
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d459b9b8-1adb-320f-9bf2-ba30866194c7.roa
File: d459b9b8-1adb-320f-9bf2-ba30866194c7.roa (raw, json)
Hash identifier: nwREdQZlDgn6jP2WDwe7fp3RT7DWGMhqnkLHCBX57Jw=
Subject key identifier: 44:82:E0:08:F5:56:0C:5E:C5:0D:DD:BD:CC:4E:1A:BB:AD:46:D5:C5
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584EA7A102D8E2116E421DD4CA80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d459b9b8-1adb-320f-9bf2-ba30866194c7.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 30036
IP address blocks: 173.16.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:a1:02:d8:e2:11:6e:42:1d:d4:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=66da46f3-4cd8-4302-beb2-03c306d40b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:11:e3:cb:31:ca:95:28:a6:82:6a:12:0a:1e:
26:13:db:00:e7:e0:8c:af:6a:6b:33:87:12:a5:06:
19:0e:cc:6a:e3:33:22:da:b1:79:f8:1c:1c:6a:75:
d6:a6:0f:33:92:31:05:3f:11:9f:73:00:16:1e:2b:
9f:eb:89:4a:64:db:13:b7:77:7d:ad:58:3c:e8:93:
ef:91:41:ef:7f:8d:be:3f:fc:38:94:de:69:23:0b:
b9:fd:2c:af:05:3b:fd:80:93:ef:7e:97:cc:f6:d9:
0d:b6:ec:35:02:4f:c1:f5:d2:a8:47:90:72:e8:ae:
97:04:e3:43:06:ce:32:9f:ae:66:a0:45:a6:dc:7f:
98:96:af:48:c0:00:32:3c:6b:9e:71:b0:ab:d8:00:
3d:24:f0:dc:da:e6:05:f8:24:5c:9c:b4:73:4a:c9:
2d:31:16:a3:48:a3:cb:7f:57:e1:7a:f9:ee:91:f1:
dc:60:36:fd:73:67:81:8e:55:08:2d:90:54:5e:72:
72:a6:43:6c:60:85:e1:9c:0b:3c:38:cf:d1:da:ef:
c0:e7:e3:3b:c5:1c:e1:06:70:66:f6:07:41:00:47:
82:e7:4b:4c:8f:66:47:cd:80:f2:ef:11:a7:b9:40:
5f:ff:50:be:51:01:8b:c9:fd:ae:dc:6a:95:d4:e3:
17:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:82:E0:08:F5:56:0C:5E:C5:0D:DD:BD:CC:4E:1A:BB:AD:46:D5:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d459b9b8-1adb-320f-9bf2-ba30866194c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.16.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:03:65:db:56:ec:16:4c:11:b7:b5:f7:cf:70:97:8a:ac:ed:
a5:5b:9c:3f:4d:3c:e7:54:d7:16:16:9a:2d:74:6d:c4:6f:a8:
fc:62:f0:68:77:94:b2:73:07:7d:41:cc:fb:e1:b6:60:4e:da:
ba:a8:4c:6e:65:ee:31:ab:ee:cc:96:b7:05:0a:16:e2:2f:8f:
b7:10:43:19:ec:4e:f5:fc:84:6f:45:0f:8c:29:67:83:5d:73:
ff:cd:9a:5c:96:62:39:e2:56:fb:11:0b:ae:1a:88:27:aa:67:
30:90:42:42:e0:9d:1d:b6:25:cf:1f:f7:df:88:df:69:5c:bf:
e1:0f:d6:88:fd:d3:07:8b:4b:3b:8e:f7:a7:12:45:a0:48:b7:
67:87:fc:7a:2b:5a:65:9d:e8:49:ee:29:4b:f8:2c:64:a0:49:
bc:af:de:49:04:a9:4c:68:a6:8a:a2:34:66:50:16:82:d9:4d:
bc:39:7d:d9:9a:02:79:d9:9a:f9:e7:20:a3:96:45:16:28:0d:
85:45:64:fb:13:57:09:b6:a1:f5:ff:7e:23:80:4e:77:d2:d5:
20:46:81:d1:77:13:40:3d:3f:2a:b9:0d:ae:df:40:1b:96:51:
f2:5b:6d:15:47:1c:ea:07:c3:3f:a8:47:0e:b4:3f:71:10:c5:
dd:c7:10:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:45:14 2026 by rpki-client