:1c:d8:09:12:dc:af:1c:c7:ae:9a:09:e4:
d6:62:19:78:65:af:62:9e:98:bf:4e:89:bb:a5:c9:d5:98:c4:
91:09:5e:e0:80:b2:8a:8f:e9:36:43:71:4a:37:bb:13:e9:79:
4a:da:67:35:23:50:09:30:d1:ff:63:51:3e:f8:30:f6:42:f8:
0b:55:c3:9f:94:49:38:1d:43:24:d5:bd:96:bc:b7:ef:36:72:
d4:a9:48:5d:f4:7a:e2:77:72:cc:29:d7:3a:c9:6a:9b:e9:17:
65:f2:f8:35:74:ea:87:85:eb:e9:49:ea:42:0d:47:a0:ed:21:
e6:7b:4b:e9:0b:55:93:a7:5a:01:2f:b3:f4:d4:5f:f4:31:e9:
48:fc:39:2a:9f:bf:1f:e7:53:47:cb:68:7a:ee:56:2b:53:d9:
b0:48:b2:f4:6d:a6:d0:3b:4b:f8:16:c8:fd:9b:fc:60:e4:d7:
6f:de:10:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcvc+g7XfgWZBOUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NzU5ZWYyODYtMjJiYy00OTc5LWIzZjktMmM3NGJmMWU3NzgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlAYPTg2N1nGRNY4fWB/MqZKfrAceB/NY67V
7+m4fhjhmLLg2VhDDF8uBh+p/s6C6/+CGv1/LE8D0BnTQO2Un6ddRVv9CAJCrPGS
j7X84hgk4ZH0Wnezo5CBnfMk/dMok1LlsxVnPvHHW6tYyBex9SgiHVyxTIBF61yk
dd0mD4m6XBYpMaR4h1QuUvaZPg3oQj2RVfhk/cFLzrnelRspZBQmyCneWcYr7s0I
i0WED2WCzx7J9/9CD2RfOfrQpok6Q8Y3QkI6ZWekBLn7uh4pmjIEzzZt2xFuNZ6Z
+E0lwkKMapya4XsI6GWxKIIHfJjB/3aBBS9iPsAOS90/FbZvCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIBKF3z+fOSox/5hYhkuKi33I5K4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNmU4MGY5NGQtYjNlZi0z
OTAyLWEyOWMtYTdjNzFkMGI3NmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRQCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH2CSg05ivIWV9JlpY4QJtxzHrIEPqYvLondpqevYgpS0gJIUfP1Vp0+
uNhW3c+9XjiPumRHocrFEm/y5pp36Vvj8clqZy/MyosBvkKsiRzYCRLcrxzHrpoJ
5NZiGXhlr2KemL9OibulydWYxJEJXuCAsoqP6TZDcUo3uxPpeUraZzUjUAkw0f9j
UT74MPZC+AtVw5+USTgdQyTVvZa8t+82ctSpSF30euJ3cswp1zrJapvpF2Xy+DV0
6oeF6+lJ6kINR6DtIeZ7S+kLVZOnWgEvs/TUX/Qx6Uj8OSqfvx/nU0fLaHruVitT
2bBIsvRtptA7S/gWyP2b/GDk12/eEDY=
-----END CERTIFICATE-----
Generated at Tue Oct 13 19:26:52 2026 by rpki-client