
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/249d95c6-cf4b-36b7-bb05-35976c88386c.roa
File: 249d95c6-cf4b-36b7-bb05-35976c88386c.roa (raw, json)
Hash identifier: 5zGMz0StMmYcglKYXPpEi3N7/qjqJEKwBFLYaG+nGHo=
Subject key identifier: 8B:0D:8F:53:62:8F:40:5E:F8:6E:85:B6:27:BA:FF:CE:11:F0:6E:BE
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D332C7A4D035C2F21E3BA2818
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/249d95c6-cf4b-36b7-bb05-35976c88386c.roa
Signing time: Tue 17 Mar 2026 15:57:25 +0000
ROA not before: Tue 17 Mar 2026 15:57:25 +0000
ROA not after: Mon 15 Jun 2026 15:57:25 +0000
asID: 19905
IP address blocks: 173.17.224.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:33:2c:7a:4d:03:5c:2f:21:e3:ba:28:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 17 15:57:25 2026 GMT
Not After : Jun 15 15:57:25 2026 GMT
Subject: CN=7006b379-3f4f-4ef9-92ff-64aba12e7b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f4:6f:31:1b:16:1b:1b:4c:0c:07:97:13:59:
ec:3e:23:ef:d6:11:51:11:fb:f1:98:0b:78:98:d2:
02:63:27:79:a7:0b:7f:35:22:0e:1e:be:9b:11:41:
f3:89:64:91:35:ff:c1:65:1d:8c:b8:0c:64:4a:1d:
e4:fb:4d:a7:db:09:81:a5:06:bc:6e:58:b4:31:05:
5f:f5:e0:d0:ea:44:a3:e1:bf:77:6b:22:c4:7a:f4:
c6:50:f3:70:df:85:bd:0c:39:6c:3e:e2:27:bc:2a:
65:e7:5f:f9:a9:91:49:3d:6a:e3:d4:0a:a4:41:bb:
84:46:c6:8d:ce:c9:15:71:54:fa:e7:4a:e5:76:67:
5c:c5:b0:a4:41:0b:1b:6f:7a:66:c5:90:7c:44:01:
ca:f3:35:9a:67:4f:d4:dd:f1:a3:cd:c3:3c:4f:1d:
8b:ee:aa:38:eb:0c:c3:0b:6f:8e:55:d7:17:e1:0d:
91:ba:71:3b:f2:53:9e:71:6e:dd:c6:8a:1e:b5:cf:
19:15:04:69:cd:03:dd:13:33:43:3d:ca:09:84:3d:
80:3c:45:91:07:71:22:8a:19:4a:ac:28:96:47:0b:
ff:0f:0a:96:0a:06:55:a2:63:c1:3f:9d:b2:e5:b5:
3c:5f:52:d2:4d:f9:96:bb:f2:b1:22:56:a4:a8:3f:
d6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0D:8F:53:62:8F:40:5E:F8:6E:85:B6:27:BA:FF:CE:11:F0:6E:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/249d95c6-cf4b-36b7-bb05-35976c88386c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.17.224.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:b4:32:83:76:1f:13:d1:15:f2:50:ae:b2:1a:2f:b5:8c:06:
22:33:b2:a1:71:60:35:2d:a1:4f:b0:1a:a3:c6:b0:8d:db:cb:
b3:5b:9e:4b:ca:8f:df:5b:f5:55:46:ec:7f:61:04:de:7e:d6:
7d:af:f0:24:ae:c0:74:cd:0e:81:d9:5c:22:d0:b6:4e:43:5b:
fa:10:db:9d:9b:7d:bf:cd:6f:51:13:1e:1f:bc:f7:6c:d9:65:
30:1b:aa:76:6f:77:4d:7a:4f:2c:fd:11:a3:86:b8:55:d7:8a:
58:8a:87:c1:af:d4:e3:b0:66:e2:54:fb:02:bb:75:37:63:97:
9e:63:cf:50:5d:d9:65:dc:b6:f4:18:a8:c0:89:73:24:22:f8:
b2:33:6c:63:c2:45:e4:5e:04:ad:c9:7f:dd:11:e9:bd:a1:76:
71:60:1c:85:72:c9:70:c1:85:ed:5f:5f:c7:6a:88:e9:e6:81:
fb:20:22:d2:4e:24:08:ad:3c:85:72:b8:89:b6:e4:01:29:55:
55:98:82:4e:09:6f:16:94:d0:5b:53:05:d7:b9:f0:7d:3d:7e:
0a:b9:6f:d0:4a:e4:be:3c:0d:7a:f9:9a:e4:f1:8a:91:61:73:
8d:9c:40:7a:50:f5:e3:15:70:69:28:28:ed:de:49:f0:92:db:
99:06:76:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:53:32 2026 by rpki-client