
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/27ac555d-052a-363f-a7ec-53779623b810.roa
File: 27ac555d-052a-363f-a7ec-53779623b810.roa (raw, json)
Hash identifier: M3xTouW0oCa91WOP0PYLxRFN1TXyJb1E5fonYE3mr4Y=
Subject key identifier: 80:8F:20:DC:B8:EA:EB:52:26:8B:76:59:EA:6C:3A:87:D6:33:5D:79
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584F4986E48FBC01A7F244D1E638
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/27ac555d-052a-363f-a7ec-53779623b810.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 30036
IP address blocks: 173.23.8.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 08 Oct 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:86:e4:8f:bc:01:a7:f2:44:d1:e6:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=4bd74470-9e53-4d00-84c2-52057f6dd4e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:08:e7:78:c5:c4:49:ed:62:68:d2:78:47:d1:
a5:69:d8:09:a7:59:58:59:a4:96:9f:af:93:14:01:
99:05:d1:58:b8:af:ce:3d:87:20:ee:ba:6b:7b:82:
38:6f:6f:84:34:c8:f0:c5:98:86:a7:44:a8:cf:8a:
8f:6d:72:0f:5c:91:2f:9f:1f:f5:ff:e1:2f:49:6d:
f4:aa:80:e3:96:54:27:91:05:a4:9f:06:e7:77:d0:
dd:36:a4:18:22:32:89:02:8a:7f:6d:2a:63:a6:a5:
03:ec:f0:c4:5e:51:a5:ba:36:bf:b1:12:34:2b:a9:
fc:ba:e7:07:4b:3f:28:09:84:f5:9c:56:dd:86:b9:
d3:3d:01:36:e6:b8:28:75:f0:f8:ae:44:88:ff:69:
b0:35:d9:ae:0d:cb:f5:6b:30:3f:fc:82:9e:60:8a:
ee:5c:67:33:b5:78:31:0c:91:9d:33:26:71:30:a7:
99:01:65:8a:75:d3:be:7f:20:d8:00:56:b8:9f:39:
eb:d6:23:86:15:c1:f6:e0:4b:7b:3f:dd:56:de:a4:
86:96:b8:ae:4e:de:b8:6c:4d:aa:51:ef:f0:14:c8:
1a:0e:b2:0f:1e:28:a8:22:9b:f4:d5:ef:3a:5e:b5:
39:93:ee:06:eb:e2:0e:25:16:77:bc:b0:f4:ce:1a:
2f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8F:20:DC:B8:EA:EB:52:26:8B:76:59:EA:6C:3A:87:D6:33:5D:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/27ac555d-052a-363f-a7ec-53779623b810.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.23.8.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:e4:e4:93:b2:bc:b9:3c:ea:43:1e:16:5c:8d:6c:56:cb:f7:
32:c8:48:e7:23:ea:fd:64:5a:0f:65:e7:f3:b1:75:2e:00:09:
96:cc:22:d2:ce:7a:1d:61:de:01:94:fd:13:58:64:6e:49:05:
51:be:77:e5:5c:06:85:4f:5b:52:a4:5c:93:b8:12:73:47:88:
60:50:fa:f0:fe:3a:fb:d2:3f:eb:76:be:0b:1a:a5:4a:57:6c:
e0:6c:d4:1d:fe:95:bd:d6:01:50:e4:c9:52:8a:08:7a:17:6b:
06:66:ce:50:45:ac:4d:36:89:73:a0:c4:1c:54:6f:8c:0d:34:
8d:c0:73:cf:63:c8:a5:96:52:93:c2:68:a9:8e:7e:b4:b1:a7:
e5:9b:22:cf:3e:67:22:2c:79:5a:6e:3f:85:00:98:c4:47:91:
96:86:29:6c:c4:1c:05:24:96:ae:cf:f3:c6:f7:37:3c:77:03:
79:61:d8:30:72:53:96:4e:65:00:a9:42:9b:44:4e:8c:a2:eb:
b6:a5:ba:76:32:7e:81:00:33:30:dd:5b:f9:54:5c:bc:b6:a2:
31:f8:8f:dc:6e:8d:fa:9b:4b:60:b2:59:e0:04:42:51:0e:ba:
2d:86:06:d7:67:6f:86:8f:a8:d9:72:fa:f1:47:00:dd:39:79:
32:65:56:d7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhuSPvAGn8kTR5jgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NGJkNzQ0NzAtOWU1My00ZDAwLTg0YzItNTIwNTdmNmRkNGU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQjneMXESe1iaNJ4R9GladgJp1lYWaSWn6+T
FAGZBdFYuK/OPYcg7rpre4I4b2+ENMjwxZiGp0Soz4qPbXIPXJEvnx/1/+EvSW30
qoDjllQnkQWknwbnd9DdNqQYIjKJAop/bSpjpqUD7PDEXlGluja/sRI0K6n8uucH
Sz8oCYT1nFbdhrnTPQE25rgodfD4rkSI/2mwNdmuDcv1azA//IKeYIruXGcztXgx
DJGdMyZxMKeZAWWKddO+fyDYAFa4nznr1iOGFcH24Et7P91W3qSGlriuTt64bE2q
Ue/wFMgaDrIPHiioIpv01e86XrU5k+4G6+IOJRZ3vLD0zhovYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFICPINy46utSJot2WepsOofWM115MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjdhYzU1NWQtMDUyYS0z
NjNmLWE3ZWMtNTM3Nzk2MjNiODEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRcIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEvk5JOyvLk86kMeFlyNbFbL9zLISOcj6v1kWg9l5/OxdS4ACZbMItLO
eh1h3gGU/RNYZG5JBVG+d+VcBoVPW1KkXJO4EnNHiGBQ+vD+OvvSP+t2vgsapUpX
bOBs1B3+lb3WAVDkyVKKCHoXawZmzlBFrE02iXOgxBxUb4wNNI3Ac89jyKWWUpPC
aKmOfrSxp+WbIs8+ZyIseVpuP4UAmMRHkZaGKWzEHAUklq7P88b3Nzx3A3lh2DBy
U5ZOZQCpQptEToyi67alunYyfoEAMzDdW/lUXLy2ojH4j9xujfqbS2CyWeAEQlEO
ui2GBtdnb4aPqNly+vFHAN05eTJlVtc=
-----END CERTIFICATE-----
Generated at Tue Oct 6 01:49:00 2026 by rpki-client