
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/df3b5a92-6a7c-3f5e-8d4c-ef929bfc67c0.roa
File: df3b5a92-6a7c-3f5e-8d4c-ef929bfc67c0.roa (raw, json)
Hash identifier: UoZoXuj0dtIKHZuI2n+Z4v+szUObW7It4qpnE25lhYw=
Subject key identifier: 14:58:CD:6C:6C:0E:CA:E5:99:1A:D4:7D:AD:5C:38:EF:13:A3:89:4D
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584F498B305A73942FD890E35720
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/df3b5a92-6a7c-3f5e-8d4c-ef929bfc67c0.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 19905
IP address blocks: 173.25.224.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 14 Oct 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:8b:30:5a:73:94:2f:d8:90:e3:57:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=aff364b0-621e-4e27-a362-9771eeec2336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ed:e5:0b:fb:58:0e:78:34:89:d7:be:04:40:
8f:a8:ef:8d:f6:e5:05:dc:e1:9c:ec:f1:db:de:25:
da:a3:0e:91:01:38:fd:be:7b:0a:6a:ed:89:15:90:
e1:53:50:fa:6e:cf:aa:03:4a:26:2e:2e:3f:de:d7:
e0:37:ff:99:5a:00:d0:f4:ad:d7:cb:e1:86:ee:c3:
3f:ed:f7:79:83:f4:02:9c:90:11:17:7a:bc:7a:34:
79:97:b0:98:e7:4b:74:f5:25:e1:8f:bb:96:71:21:
be:3a:71:f5:8e:22:3b:e6:1c:73:0d:c9:72:75:35:
8e:90:06:94:82:7e:b7:2a:ae:6f:64:59:7f:34:0c:
96:b7:c3:4b:ed:36:ac:77:36:fd:c8:df:84:d3:34:
ce:e1:24:6f:c3:78:8e:95:7e:17:1f:22:82:33:99:
2d:96:d0:69:a0:94:c6:5e:e1:0d:35:9d:c7:37:c1:
42:fe:b0:6b:97:b1:12:bc:aa:8d:c5:38:3d:a9:4d:
a2:3d:39:d4:14:4d:5a:e6:37:d4:45:17:15:bc:34:
b6:a9:4a:65:eb:ca:8a:65:bd:08:d5:1a:cf:cf:b3:
a7:45:76:01:a9:96:fa:e8:26:d6:3a:ea:7c:50:5d:
85:a2:4d:f9:c8:13:a4:1c:82:b1:2d:fe:63:61:bc:
cb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:58:CD:6C:6C:0E:CA:E5:99:1A:D4:7D:AD:5C:38:EF:13:A3:89:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/df3b5a92-6a7c-3f5e-8d4c-ef929bfc67c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.25.224.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:3e:c8:07:8c:f5:38:15:0e:e0:17:ba:bd:2b:90:a2:69:a8:
b1:06:e2:11:bc:8f:9e:68:a7:ac:6a:46:b3:9e:a5:85:bc:f1:
5d:26:60:75:bd:42:fa:cc:19:4e:b5:b9:a0:89:bf:f9:ec:d3:
fd:e1:59:3e:80:15:f5:94:ee:f1:18:f5:79:72:88:82:33:00:
a6:36:37:80:ba:47:93:6f:67:4e:bf:08:9f:d8:25:0d:3c:38:
d4:0c:a9:fa:79:f2:41:39:2d:3b:a4:a1:a1:c4:4a:e5:49:e4:
70:52:bc:e1:f9:90:a8:5c:6a:c8:0e:5c:8c:ab:b2:f9:e1:b7:
cc:49:72:03:46:e8:13:ef:0b:e9:62:94:14:ca:1f:4c:dc:6d:
87:08:19:67:4b:f9:c0:10:d9:ed:a1:24:d1:0c:d1:f0:17:ac:
73:a2:29:f2:c6:67:3b:6b:cb:d3:54:00:41:dc:39:5a:9d:a0:
fd:bc:0d:45:46:f6:d6:25:96:a5:76:f0:14:b5:37:c3:14:99:
e8:d9:32:f7:ea:d5:93:52:5f:2a:85:3c:b3:f6:b9:e1:f9:f9:
ff:19:49:bb:20:27:5b:34:0a:ae:75:37:df:1c:54:7e:7e:c5:
c9:9d:1d:04:4d:37:9f:46:8a:f9:cf:72:d3:96:8c:4f:39:bc:
0c:36:20:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JizBac5Qv2JDjVyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YWZmMzY0YjAtNjIxZS00ZTI3LWEzNjItOTc3MWVlZWMyMzM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+3lC/tYDng0ide+BECPqO+N9uUF3OGc7PHb
3iXaow6RATj9vnsKau2JFZDhU1D6bs+qA0omLi4/3tfgN/+ZWgDQ9K3Xy+GG7sM/
7fd5g/QCnJARF3q8ejR5l7CY50t09SXhj7uWcSG+OnH1jiI75hxzDclydTWOkAaU
gn63Kq5vZFl/NAyWt8NL7Tasdzb9yN+E0zTO4SRvw3iOlX4XHyKCM5ktltBpoJTG
XuENNZ3HN8FC/rBrl7ESvKqNxTg9qU2iPTnUFE1a5jfURRcVvDS2qUpl68qKZb0I
1RrPz7OnRXYBqZb66CbWOup8UF2Fok35yBOkHIKxLf5jYbzL7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBRYzWxsDsrlmRrUfa1cOO8To4lNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGYzYjVhOTItNmE3Yy0z
ZjVlLThkNGMtZWY5MjliZmM2N2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRngMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG4+yAeM9TgVDuAXur0rkKJpqLEG4hG8j55op6xqRrOepYW88V0mYHW9
QvrMGU61uaCJv/ns0/3hWT6AFfWU7vEY9XlyiIIzAKY2N4C6R5NvZ06/CJ/YJQ08
ONQMqfp58kE5LTukoaHESuVJ5HBSvOH5kKhcasgOXIyrsvnht8xJcgNG6BPvC+li
lBTKH0zcbYcIGWdL+cAQ2e2hJNEM0fAXrHOiKfLGZztry9NUAEHcOVqdoP28DUVG
9tYllqV28BS1N8MUmejZMvfq1ZNSXyqFPLP2ueH5+f8ZSbsgJ1s0Cq51N98cVH5+
xcmdHQRNN59GivnPctOWjE85vAw2IHs=
-----END CERTIFICATE-----
Generated at Mon Oct 12 14:16:28 2026 by rpki-client