
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85fb29dc-17e2-38f7-9aa8-6adfa1094b68.roa
File: 85fb29dc-17e2-38f7-9aa8-6adfa1094b68.roa (raw, json)
Hash identifier: v58eOKl/e+QjDA/kjXGmLlo3T3xaqZicvsPuhTDYuUI=
Subject key identifier: 63:22:14:D3:D4:70:05:99:AE:07:4C:D1:88:A8:8C:E4:8E:95:05:7B
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584EA798C1E670960E1168901F00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85fb29dc-17e2-38f7-9aa8-6adfa1094b68.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 19905
IP address blocks: 173.25.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:98:c1:e6:70:96:0e:11:68:90:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=3e98dd5a-b22f-4ff8-acb8-27b5b876d086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d8:b7:d9:9d:14:65:38:2a:e7:2e:8b:18:a4:
ab:00:be:ac:69:62:78:5e:f9:61:99:e1:f1:63:f4:
90:3c:cd:59:79:0c:b8:ce:86:f2:9d:ce:35:53:d9:
72:af:a9:e0:7a:da:0f:8a:d1:68:b3:35:a5:a1:a5:
a0:c0:49:19:49:b7:83:58:9c:9d:fe:51:fa:02:d0:
b7:8d:b3:e7:01:30:e1:b8:83:19:e2:40:60:78:b1:
23:f9:25:b0:23:6d:33:5a:73:f8:aa:a9:ab:32:b8:
8f:6d:3d:e9:d1:a4:94:d1:29:5e:42:b4:5f:49:6e:
0a:2f:89:ef:ba:94:30:05:b1:5c:1e:3b:98:37:5c:
7b:c1:dc:e7:ce:e9:4a:b7:a4:bb:cd:c3:4e:b8:a8:
92:85:a2:79:1b:2f:88:82:fd:98:b4:6f:d4:4c:01:
ba:61:d5:5c:64:b7:9b:00:10:8e:60:c6:b6:fc:5e:
bf:25:ad:5f:b2:78:04:ba:93:ee:64:0d:c1:89:61:
62:c7:b4:69:ff:8c:45:1e:c9:89:1f:d3:50:ce:a0:
ce:b5:b8:fe:9b:12:72:48:84:4e:4f:32:8c:73:86:
24:10:75:40:de:fc:62:44:f3:21:3c:14:02:e6:e0:
f5:1d:2e:da:12:9f:28:86:75:ce:9b:97:43:fe:f2:
43:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:22:14:D3:D4:70:05:99:AE:07:4C:D1:88:A8:8C:E4:8E:95:05:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85fb29dc-17e2-38f7-9aa8-6adfa1094b68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.25.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:1d:53:14:7f:a3:e7:35:d3:e5:cf:b7:45:ea:bf:b0:81:c4:
44:42:3a:d4:70:e2:ae:70:a3:4b:99:1e:07:0b:b5:f5:b0:05:
27:2f:f2:89:b9:70:24:90:99:47:2a:2c:eb:3f:ba:1e:68:48:
d5:d6:86:f6:0e:b1:93:46:42:c8:40:4f:80:ab:24:90:72:c9:
9c:00:8b:e7:ee:a3:93:c1:6a:44:94:07:a5:68:5b:8b:07:76:
cc:bb:d5:f8:41:d2:66:55:9c:5a:17:40:9b:36:5b:5e:c5:ea:
c7:ff:55:38:4c:13:dd:17:dd:b2:67:ef:62:24:a2:fe:99:28:
af:9e:be:a8:b3:ef:c5:71:2b:53:f7:e9:61:93:00:52:54:79:
19:3f:af:ed:1c:e6:83:8f:42:d4:49:c1:d1:a5:54:f4:15:4e:
c3:57:d5:bc:78:99:9b:68:fd:04:6b:9c:86:7e:f6:d4:40:34:
09:60:15:d5:d0:04:bc:32:0f:a8:0f:57:b2:0c:2c:0d:d5:8a:
fd:8a:cf:f6:60:8a:78:9e:48:c0:86:92:ef:b1:9a:c5:2b:50:
7f:72:70:a4:e7:26:51:bf:f3:1f:c2:7f:6b:78:d4:a6:10:e3:
df:41:93:8f:7e:d8:17:0c:4e:1a:84:30:0e:5d:cf:80:bd:ed:
c5:37:52:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmMHmcJYOEWiQHwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
M2U5OGRkNWEtYjIyZi00ZmY4LWFjYjgtMjdiNWI4NzZkMDg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdi32Z0UZTgq5y6LGKSrAL6saWJ4XvlhmeHx
Y/SQPM1ZeQy4zobync41U9lyr6ngetoPitFoszWloaWgwEkZSbeDWJyd/lH6AtC3
jbPnATDhuIMZ4kBgeLEj+SWwI20zWnP4qqmrMriPbT3p0aSU0SleQrRfSW4KL4nv
upQwBbFcHjuYN1x7wdznzulKt6S7zcNOuKiShaJ5Gy+Igv2YtG/UTAG6YdVcZLeb
ABCOYMa2/F6/Ja1fsngEupPuZA3BiWFix7Rp/4xFHsmJH9NQzqDOtbj+mxJySIRO
TzKMc4YkEHVA3vxiRPMhPBQC5uD1HS7aEp8ohnXOm5dD/vJDNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGMiFNPUcAWZrgdM0YiojOSOlQV7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODVmYjI5ZGMtMTdlMi0z
OGY3LTlhYTgtNmFkZmExMDk0YjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRkDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHkdUxR/o+c10+XPt0Xqv7CBxERCOtRw4q5wo0uZHgcLtfWwBScv8om5
cCSQmUcqLOs/uh5oSNXWhvYOsZNGQshAT4CrJJByyZwAi+fuo5PBakSUB6VoW4sH
dsy71fhB0mZVnFoXQJs2W17F6sf/VThME90X3bJn72Ikov6ZKK+evqiz78VxK1P3
6WGTAFJUeRk/r+0c5oOPQtRJwdGlVPQVTsNX1bx4mZto/QRrnIZ+9tRANAlgFdXQ
BLwyD6gPV7IMLA3Viv2Kz/ZginieSMCGku+xmsUrUH9ycKTnJlG/8x/Cf2t41KYQ
499Bk49+2BcMThqEMA5dz4C97cU3UrY=
-----END CERTIFICATE-----
Generated at Fri Aug 21 03:07:17 2026 by rpki-client