
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/02ce08f5-90fe-3d82-b78a-4582fc9ff20d.roa
File: 02ce08f5-90fe-3d82-b78a-4582fc9ff20d.roa (raw, json)
Hash identifier: LgcH4SLvhEsUWRuY/TbdSHdg/4FvhXANPrRZ7GhPyq8=
Subject key identifier: 06:49:AC:78:F7:06:F6:4C:74:35:30:9A:A4:96:39:43:91:0B:E8:2E
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584F498ABF9C78C8EFE235F0D380
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/02ce08f5-90fe-3d82-b78a-4582fc9ff20d.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 30036
IP address blocks: 173.19.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:8a:bf:9c:78:c8:ef:e2:35:f0:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=a0747ff3-f0f5-4653-86fd-ec6cb6efcca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:93:c9:b8:06:f8:f4:8b:4e:19:02:7e:a4:cd:
b7:c5:04:5a:0b:b4:5c:6f:40:aa:36:59:4f:a8:e7:
28:85:79:38:a7:49:73:cd:c9:55:27:83:37:db:66:
91:c0:76:4b:81:67:31:67:66:89:38:e4:61:5c:91:
84:1b:02:27:9d:c6:1a:90:0c:10:3e:62:9c:e3:af:
50:42:65:c3:d9:df:8e:f7:99:c1:6b:91:2b:a0:43:
71:a7:24:85:38:77:f7:37:fb:20:41:5c:f1:4f:6d:
16:ca:b0:3f:9b:db:44:aa:18:b5:72:a8:1b:e1:b2:
f6:85:2d:91:91:03:a6:61:42:8b:18:e2:c2:ed:e9:
7b:ee:1c:35:c2:fe:6c:6a:a9:24:44:4e:b5:97:68:
97:27:36:da:3a:5d:da:bd:5a:d2:89:10:a2:09:c3:
a8:da:81:a6:51:39:93:40:c5:29:55:d1:da:b9:56:
8a:9c:7f:27:a7:17:4f:cb:b5:84:62:30:b2:0d:2a:
98:50:af:32:71:7d:51:fb:17:95:a0:de:c9:c6:73:
be:85:58:46:39:42:7a:bc:6c:09:b6:5e:2e:55:84:
6a:9d:89:71:1e:43:20:cd:a4:4f:04:05:c9:09:22:
fa:32:f3:33:84:63:45:b0:b6:dd:0f:d1:fb:bf:3e:
61:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:49:AC:78:F7:06:F6:4C:74:35:30:9A:A4:96:39:43:91:0B:E8:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/02ce08f5-90fe-3d82-b78a-4582fc9ff20d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.19.65.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:b9:36:fc:9c:15:84:1c:dd:7d:b7:69:c2:0a:2f:da:53:0f:
9f:ad:62:95:80:dd:99:61:29:c4:f8:f1:38:93:ff:71:39:ec:
fd:18:5a:86:ea:b9:9a:e5:4b:d5:74:94:21:09:a3:f8:82:72:
61:11:89:35:15:2e:23:09:04:d1:02:d7:61:2a:b0:c0:9c:19:
4f:d4:f4:60:67:c6:14:e2:91:47:71:43:77:59:73:e7:b3:4a:
d9:8c:88:a4:bf:ef:33:32:26:fa:1f:40:2b:6a:89:21:43:b7:
a1:67:ca:5e:f6:ed:7e:84:b2:60:dc:60:7b:cb:1d:d4:14:99:
2f:38:b9:c7:ec:5a:93:da:05:23:24:37:26:cb:44:24:e7:af:
d7:49:f3:67:49:f1:51:d1:fe:39:b3:bf:b6:21:d7:ee:86:62:
85:95:9f:85:42:40:5f:50:78:47:6e:34:0a:ce:89:cd:11:06:
f1:c2:17:95:e7:8b:5c:7c:24:c3:3f:05:bd:22:4a:cb:c4:52:
53:14:3f:b5:e4:c4:d0:af:9c:9d:66:85:5a:21:33:76:68:b3:
e5:b2:54:b7:04:73:79:c4:4d:e5:1c:7d:f2:3a:0d:a3:e7:d9:
aa:a1:ec:c2:de:1c:96:73:39:79:51:29:04:86:85:e9:dc:b3:
5b:fd:6e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:13:13 2026 by rpki-client