
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3da675b4-9ad3-3e34-adbe-a005f6b3c91f.roa
File: 3da675b4-9ad3-3e34-adbe-a005f6b3c91f.roa (raw, json)
Hash identifier: kD052g+AjI5brd9UYMuIfM2/ZcKhN3pdO7HM2rsNdlk=
Subject key identifier: 40:9D:F2:3C:1A:2A:A4:99:D8:B4:5B:65:17:B7:62:B3:64:F1:2D:77
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584F49870E061A4F54613D1EBE00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3da675b4-9ad3-3e34-adbe-a005f6b3c91f.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 30036
IP address blocks: 150.195.104.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:87:0e:06:1a:4f:54:61:3d:1e:be:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=f158e8bc-d0d9-400e-afc1-0b91a087db9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c1:2d:7e:d8:8d:67:f4:d8:d0:0c:ff:58:d4:
f9:b0:30:d3:ab:40:70:71:6e:da:20:a0:79:b2:db:
f9:54:70:9f:cd:04:d5:36:13:6b:85:d9:d1:dd:bc:
b2:39:df:b1:d4:5d:47:20:a3:2c:52:dd:05:0f:06:
d4:dd:86:9e:a0:2f:e5:bf:a9:63:30:e8:e7:60:e1:
ad:a3:c4:a7:b5:5a:e5:7a:8c:2d:20:c7:b8:e4:7e:
b6:38:0c:d0:fb:c6:c0:d6:2d:4f:24:45:94:dd:b5:
d1:5f:42:62:f4:d8:37:c0:e9:b4:20:6d:61:45:c2:
30:d8:c9:12:36:80:ed:86:e8:ba:50:5c:ce:61:55:
08:59:c0:a7:d0:22:88:bf:03:65:27:fe:e9:b7:7d:
9a:8f:77:4a:33:e1:08:4a:2a:40:7f:24:9f:dd:25:
ae:00:40:d8:a9:50:f1:84:d6:ca:40:95:05:3a:17:
4c:f1:0d:77:4d:25:83:7c:f5:35:4f:d5:a0:19:87:
54:0f:57:97:c1:37:13:a5:ad:83:a1:05:28:2b:6e:
69:63:43:9f:7d:6a:00:31:48:a1:1c:e9:67:c8:d6:
09:ad:57:f7:90:b8:42:05:55:c8:2b:7b:ea:24:c0:
f8:8d:ac:2e:62:3b:d9:de:c4:b3:4f:20:d6:34:86:
c0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:9D:F2:3C:1A:2A:A4:99:D8:B4:5B:65:17:B7:62:B3:64:F1:2D:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3da675b4-9ad3-3e34-adbe-a005f6b3c91f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
150.195.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:16:07:fc:cd:0f:31:4c:e5:c0:a6:e3:05:2e:50:63:fb:04:
79:70:1e:e9:1e:d2:bd:1c:aa:ec:3d:ac:73:fa:07:59:02:1a:
32:08:f7:be:1b:a0:1c:21:5a:c6:47:07:54:f3:d0:5a:8f:ec:
8e:f9:5e:94:f2:79:52:83:b4:3d:b6:ad:d0:da:62:05:5c:5c:
13:a9:1c:86:c3:29:ea:50:fb:20:60:e6:19:3c:f7:17:ec:c7:
0c:37:f0:0b:ef:76:51:61:ed:62:92:0b:d9:6a:86:ae:63:e2:
db:9d:a5:de:16:a9:9b:90:0c:01:fa:50:46:8e:68:19:32:be:
00:7f:ce:ab:94:aa:5e:d9:47:ff:04:39:ad:a9:21:2b:22:1c:
46:c3:1f:f2:50:af:8d:40:fc:67:1a:d6:cb:26:66:80:07:a0:
e5:9f:5f:c0:40:a0:81:a0:1e:7b:58:56:8f:53:fa:cd:3c:df:
e0:e8:96:d1:ce:7e:8a:df:75:24:c7:c5:7f:7b:d0:d8:0a:1d:
3c:b4:3a:94:8e:35:79:51:df:15:0c:ff:ed:65:bc:a7:79:4b:
40:93:1c:42:f4:fc:60:42:af:42:4e:d7:78:24:fd:11:d2:02:
91:82:2a:2c:f7:67:2c:78:a5:5c:5e:bb:e6:fb:d7:12:80:90:
89:34:13:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jhw4GGk9UYT0evgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZjE1OGU4YmMtZDBkOS00MDBlLWFmYzEtMGI5MWEwODdkYjlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMEtftiNZ/TY0Az/WNT5sDDTq0BwcW7aIKB5
stv5VHCfzQTVNhNrhdnR3byyOd+x1F1HIKMsUt0FDwbU3YaeoC/lv6ljMOjnYOGt
o8SntVrleowtIMe45H62OAzQ+8bA1i1PJEWU3bXRX0Ji9Ng3wOm0IG1hRcIw2MkS
NoDthui6UFzOYVUIWcCn0CKIvwNlJ/7pt32aj3dKM+EISipAfySf3SWuAEDYqVDx
hNbKQJUFOhdM8Q13TSWDfPU1T9WgGYdUD1eXwTcTpa2DoQUoK25pY0OffWoAMUih
HOlnyNYJrVf3kLhCBVXIK3vqJMD4jawuYjvZ3sSzTyDWNIbAKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFECd8jwaKqSZ2LRbZRe3YrNk8S13MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2RhNjc1YjQtOWFkMy0z
ZTM0LWFkYmUtYTAwNWY2YjNjOTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlsNoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAcWB/zNDzFM5cCm4wUuUGP7BHlwHuke0r0cquw9rHP6B1kCGjII974b
oBwhWsZHB1Tz0FqP7I75XpTyeVKDtD22rdDaYgVcXBOpHIbDKepQ+yBg5hk89xfs
xww38AvvdlFh7WKSC9lqhq5j4tudpd4WqZuQDAH6UEaOaBkyvgB/zquUql7ZR/8E
Oa2pISsiHEbDH/JQr41A/Gca1ssmZoAHoOWfX8BAoIGgHntYVo9T+s083+DoltHO
forfdSTHxX970NgKHTy0OpSONXlR3xUM/+1lvKd5S0CTHEL0/GBCr0JO13gk/RHS
ApGCKiz3Zyx4pVxeu+b71xKAkIk0E7I=
-----END CERTIFICATE-----
Generated at Sun Sep 27 23:34:47 2026 by rpki-client