
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fca88dc6-80a8-38ce-899a-71fceb3b14af.roa
File: fca88dc6-80a8-38ce-899a-71fceb3b14af.roa (raw, json)
Hash identifier: 9PpI/Tk0rpl/ATZb3BQtp77VIRKztTW0kEc2yvtveu4=
Subject key identifier: F6:D5:ED:B3:C8:BB:62:53:64:51:3B:54:B6:2B:94:06:9D:C6:C5:54
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D2379FC399576447B5A690E00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fca88dc6-80a8-38ce-899a-71fceb3b14af.roa
Signing time: Thu 12 Mar 2026 01:00:32 +0000
ROA not before: Thu 12 Mar 2026 01:00:32 +0000
ROA not after: Wed 10 Jun 2026 01:00:32 +0000
asID: 19905
IP address blocks: 173.21.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:23:79:fc:39:95:76:44:7b:5a:69:0e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 12 01:00:32 2026 GMT
Not After : Jun 10 01:00:32 2026 GMT
Subject: CN=21c8bf6a-b030-4586-86bc-038d2a4d76f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1e:ce:f9:0d:df:bf:1b:bb:6c:d6:42:f0:72:
49:40:c8:44:5c:a5:17:81:61:32:f4:98:3b:f8:9f:
9a:55:9f:66:86:7e:7b:22:8f:4b:1c:be:79:5f:24:
4e:81:38:93:6e:9e:6e:9f:8f:40:b4:dd:05:bb:47:
91:80:c6:1d:6d:41:30:49:58:5b:a7:86:ae:4b:1f:
75:3c:1e:4e:d8:2a:99:fe:bf:cf:9c:f3:ec:20:97:
b0:bb:e3:aa:f8:cb:99:e8:ab:77:c5:a3:8d:de:e6:
67:9c:de:0b:68:be:8d:d2:8a:0b:e9:4c:35:cc:39:
f3:a4:98:85:d6:fb:f6:0d:9a:71:25:24:14:fb:5f:
1a:dc:da:3d:0e:1d:4a:88:77:58:46:0a:da:11:51:
45:09:3b:b4:04:99:fb:24:82:a5:ca:d7:16:c2:83:
8b:85:18:5b:b7:94:c4:30:34:b6:77:c0:b6:bb:4c:
38:f6:da:0b:e6:c6:c4:dd:73:09:af:53:3f:10:6f:
af:2a:4b:78:3d:8f:b8:1c:8b:8f:6f:d2:e6:c1:69:
12:ec:4c:33:db:3b:1b:a9:4f:5b:a1:c8:c7:88:a9:
bf:a3:5a:0a:f2:7b:6d:d8:be:92:ca:a8:f2:0d:a8:
ea:03:ae:2e:c2:6c:6b:bc:ca:80:ad:40:57:58:3a:
f8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D5:ED:B3:C8:BB:62:53:64:51:3B:54:B6:2B:94:06:9D:C6:C5:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fca88dc6-80a8-38ce-899a-71fceb3b14af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.21.253.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:95:1a:80:5c:12:8f:55:45:5e:ab:6e:68:3e:b8:b8:ed:b4:
f8:4e:5a:e3:21:5d:40:b4:e8:68:c7:bb:43:30:c5:bf:3c:63:
ae:0a:cb:89:d8:44:e7:48:22:94:50:2f:09:8c:2a:cf:3b:a5:
3c:76:04:11:7d:73:72:42:3d:a7:4a:3d:3d:5e:b3:52:72:b1:
55:d3:eb:08:c7:b2:e5:4f:8a:49:37:ff:95:d6:1d:63:56:a6:
72:d9:84:13:58:63:9b:85:71:d7:be:7b:5d:4a:63:51:a0:69:
a5:9c:d5:da:35:8c:95:ab:12:8a:e8:d5:60:f1:a7:e7:e9:a6:
f8:86:30:94:75:61:2b:6b:4f:3a:3c:b9:73:f0:68:d1:13:78:
92:ec:5e:52:21:1f:c8:47:03:7e:1f:3a:f4:d7:88:d8:18:7e:
48:a2:a1:39:1b:db:05:1e:b7:1f:34:93:b0:91:81:42:73:9a:
1a:8e:19:2e:2d:77:30:0f:a1:1d:cf:19:10:66:05:7f:d9:dd:
4a:6b:05:e6:71:58:16:60:9f:31:1e:62:62:5c:ac:d4:ad:d9:
bb:92:9c:55:c0:e0:ac:40:77:b4:c7:3e:fe:a3:57:a1:04:00:
8c:9c:25:cf:1d:c2:69:09:e5:54:db:c8:40:60:f6:82:ca:c9:
04:74:fd:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:46:31 2026 by rpki-client