
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/a3278fd8-969b-3d7a-b7c1-e5f4aaba073f.roa
File: a3278fd8-969b-3d7a-b7c1-e5f4aaba073f.roa (raw, json)
Hash identifier: 5jMkudl1Aj7Ix7Uwi3RQX+GN+12vwxvIvhNvJTLufi8=
Subject key identifier: 22:9A:FC:83:6E:90:8B:17:74:6E:31:0F:32:8D:18:9D:76:DA:53:71
Certificate issuer: /CN=3b24522b-8239-4bb9-9845-1e01e28aa452
Certificate serial: 010D0C9F4328584DFA707EA3CBE3A9A749902F00
Authority key identifier: A0:02:F5:68:D9:AE:0F:63:11:51:15:44:02:1D:1D:5B:FE:4E:B0:D2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/a3278fd8-969b-3d7a-b7c1-e5f4aaba073f.roa
Signing time: Thu 28 May 2026 01:00:10 +0000
ROA not before: Thu 28 May 2026 01:00:10 +0000
ROA not after: Wed 26 Aug 2026 01:00:10 +0000
asID: 32854
IP address blocks: 169.197.172.0/24 maxlen: 24
169.197.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:fa:70:7e:a3:cb:e3:a9:a7:49:90:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b24522b-8239-4bb9-9845-1e01e28aa452
Validity
Not Before: May 28 01:00:10 2026 GMT
Not After : Aug 26 01:00:10 2026 GMT
Subject: CN=9bc28fba-d2b8-45ac-b677-079bd9509e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:35:84:aa:0d:96:95:f7:d8:f4:1a:a9:f4:a9:
ce:4d:72:9d:49:93:5e:8f:5c:2c:ef:0f:ff:60:92:
f3:c1:14:c9:26:de:6c:b3:af:cf:c4:79:97:ff:9a:
79:4a:0e:09:29:af:0f:6a:ad:89:98:95:16:81:78:
2d:7a:6d:39:a8:a8:cd:64:ca:18:84:2f:b0:94:46:
3f:fd:dc:30:dd:33:64:4d:fc:4b:2a:34:40:7f:7c:
0c:f0:a1:b2:8d:3e:d1:9b:03:e9:f9:36:01:b0:d3:
96:82:a7:de:28:a6:8c:3b:73:c5:61:42:ee:3b:bf:
99:90:c1:c1:12:c8:b8:6f:79:eb:e2:3f:63:f4:2a:
90:e0:20:a4:7e:e4:51:f8:c6:0b:75:63:85:fc:b5:
c9:3c:f7:0f:06:23:36:a8:2e:99:57:22:66:fa:92:
1e:d3:2a:68:7e:a4:a2:61:6b:a1:20:9a:ba:34:c9:
1d:4f:c8:60:a0:e6:ae:f3:54:8d:f2:70:a8:43:4c:
34:90:1b:bb:e1:81:95:c2:bd:e0:e0:33:9c:f2:50:
41:02:72:ba:f4:3d:66:74:26:8d:1a:a7:61:db:2b:
82:17:d7:66:50:41:40:a4:66:fe:1b:73:aa:4d:c1:
ca:70:fd:35:0f:18:61:e8:3f:b0:8d:b6:fe:61:79:
03:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9A:FC:83:6E:90:8B:17:74:6E:31:0F:32:8D:18:9D:76:DA:53:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/a3278fd8-969b-3d7a-b7c1-e5f4aaba073f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.crl
X509v3 Authority Key Identifier:
keyid:A0:02:F5:68:D9:AE:0F:63:11:51:15:44:02:1D:1D:5B:FE:4E:B0:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer
sbgp-ipAddrBlock: critical
IPv4:
169.197.172.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:30:25:92:fb:fa:12:1d:a0:25:69:fa:f6:49:7f:57:e8:02:
dd:b0:8e:10:5b:ae:e0:95:27:d2:88:64:b9:a0:50:31:70:1e:
5c:0b:4c:9f:77:d0:b2:d6:f1:f0:a3:3b:24:55:53:82:0f:5b:
70:96:7f:5a:42:75:bc:a7:b7:26:6e:42:79:22:8e:ad:49:4f:
f8:af:43:56:9c:21:0e:46:69:12:05:27:41:a1:c2:6c:53:e1:
07:5c:e9:23:b7:84:9f:91:26:59:aa:52:12:35:6c:25:02:b5:
63:5d:c6:8d:c7:ae:d8:d4:2b:24:aa:0d:b8:3d:40:77:0d:72:
d4:de:d4:8f:28:17:f7:76:00:cc:ed:aa:7b:24:28:38:3c:2c:
7d:20:09:41:1c:11:c0:76:4b:2a:81:f4:41:be:f4:3d:a8:cd:
15:a1:f3:78:79:a4:ba:95:0b:e1:a8:b9:53:07:51:ab:cf:f9:
ec:c5:2c:8c:77:b4:94:96:88:de:b0:34:0f:9b:54:7a:f6:de:
a2:c4:47:c4:af:20:02:9a:c3:b0:ba:b2:69:ba:07:7b:0e:da:
20:74:a2:48:ae:36:f9:b2:9b:84:a1:33:8a:a4:d4:51:1b:99:
81:89:c3:b9:13:19:aa:5f:72:89:97:6e:64:07:66:5f:a4:30:
51:cf:8d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 17:52:08 2026 by rpki-client