
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fa38c4c0-2930-37f2-aa5d-8781e808672d.roa
File: fa38c4c0-2930-37f2-aa5d-8781e808672d.roa (raw, json)
Hash identifier: jSQvPCYOEV3k9ar+nbeMGy6CfNcPiGrlaNgnMthqOgk=
Subject key identifier: D8:36:14:24:D3:E8:94:0A:B7:12:61:FB:7A:14:E1:0E:14:33:25:B4
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584EA7A0FFEBACF612AD8C122140
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fa38c4c0-2930-37f2-aa5d-8781e808672d.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 30036
IP address blocks: 173.25.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:a0:ff:eb:ac:f6:12:ad:8c:12:21:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=79b2df84-c843-43ae-823a-47a612a69d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:38:7d:7a:7e:8e:95:54:64:12:7b:9b:d2:47:
87:bc:59:f8:c2:eb:e8:9b:e0:7c:bd:44:0f:7a:87:
ed:e3:ee:d7:83:e0:bd:09:14:08:bf:ee:bb:29:21:
bc:8c:e5:08:b0:b8:2a:a0:c7:1f:ac:07:e3:83:14:
eb:bc:d0:8a:6f:3a:7d:41:78:ca:a0:8f:30:97:e5:
0c:62:32:17:48:59:19:22:12:c0:3a:ad:4e:cc:39:
bf:a1:32:0d:52:81:dc:15:2c:a5:19:dd:e0:16:56:
f9:b3:94:45:16:c6:cb:c8:e1:c1:b8:cc:e7:42:70:
5e:28:7c:fa:00:87:23:6b:1f:cd:df:63:3a:1d:fb:
bf:62:4b:32:b9:3c:07:29:e8:fe:b7:1d:91:66:5c:
d9:e1:c8:37:32:af:74:ec:b6:28:ce:5b:6e:64:d5:
38:95:76:7e:f6:1d:c8:04:36:3c:5c:c3:97:0f:78:
9a:f5:93:56:a8:78:ef:ca:65:31:67:41:85:cc:d5:
8b:93:8e:69:83:0b:75:df:68:e2:f8:3c:51:bb:62:
e5:bf:b6:33:79:14:28:d5:a9:1a:a7:5c:72:a8:ef:
0d:2c:9c:7c:8b:bd:f6:22:48:db:5b:dc:6f:2e:90:
c6:a5:e3:ea:89:21:ce:72:a5:2c:c7:2b:50:ff:b2:
fb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:36:14:24:D3:E8:94:0A:B7:12:61:FB:7A:14:E1:0E:14:33:25:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fa38c4c0-2930-37f2-aa5d-8781e808672d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.25.140.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:e9:e3:bf:c1:d4:25:9b:81:31:ed:d0:14:f7:f7:0f:dc:01:
23:b6:03:5f:db:2c:08:f4:0a:1a:77:71:18:79:97:c2:eb:a8:
17:09:27:69:f9:5e:f2:6b:68:d1:d7:a1:ba:c6:89:36:3b:75:
09:f9:57:aa:65:ec:0f:1a:b7:0c:e5:08:40:a5:1f:32:89:1a:
22:ca:53:43:b2:10:b9:95:c2:63:56:a2:39:af:b7:bf:75:eb:
21:79:85:27:32:84:0b:0b:21:8c:24:4c:f7:98:52:8c:72:fa:
e9:5a:53:60:7f:40:42:f9:48:c0:c2:94:84:eb:e5:c4:d7:c5:
62:8c:f2:90:9a:a0:99:61:44:5c:a4:0c:d4:d4:e8:eb:02:a2:
6c:07:d0:55:4f:8c:0d:55:0b:d6:08:70:ee:95:29:e5:21:83:
11:e2:39:72:69:0f:95:98:62:bf:62:69:cd:e7:83:63:f3:44:
7e:7b:16:2c:90:71:0a:a9:89:d0:60:ea:6f:c6:e3:8d:2e:45:
de:47:78:3e:cb:cf:4a:36:1e:18:17:ae:fc:a0:d1:3e:fd:4c:
29:d8:53:f6:89:26:b3:c1:0c:56:a0:2d:65:3f:45:a5:e1:3f:
f9:a6:10:f7:72:47:78:18:58:cc:aa:47:06:20:bb:2e:89:d5:
25:03:ff:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:44:24 2026 by rpki-client