
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dc231298-b16e-336f-8896-dea6060bb4c7.roa
File: dc231298-b16e-336f-8896-dea6060bb4c7.roa (raw, json)
Hash identifier: PvvxH8lGa9s0WxPQ7+1Ynja6yK4UX2SSmwItCCnisvE=
Subject key identifier: 22:53:D7:7C:C4:BF:64:EB:AD:F2:6A:77:A4:F1:91:A0:C9:5B:55:AC
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584EA7A0FF2A229A89067DADB0D8
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dc231298-b16e-336f-8896-dea6060bb4c7.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 30036
IP address blocks: 173.18.176.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:a0:ff:2a:22:9a:89:06:7d:ad:b0:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=789a52f4-4423-41e8-8019-9c15c2d71bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:74:bb:c4:f5:03:cf:c0:d6:34:71:fa:fc:3c:
8c:53:65:75:55:a5:37:59:49:35:9d:15:f9:2d:35:
3c:86:7b:95:fb:2b:85:87:52:13:2b:d4:d0:50:7b:
52:95:b0:e7:5e:ed:3f:df:4c:2b:4e:76:37:93:b8:
c2:fc:eb:b7:c0:17:23:71:13:97:96:f4:74:ad:25:
ca:a6:8e:45:d3:ed:ed:15:ef:40:5f:ad:2f:0e:16:
27:07:84:ad:76:3d:aa:ee:4f:fd:33:28:de:fa:48:
90:e7:12:77:15:9b:34:94:b8:57:d0:ff:b1:b0:c9:
aa:2a:0b:47:31:ac:f0:9b:8a:13:fc:24:77:a0:28:
f9:1c:22:15:46:f6:99:c5:fc:7a:76:ac:5b:76:45:
14:29:38:34:43:87:11:5f:2e:a3:8b:d1:50:7c:31:
b8:0d:a8:45:ce:e4:68:53:ca:ff:bc:64:a7:12:a0:
f4:da:b3:9f:2b:59:4e:7d:9a:e5:b1:81:b9:a2:c2:
ef:20:63:d5:6f:a8:60:3f:e7:d7:c2:03:d0:9e:15:
89:c9:5e:b6:39:c3:63:d1:52:88:a2:b1:06:a3:c1:
71:38:8d:ac:e2:fe:8e:bc:20:41:aa:50:23:c0:f5:
d4:83:43:8f:8c:c0:52:ca:e1:6a:2f:cd:8d:d4:92:
85:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:53:D7:7C:C4:BF:64:EB:AD:F2:6A:77:A4:F1:91:A0:C9:5B:55:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dc231298-b16e-336f-8896-dea6060bb4c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.18.176.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:4e:13:8d:bd:e9:48:10:b1:d9:f1:8b:a0:2e:62:04:48:76:
6f:c7:c3:18:5b:6a:1f:07:38:76:26:12:df:da:69:10:23:06:
59:75:6a:9a:60:6b:3a:a3:d6:b1:61:c3:ca:91:7e:8c:23:82:
bd:47:f0:3b:e6:32:85:86:ba:eb:d6:5d:f0:31:56:a4:9c:d0:
03:af:ed:4d:ef:6e:68:7d:aa:55:3d:f2:2c:38:a6:df:b9:29:
92:69:ca:49:27:15:68:f9:16:d7:b9:5a:6b:fe:94:21:ae:40:
e4:62:e1:f6:f6:4b:28:44:86:c9:8f:8c:68:af:8a:62:f3:5a:
12:de:6a:aa:a3:02:e4:00:41:4d:da:a9:ee:3b:e7:80:0d:80:
f1:a5:c2:18:4c:78:51:12:f3:1b:d0:0a:ec:3c:28:da:fd:6f:
8f:69:f6:3f:4b:08:5d:f5:e6:11:40:88:31:ef:33:02:a1:74:
bd:67:01:14:d6:ec:ad:a7:56:b3:95:ed:c6:a5:12:ed:0a:bc:
2c:cf:eb:86:22:ed:12:04:b0:49:90:27:ee:0f:92:dd:79:e2:
4c:69:2d:81:be:b5:7b:db:e5:41:ee:d9:d7:2a:70:bc:41:00:
bc:63:cc:f7:6e:ae:3e:ea:fc:18:ca:20:13:4a:fe:dd:63:39:
59:37:24:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:26:46 2026 by rpki-client