
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/97f17b34-51d0-382a-8007-18d4cbd49133.roa
File: 97f17b34-51d0-382a-8007-18d4cbd49133.roa (raw, json)
Hash identifier: +zbmIUYXqC12gxWFy37krPimETZZ8x8s3JxOMaFXaBM=
Subject key identifier: A3:3B:52:99:FC:D0:06:A2:66:97:AD:6E:82:4D:AA:F3:63:0E:54:E0
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D1B1A6198625EA553EABE9600
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/97f17b34-51d0-382a-8007-18d4cbd49133.roa
Signing time: Mon 09 Mar 2026 01:00:32 +0000
ROA not before: Mon 09 Mar 2026 01:00:32 +0000
ROA not after: Sun 07 Jun 2026 01:00:32 +0000
asID: 19905
IP address blocks: 173.18.136.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1b:1a:61:98:62:5e:a5:53:ea:be:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 9 01:00:32 2026 GMT
Not After : Jun 7 01:00:32 2026 GMT
Subject: CN=d2e47730-ff34-439b-b441-f2c3863aa5e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8f:b3:a5:bc:c3:d1:99:01:44:27:c1:67:85:
9a:8b:07:d5:8d:0c:9f:16:9e:fe:0b:e5:e0:d3:1e:
ec:ed:8a:7a:19:b9:5e:71:56:e8:a5:b7:05:f7:8b:
b4:99:dc:20:be:c1:49:92:c7:d1:e0:c5:b8:44:00:
fb:a0:ce:b1:70:32:2b:c9:fd:c2:a4:8f:c5:4f:e8:
14:6d:fa:0b:aa:fa:8d:fc:20:60:fa:4e:c5:ae:9b:
1d:ea:d9:5a:58:b1:ad:e7:6b:10:56:54:3b:3d:b6:
7c:7e:a4:7c:5a:6c:74:ef:e5:b6:c5:1a:75:0d:f1:
b7:08:bf:7e:80:a8:e8:25:6a:53:08:b5:6c:71:86:
0f:7f:11:c5:f1:bd:f3:5a:f1:ff:bd:7b:00:0c:53:
c6:6b:0f:75:60:b0:45:0c:0c:e0:e6:a2:78:35:59:
20:a4:1f:27:01:ae:63:86:ed:50:90:15:f4:63:02:
fa:81:9b:7b:e8:fc:72:6c:32:5c:d7:fa:1c:63:2f:
b0:90:6b:b3:95:f2:dd:9a:fd:a5:c9:96:e1:bb:0e:
ce:f1:83:02:67:00:78:4c:22:0c:9c:25:37:4a:19:
44:03:85:c5:f3:3d:2d:17:f0:90:2d:10:0e:d3:8d:
a6:5b:27:37:36:3c:45:e5:49:b1:49:e3:d8:81:fe:
c0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3B:52:99:FC:D0:06:A2:66:97:AD:6E:82:4D:AA:F3:63:0E:54:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/97f17b34-51d0-382a-8007-18d4cbd49133.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.18.136.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:ee:96:19:1c:ad:f8:13:12:1b:04:2d:ce:bd:95:55:2d:3a:
fb:f3:b1:6c:1d:ac:2b:9d:20:a0:e7:0a:d6:9e:62:9f:5f:a5:
ae:c4:3b:d4:48:41:01:19:17:3b:97:f4:94:64:53:44:a8:41:
0e:52:5d:f1:e2:9b:07:0a:34:7d:98:bf:52:28:d3:9c:b3:08:
2a:8b:55:bb:fc:9a:8e:57:f4:d6:95:ee:53:32:d3:f4:b6:e2:
70:75:5f:42:9e:bb:c4:45:6a:d9:31:8e:82:c1:8d:eb:85:f0:
37:db:2f:d4:31:58:b9:75:cd:41:91:64:5e:c9:a0:dd:64:ba:
46:7c:9e:b2:42:fd:cc:e8:79:73:19:48:08:ed:9c:ec:6c:01:
d1:8c:e3:ff:89:e7:f3:55:51:38:c0:36:d4:90:ac:2b:86:a0:
da:09:ea:00:4e:21:bc:05:43:24:48:0f:90:11:a2:5f:0a:62:
6a:47:0c:b8:dc:ee:c1:9d:23:4b:db:dc:73:a2:91:ae:ab:75:
ee:d3:b5:9c:0f:a4:72:83:5c:68:69:dc:57:91:7e:44:94:94:
da:be:cb:af:9e:66:f0:d5:06:b0:ee:ab:90:cc:30:01:e7:ba:
44:55:e3:84:67:bc:64:12:77:38:5e:4f:e5:6e:09:72:65:75:
71:4d:53:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:45:00 2026 by rpki-client