
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d5cd6add-c494-3f28-85d1-dee63a001f3f.roa
File: d5cd6add-c494-3f28-85d1-dee63a001f3f.roa (raw, json)
Hash identifier: +Ri+wGKX3IuWLGthSEGg+hbg9ih0b+cU9vy4XAem6f0=
Subject key identifier: F2:C2:03:40:42:0B:0C:2F:DC:3C:9D:2E:C4:D0:6E:61:CC:75:64:D5
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D237A66E194734083C6475C10
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d5cd6add-c494-3f28-85d1-dee63a001f3f.roa
Signing time: Thu 12 Mar 2026 01:00:32 +0000
ROA not before: Thu 12 Mar 2026 01:00:32 +0000
ROA not after: Wed 10 Jun 2026 01:00:32 +0000
asID: 19905
IP address blocks: 173.17.106.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:23:7a:66:e1:94:73:40:83:c6:47:5c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 12 01:00:32 2026 GMT
Not After : Jun 10 01:00:32 2026 GMT
Subject: CN=2e77fbeb-81b1-4ccb-80c1-030b029d5b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1a:ba:5d:a0:cb:f6:72:97:fe:8a:d7:a0:7b:
7d:83:ab:6a:86:5a:96:24:9d:02:e1:72:6f:f1:8c:
a0:9d:4a:72:cc:19:9b:33:9d:ed:e7:25:29:82:53:
af:45:d6:00:50:75:8d:34:18:62:4d:d9:06:12:0c:
db:58:93:23:e6:be:7f:ee:f5:38:59:27:fc:e7:8f:
cd:38:38:03:f5:84:56:07:63:94:4c:c8:89:42:1f:
0e:bb:32:69:21:6b:cd:61:09:0d:a4:2d:d9:cc:24:
9f:24:27:09:df:c4:6d:d2:5f:81:41:2d:1a:e2:01:
c2:43:79:a7:66:19:63:48:54:77:08:c1:d8:64:44:
b7:b5:c3:00:36:e1:73:e0:4e:ce:b0:44:26:ce:a8:
73:72:41:0c:0e:80:61:fc:05:72:50:72:dc:17:5c:
ce:1d:36:d9:03:0f:81:87:02:af:34:05:07:26:9b:
45:92:9c:6d:51:ba:7d:91:8f:86:bd:e2:bc:c3:91:
72:4d:16:32:2e:4a:87:1a:08:e6:e6:5e:39:dc:57:
d1:a8:7e:49:ab:71:5b:ef:08:c3:c6:1d:18:98:f3:
a8:64:a6:0c:72:6c:50:2c:ac:5d:c7:dc:c8:9d:48:
b5:ff:f8:b1:ea:e1:c5:12:58:aa:6f:11:04:6e:0c:
a0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C2:03:40:42:0B:0C:2F:DC:3C:9D:2E:C4:D0:6E:61:CC:75:64:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d5cd6add-c494-3f28-85d1-dee63a001f3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.17.106.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:65:5a:bd:cb:d9:82:bb:a2:b5:c9:a9:9c:cc:bd:f5:ba:4c:
2e:90:40:2c:98:44:02:c4:ae:1f:27:1d:bd:57:8e:b1:dc:3e:
10:2f:36:2c:cd:19:06:03:25:61:23:d6:9a:42:44:ac:46:c6:
b6:0c:1e:36:a8:4c:6c:a1:0b:7b:12:9e:84:0d:8b:f3:d2:c0:
31:d5:2f:02:fc:62:a8:20:a2:89:9d:74:47:97:c5:85:4d:cb:
72:dc:db:b9:0d:b5:a2:03:4c:bd:39:3a:ca:90:e7:61:62:da:
d8:66:61:47:bd:04:b3:3b:2d:46:a2:96:1b:d2:b0:80:51:b1:
83:4c:0c:9c:ee:8d:e3:d8:4c:60:2c:c9:6e:eb:3c:cd:db:30:
b4:44:4f:87:23:83:13:9e:ab:e2:a5:2b:5d:81:58:7a:19:ef:
d5:36:10:20:d7:65:69:de:e3:e9:6f:9d:b1:57:45:02:a0:73:
1d:0a:30:de:f7:a9:4f:16:43:33:b6:84:88:9a:d4:d3:76:be:
ef:61:04:09:d1:bc:a6:c8:ea:ef:e9:9c:df:a1:dd:f0:87:c5:
c0:36:d0:d1:ff:62:46:a6:32:21:c6:49:7d:27:bf:80:03:76:
55:8c:56:ec:34:c2:4c:06:80:c9:39:15:2e:1f:6d:79:b8:3a:
31:94:14:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:42:49 2026 by rpki-client