
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/3b18a822-fde6-3f20-a26e-9b8a1b88e430.roa
File: 3b18a822-fde6-3f20-a26e-9b8a1b88e430.roa (raw, json)
Hash identifier: s9TrEJiTgU8pk+o4agu7tbHROCBgf+Vc+o7KoyQz+9c=
Subject key identifier: 4E:81:92:5F:0D:22:DE:BC:5F:99:4E:B1:F8:FC:85:80:B0:65:09:93
Certificate issuer: /CN=c3a944cd-51a8-4d10-ae57-724de26a1d62
Certificate serial: 010D0C9F4328584ED9C768A15F8CAEDD32B12EA0
Authority key identifier: A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/3b18a822-fde6-3f20-a26e-9b8a1b88e430.roa
Signing time: Sun 16 Aug 2026 01:00:14 +0000
ROA not before: Sun 16 Aug 2026 01:00:14 +0000
ROA not after: Sat 14 Nov 2026 02:00:14 +0000
asID: 25655
IP address blocks: 173.241.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 27 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d9:c7:68:a1:5f:8c:ae:dd:32:b1:2e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a944cd-51a8-4d10-ae57-724de26a1d62
Validity
Not Before: Aug 16 01:00:14 2026 GMT
Not After : Nov 14 02:00:14 2026 GMT
Subject: CN=abe9ba53-3bba-416d-baf1-0b5c3bc073fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:76:d4:c1:13:33:bc:b8:4a:66:b7:4f:8e:d4:
b8:7d:69:d1:0d:ba:83:00:f6:a7:ad:d7:fb:5d:e6:
c7:19:08:16:a6:76:b0:a4:7f:f0:49:b5:33:de:7d:
8c:f9:c9:3e:74:cc:f4:01:83:69:92:a7:38:32:1d:
43:98:7f:53:b3:f1:71:65:4d:f7:44:16:89:9b:fa:
a5:b8:ff:7f:66:44:33:ce:fe:50:ab:53:bd:2b:48:
fd:92:8d:74:6a:c7:b3:89:01:65:2c:aa:ea:09:64:
31:4b:1b:18:ee:e3:d2:d9:f4:b8:7b:22:7a:6b:0d:
9a:57:ec:70:e9:1d:f7:e5:17:4b:f7:5b:37:0a:26:
7e:59:03:dd:95:6b:d9:5f:77:1d:ad:45:da:40:c0:
d9:fc:01:bf:28:d9:7e:1f:13:f6:88:6e:63:76:d2:
06:f7:e9:c9:49:0d:c1:e5:5f:39:e7:e7:e3:65:74:
cb:36:d8:80:4f:b7:54:dc:53:21:4d:6a:b1:71:f0:
66:95:9b:19:3d:2d:54:ee:31:1e:eb:24:bc:69:a6:
83:90:57:33:c1:d2:36:af:1b:4f:f1:04:f8:64:a3:
c9:bc:ed:e3:72:46:81:58:dc:bc:1e:ca:56:bc:16:
5a:2f:c3:60:07:24:08:dd:12:fd:6b:f3:88:35:8b:
aa:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:81:92:5F:0D:22:DE:BC:5F:99:4E:B1:F8:FC:85:80:B0:65:09:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/3b18a822-fde6-3f20-a26e-9b8a1b88e430.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl
X509v3 Authority Key Identifier:
keyid:A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer
sbgp-ipAddrBlock: critical
IPv4:
173.241.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:53:36:c0:04:2b:08:e1:0c:5c:2c:c4:a1:67:27:0b:00:3e:
0f:ec:ff:5d:c7:a8:c0:7b:bb:f6:95:6d:9d:2b:bd:57:01:0b:
6b:ae:08:3c:aa:a7:c6:2f:af:5d:6a:00:5d:1d:2c:b2:7e:c2:
cd:83:0c:12:e0:d8:2e:57:77:23:0b:96:65:dc:0d:fe:ff:78:
df:d2:32:fb:9c:e1:40:94:95:f8:28:c9:cb:f4:90:da:33:c7:
49:77:96:12:c9:34:aa:c2:6d:1e:2c:98:06:8e:4a:9d:ed:e1:
11:67:4f:02:cc:f4:66:00:5e:d6:89:31:1a:2b:c1:4f:6e:fb:
07:05:60:20:4b:e1:8b:16:aa:e2:6e:e6:18:32:e7:2c:e8:ce:
d4:c8:65:25:3b:5c:b4:d7:58:b5:58:2b:ce:0f:da:93:81:b7:
bc:f8:01:d8:39:8a:fb:e2:7c:cd:3d:3c:b2:4a:00:73:74:a5:
be:1a:53:47:4d:9c:95:05:af:51:79:df:27:53:e8:d7:c2:d5:
84:cf:50:09:21:87:10:07:e1:83:d5:ee:a5:f8:a9:f9:77:35:
ed:e9:20:02:f9:9d:1a:cc:ab:14:fa:09:66:d4:37:94:bb:d1:
99:47:5b:0a:68:0c:a7:88:90:b3:d8:12:0e:3f:32:4b:4f:bf:
16:91:10:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 15:46:31 2026 by rpki-client