
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a53908cf-6538-3506-b747-bce5334464b6.roa
File: a53908cf-6538-3506-b747-bce5334464b6.roa (raw, json)
Hash identifier: c8wt+rJZTjGaYMlPnn6O9/qotQH7bNmGTvrS5GvofMI=
Subject key identifier: F9:90:88:AB:2F:9D:8D:62:66:8F:FF:30:E9:DA:2B:F3:54:65:5B:D2
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D20AF4873A5B7E32A71A83380
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a53908cf-6538-3506-b747-bce5334464b6.roa
Signing time: Wed 11 Mar 2026 01:00:32 +0000
ROA not before: Wed 11 Mar 2026 01:00:32 +0000
ROA not after: Tue 09 Jun 2026 01:00:32 +0000
asID: 19905
IP address blocks: 173.21.240.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:20:af:48:73:a5:b7:e3:2a:71:a8:33:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 11 01:00:32 2026 GMT
Not After : Jun 9 01:00:32 2026 GMT
Subject: CN=69e2436a-b8c9-4265-959c-2bd9902d8d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:26:5c:7d:7a:33:b5:09:80:80:a4:e9:c9:0e:
9c:7c:23:93:99:ad:79:94:17:dd:b9:c3:be:31:a0:
ad:c7:95:e1:fd:0f:3b:7c:e3:36:e0:40:c9:12:b1:
7c:68:bb:5f:fe:70:d6:a0:18:eb:7a:76:13:00:61:
dd:26:db:d0:e7:6f:45:3b:31:27:82:51:bf:ca:9e:
6f:1c:b4:84:e0:5e:eb:2d:24:c2:cd:db:a5:62:b7:
30:6b:82:65:67:be:2c:62:00:0a:4e:92:b5:53:18:
f1:71:68:48:66:06:68:ae:d3:78:27:c7:5a:77:a0:
d9:76:9d:db:8c:30:38:92:5f:f7:e3:b7:4c:12:09:
c6:16:c3:98:62:c4:ab:6f:17:7a:02:5a:42:12:fd:
be:a7:d1:c6:79:8e:3a:a2:10:36:58:1c:cf:79:46:
2f:5b:8e:91:6b:f3:ab:65:b7:ce:1e:64:68:8d:7d:
ea:2b:b3:1e:bf:9d:d2:0e:d3:a4:79:25:24:95:fb:
13:20:4e:a3:41:fc:7a:80:2e:ff:91:0e:b0:9b:bf:
44:78:bc:6e:96:4c:83:c1:35:9b:7b:7c:90:18:21:
e4:88:67:f3:e6:14:a9:7d:1e:e4:94:ee:ed:84:7a:
92:7d:76:cc:ad:cc:a5:23:65:67:2c:17:f8:ac:63:
ac:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:90:88:AB:2F:9D:8D:62:66:8F:FF:30:E9:DA:2B:F3:54:65:5B:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a53908cf-6538-3506-b747-bce5334464b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.21.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:ef:7d:d5:be:38:aa:f5:70:11:eb:93:ce:d3:bf:a5:91:3f:
67:23:17:5e:dd:13:4c:18:d2:c3:3c:a3:fa:7a:00:c2:9c:61:
91:40:c3:5f:04:19:d1:34:44:2d:10:af:ed:fd:df:d3:a8:2e:
5a:6c:0b:b2:a6:e0:ef:8f:bb:1d:69:b3:d3:e9:0c:46:a0:93:
47:9f:f6:80:c7:1d:70:1d:1a:d0:e4:c3:cb:cb:1c:df:5e:fd:
54:32:77:42:b1:16:cb:87:ec:53:13:74:f6:92:73:c0:67:3b:
dd:27:9f:a5:cc:92:f3:f9:27:4d:0f:a1:e1:a6:45:78:65:d2:
41:9c:3a:13:1e:a2:43:cb:c0:e9:06:1f:89:25:86:b8:bb:ea:
94:fe:3d:9a:80:7a:f2:1e:dd:eb:16:74:89:f6:e5:8e:ce:3d:
83:29:cb:2d:5b:d1:b8:d4:c9:25:86:af:b5:69:37:01:86:2a:
cd:14:a6:23:7b:b8:f4:7c:0f:51:eb:38:98:b0:1c:43:a2:5c:
b2:ae:d0:72:83:66:8e:35:4d:d6:5e:55:e8:05:bb:ba:65:31:
93:6f:3d:f2:31:39:47:5d:32:38:7f:a2:10:26:e4:27:a3:32:
b7:a5:28:1b:35:11:8d:58:48:9a:60:7b:71:74:55:78:8f:e4:
82:6a:df:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr0hzpbfjKnGoM4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk
NjllMjQzNmEtYjhjOS00MjY1LTk1OWMtMmJkOTkwMmQ4ZDA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiZcfXoztQmAgKTpyQ6cfCOTma15lBfducO+
MaCtx5Xh/Q87fOM24EDJErF8aLtf/nDWoBjrenYTAGHdJtvQ529FOzEnglG/yp5v
HLSE4F7rLSTCzdulYrcwa4JlZ74sYgAKTpK1UxjxcWhIZgZortN4J8dad6DZdp3b
jDA4kl/347dMEgnGFsOYYsSrbxd6AlpCEv2+p9HGeY46ohA2WBzPeUYvW46Ra/Or
ZbfOHmRojX3qK7Mev53SDtOkeSUklfsTIE6jQfx6gC7/kQ6wm79EeLxulkyDwTWb
e3yQGCHkiGfz5hSpfR7klO7thHqSfXbMrcylI2VnLBf4rGOsBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPmQiKsvnY1iZo//MOnaK/NUZVvSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTUzOTA4Y2YtNjUzOC0z
NTA2LWI3NDctYmNlNTMzNDQ2NGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRXwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADzvfdW+OKr1cBHrk87Tv6WRP2cjF17dE0wY0sM8o/p6AMKcYZFAw18E
GdE0RC0Qr+3939OoLlpsC7Km4O+Pux1ps9PpDEagk0ef9oDHHXAdGtDkw8vLHN9e
/VQyd0KxFsuH7FMTdPaSc8BnO90nn6XMkvP5J00PoeGmRXhl0kGcOhMeokPLwOkG
H4klhri76pT+PZqAevIe3esWdIn25Y7OPYMpyy1b0bjUySWGr7VpNwGGKs0UpiN7
uPR8D1HrOJiwHEOiXLKu0HKDZo41TdZeVegFu7plMZNvPfIxOUddMjh/ohAm5Cej
MrelKBs1EY1YSJpge3F0VXiP5IJq3xE=
-----END CERTIFICATE-----
Generated at Thu Mar 12 03:45:25 2026 by rpki-client