
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0aa70b3-f3d5-36f7-8a9b-88cad79fb5d6.roa
File: d0aa70b3-f3d5-36f7-8a9b-88cad79fb5d6.roa (raw, json)
Hash identifier: cFHmlogR1RBTlE9m6mukmdlea4eSfJhMm0lA65xaiGA=
Subject key identifier: A9:76:99:EA:E4:3C:CB:1E:B0:31:19:68:68:84:1F:54:07:25:6A:DB
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584EBC7702AB3C899B0C5E56F600
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0aa70b3-f3d5-36f7-8a9b-88cad79fb5d6.roa
Signing time: Wed 05 Aug 2026 13:00:12 +0000
ROA not before: Wed 05 Aug 2026 13:00:12 +0000
ROA not after: Tue 03 Nov 2026 14:00:12 +0000
asID: 19905
IP address blocks: 173.20.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:bc:77:02:ab:3c:89:9b:0c:5e:56:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Aug 5 13:00:12 2026 GMT
Not After : Nov 3 14:00:12 2026 GMT
Subject: CN=20df1483-673a-4c42-a04a-705cc7d3a533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ee:aa:42:d4:d1:80:4c:55:d9:0c:63:8b:3e:
ad:41:23:85:73:1c:82:62:af:cf:d1:c1:53:fe:6d:
7f:33:af:1e:bb:fc:a6:ce:aa:26:07:a1:99:e1:df:
e3:67:fd:da:c6:aa:16:48:6d:52:53:67:f8:6e:97:
30:56:af:1a:b3:bb:98:ce:5a:d1:43:44:1d:c2:01:
6c:b8:03:ed:ce:8a:79:54:40:12:00:46:6c:dd:e1:
01:1b:75:ff:15:6d:c4:e5:37:de:c5:3e:2a:8a:ad:
9c:68:20:40:63:e6:7d:6f:1b:9d:09:1d:5f:63:cf:
03:3b:4d:ef:4b:99:47:61:77:a9:0c:7d:26:c2:4a:
ef:a2:4f:b5:e5:ae:ff:af:1e:1b:46:d5:76:85:c3:
63:b0:41:6b:33:b4:70:36:c0:ec:2e:91:97:40:7c:
4d:b4:12:e9:23:01:f1:5b:53:7e:7b:19:bc:c7:08:
7f:de:ae:16:95:3c:fb:41:c9:1d:67:28:ee:ea:cc:
3d:d8:6e:41:d5:75:33:1c:b5:13:1f:34:eb:cc:83:
df:a9:f0:f8:da:64:63:1b:d0:f6:e2:17:2e:c5:f1:
ac:0e:8c:2a:79:a4:4d:3d:f2:e4:65:6b:1e:6a:96:
1c:07:6c:0d:2c:b5:5f:ef:ac:54:f6:a6:46:3c:88:
d0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:76:99:EA:E4:3C:CB:1E:B0:31:19:68:68:84:1F:54:07:25:6A:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0aa70b3-f3d5-36f7-8a9b-88cad79fb5d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.20.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:69:4b:ea:3d:d2:de:7d:b3:c8:a3:4e:84:d8:2c:49:33:23:
de:d3:5a:21:f7:98:17:3d:fc:2d:b4:56:53:e9:a3:b3:fc:6e:
d0:55:a3:02:25:3d:c3:31:e6:1a:6a:1a:f4:f5:59:ee:02:87:
c5:a7:e4:23:34:76:e2:fc:38:5e:17:f0:c4:28:bc:61:a1:61:
93:45:d2:a4:3d:45:d2:02:50:e9:8d:c6:5f:1d:13:d9:d7:e1:
e7:92:64:41:48:9d:88:4e:fd:a8:7b:6e:6a:6f:85:c1:3e:a6:
61:5c:49:45:89:9f:74:65:96:7b:14:f8:e4:4e:ec:c0:e3:a1:
d7:13:d9:95:e2:2c:a0:58:69:fe:e2:17:8c:78:67:ca:fc:e3:
66:9f:5a:28:25:e4:c0:15:8c:9a:2f:4d:17:96:7e:35:d6:54:
0d:a8:7e:ec:5a:ed:4e:ce:ed:82:07:71:48:56:e4:54:6b:b9:
93:99:f6:3c:72:b7:76:1f:2f:47:ab:42:ed:39:83:10:2d:8c:
8c:d5:02:df:e5:83:2b:36:94:10:71:27:ef:19:93:12:f9:fb:
70:37:a9:1d:9a:9b:69:e9:92:5e:06:b3:d9:69:ff:a2:62:9f:
cc:06:67:61:7e:12:87:8c:a6:26:1a:6e:62:94:72:ba:9a:66:
9f:14:77:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:28:00 2026 by rpki-client