
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3a3ef80-3e76-3ebe-b25e-6ac95235cf34.roa
File: a3a3ef80-3e76-3ebe-b25e-6ac95235cf34.roa (raw, json)
Hash identifier: D51FgiRYj1jIwsL2ztxKXfTQfydhpWglVpjENvsD6C8=
Subject key identifier: 67:35:C5:2F:E2:28:E8:91:54:AB:9E:81:F2:6C:DE:5B:B6:0B:7F:F1
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584F7FD58A814D05E2C585A4A880
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3a3ef80-3e76-3ebe-b25e-6ac95235cf34.roa
Signing time: Wed 14 Oct 2026 12:33:22 +0000
ROA not before: Wed 14 Oct 2026 12:33:22 +0000
ROA not after: Tue 12 Jan 2027 13:33:22 +0000
asID: 19905
IP address blocks: 173.29.102.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 18 Oct 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7f:d5:8a:81:4d:05:e2:c5:85:a4:a8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Oct 14 12:33:22 2026 GMT
Not After : Jan 12 13:33:22 2027 GMT
Subject: CN=e8ba02a1-c990-408c-a1c1-e33ee1b7a9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a4:f0:20:c3:56:fc:ed:67:fa:d1:e8:3a:05:
86:fc:cf:f9:5f:e5:8c:71:00:b1:8c:9c:90:9b:98:
3e:28:6f:6a:05:45:d2:68:c9:0a:b6:71:ef:92:c0:
eb:75:68:b1:eb:0f:32:5c:58:ef:0b:eb:fc:58:9e:
e5:53:9f:34:66:83:44:79:d8:ec:9c:a5:da:5d:2d:
38:21:ac:e6:b7:89:de:96:95:2c:20:03:bb:d0:85:
2f:0f:ba:b8:27:32:ed:cf:25:ba:19:df:09:73:27:
73:e3:fe:fe:2f:0f:5a:be:ce:76:40:97:11:6c:0d:
b8:d6:14:23:72:73:9f:ce:7b:37:4f:6a:c4:d9:71:
e5:75:45:05:ca:23:45:ae:66:10:95:07:51:e8:a9:
ed:32:fe:f3:ee:1d:e7:a8:6b:42:a8:4d:10:30:f6:
f2:a7:4e:e2:02:43:2d:63:42:a7:4d:32:98:a2:ac:
df:5b:38:ee:ad:ea:c1:33:a0:f4:ac:83:f3:ef:36:
18:2a:eb:6e:df:16:8c:1b:51:a3:43:db:99:d8:50:
cd:d7:1c:f6:59:76:67:cd:65:a1:f0:0f:81:11:e9:
f8:1d:de:03:b0:2e:56:e8:98:a7:fd:9d:fb:35:e9:
9f:d8:4b:0d:78:d9:57:cd:90:30:de:25:43:7d:ff:
0b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:35:C5:2F:E2:28:E8:91:54:AB:9E:81:F2:6C:DE:5B:B6:0B:7F:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3a3ef80-3e76-3ebe-b25e-6ac95235cf34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.29.102.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:60:e6:d5:53:79:1e:df:c8:8f:16:b1:85:0f:77:bd:13:cb:
62:b5:12:e9:c8:7d:89:95:81:17:e7:0b:2f:56:2f:fe:7f:96:
b9:89:41:08:83:8c:de:99:73:ed:40:c1:59:8a:a3:24:76:a4:
ce:eb:ad:fe:5d:83:3d:73:cb:8b:54:a5:f1:4b:85:c8:ed:73:
25:e6:b2:34:08:e2:3f:d2:5d:d6:11:f6:01:89:9f:bd:ed:8d:
3b:a7:a3:66:33:9d:9a:bb:64:28:6d:67:9e:69:66:42:d6:7f:
58:ce:09:7e:bf:3b:13:4c:ab:25:02:34:df:62:3a:eb:f0:b4:
b5:bc:33:55:4e:f2:ef:e1:2e:d6:98:c6:80:e5:b8:f3:9b:5a:
97:c7:ab:20:16:8e:c4:04:29:4f:39:4b:70:07:a2:2f:d8:47:
56:30:f5:75:78:10:58:63:78:23:11:a5:af:7b:81:7d:02:6f:
8f:4e:09:78:da:08:0e:e4:eb:08:78:1c:c0:ae:b1:4d:22:81:
7e:f7:17:28:ed:4c:25:c8:7b:b9:9b:79:64:ac:b3:fb:e5:c3:
44:b0:37:6a:61:de:1e:c8:82:25:70:b9:c7:40:79:6f:4f:ba:
db:2d:e6:a1:40:cd:ae:13:0e:8c:a1:0a:97:e3:e8:19:d2:80:
59:25:cf:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 00:18:44 2026 by rpki-client