
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ba9e7ef1-d09e-3ddd-9229-4b17d75c62af.roa
File: ba9e7ef1-d09e-3ddd-9229-4b17d75c62af.roa (raw, json)
Hash identifier: aM9vR686ArNGRoOGsvzzBE2Aqy5TzvaQrmmDQW78l0Y=
Subject key identifier: D7:55:64:26:AA:37:19:5B:B1:F3:E2:6F:A4:E6:A4:92:55:2F:CA:42
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584EA7A0A4329221BB335DC12960
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ba9e7ef1-d09e-3ddd-9229-4b17d75c62af.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 30036
IP address blocks: 173.28.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:a0:a4:32:92:21:bb:33:5d:c1:29:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=fea1b0ed-9ead-438f-8ea5-e1421e13132f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7f:24:2d:d5:35:bf:f9:9d:d9:f2:ee:f4:b3:
c0:ba:dd:fa:0d:3b:ff:38:51:ba:fe:c8:50:06:f6:
3d:92:11:d0:ef:06:8c:89:7b:68:a7:d0:f8:ee:6d:
fe:bb:9d:7b:de:56:c0:59:13:2d:e1:24:90:ce:88:
c0:6a:55:a6:cd:c5:da:fb:c0:b4:40:55:0b:e4:25:
2a:48:ef:9d:74:4f:10:d4:b4:e1:e7:a3:d6:29:91:
57:69:a9:db:d6:1a:0c:6a:e7:9f:31:a8:d1:53:91:
16:12:0c:84:4d:ea:97:c5:a8:de:05:63:1a:16:64:
a5:ae:e1:2a:e7:88:b9:dd:fc:5f:90:0d:0f:4a:24:
8c:7b:5a:b6:9d:06:27:72:41:85:a0:1d:c8:cd:9e:
59:03:ab:76:71:35:4a:40:8c:d9:2f:71:b3:14:bb:
af:f6:e0:42:72:73:da:e8:29:ad:ed:f3:7f:32:df:
f4:fd:b8:d8:0e:2f:64:92:6e:09:bd:94:d8:f7:b6:
f3:32:ae:39:66:90:ae:a5:4f:7e:e4:dd:98:dc:a9:
98:8d:a1:9d:cc:9e:64:1c:69:25:d0:dc:69:9a:aa:
24:df:64:22:dc:fd:7e:61:fd:1c:ac:44:d0:4a:54:
3c:2d:d3:8b:f6:67:67:a2:a5:02:d8:d9:37:e0:13:
64:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:55:64:26:AA:37:19:5B:B1:F3:E2:6F:A4:E6:A4:92:55:2F:CA:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ba9e7ef1-d09e-3ddd-9229-4b17d75c62af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.28.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:68:b1:4f:4c:eb:fc:2b:84:f7:ae:09:4d:ba:27:38:01:e6:
60:7e:a0:a0:69:98:1c:65:14:7b:19:f0:f6:d8:0b:17:46:74:
ea:8d:a2:cf:c8:3e:c8:f8:e5:c0:af:cc:99:50:2f:c9:38:88:
b0:5c:6a:b4:4a:a8:f2:80:c5:ed:0b:b8:11:d9:93:61:7e:a7:
6b:db:85:8d:0b:85:6b:f0:bc:05:74:90:b2:70:d6:93:ec:0c:
46:c4:52:42:6e:36:6c:96:9e:b8:9d:bb:d6:a5:35:8c:e9:ba:
2d:75:65:8e:10:4d:59:ab:cc:78:6a:a5:30:ac:1f:2a:09:ef:
6c:74:b9:74:e2:9a:18:15:8b:f5:60:92:62:af:11:e4:69:c5:
3d:58:94:7f:e1:fb:f5:e9:cb:78:88:a8:dc:82:6c:25:be:03:
62:7f:18:d7:b2:63:67:fc:f4:7d:6e:1c:1d:c9:f8:44:1a:5f:
f2:bd:55:88:5c:ee:d9:31:95:37:42:f2:4a:bd:40:9b:55:70:
98:63:be:e4:0a:2c:23:e3:89:a3:e2:d1:7f:a9:da:b2:da:5f:
d6:7d:81:95:f6:e4:4b:02:f1:6a:7f:a6:d3:53:4f:54:8c:c7:
6f:9e:ce:e0:1b:92:ec:75:98:76:4a:8b:e3:71:3b:51:39:58:
25:13:2b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:01:29 2026 by rpki-client