
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3df9ccdc-67c8-3624-92fe-71a135423673.roa
File: 3df9ccdc-67c8-3624-92fe-71a135423673.roa (raw, json)
Hash identifier: 78IB5iB92wyiCfJMvxvlirxGFCHr2cVTY0KTEcXvxNI=
Subject key identifier: 23:F9:17:7A:F0:3A:2B:B9:5D:AA:5A:6A:CD:50:A8:7B:5A:F7:E5:5C
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584F4974306EB9A1A4673261D800
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3df9ccdc-67c8-3624-92fe-71a135423673.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 30036
IP address blocks: 173.22.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:74:30:6e:b9:a1:a4:67:32:61:d8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=91bf2f6f-7882-4af8-ab9d-ecbc614ee52e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d0:1f:75:96:6e:f9:b3:a7:f8:58:6e:09:da:
f4:00:16:99:e6:82:68:2b:79:cf:27:81:ec:ef:da:
fe:81:0f:c4:20:b6:1a:78:54:2d:f5:a2:8b:de:c9:
17:bd:e8:44:e0:39:17:f6:e1:d4:4a:6e:df:58:18:
14:ff:0f:30:2c:2a:e9:53:04:17:d4:e4:44:cb:59:
40:1a:8b:04:61:68:63:85:59:7c:53:60:75:9e:1d:
97:68:f9:75:0c:dc:b7:cc:21:0e:62:34:c6:29:a9:
49:5c:21:4f:20:20:62:06:f3:7a:59:14:33:31:c1:
51:f7:71:26:cb:40:eb:fa:ac:b7:0a:fa:60:dc:33:
8a:be:bd:a0:84:ce:50:68:9c:72:8f:d0:25:70:ea:
a1:c3:e9:6b:8a:ef:cd:b8:a6:02:57:85:fb:6e:79:
46:d8:8d:7b:af:a1:50:dd:10:f8:63:20:b4:52:3f:
65:62:ff:50:7e:33:b7:6f:59:b5:a5:cb:f0:78:11:
86:19:c6:f6:16:8b:d9:ab:d1:53:ce:88:3d:d9:02:
d4:eb:ee:59:65:72:1f:d2:65:4f:b2:07:69:b3:ef:
51:7a:ef:1a:fe:9c:c0:3b:d3:0d:29:cb:98:4f:60:
b3:9f:c3:d8:a1:7f:95:70:ce:b8:af:75:e2:da:38:
42:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F9:17:7A:F0:3A:2B:B9:5D:AA:5A:6A:CD:50:A8:7B:5A:F7:E5:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3df9ccdc-67c8-3624-92fe-71a135423673.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.22.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:79:a6:43:4f:48:e0:da:1f:8c:09:2d:e5:45:79:d3:ac:a0:
05:8d:54:83:16:14:11:a0:f0:1c:30:0a:e2:d6:1d:4d:e6:0d:
8e:b7:ca:05:95:65:3d:00:a7:6d:a3:f3:70:d0:cc:ee:94:ff:
e5:3b:7a:3d:4c:3b:56:69:c2:5d:09:34:98:4c:77:da:4c:87:
52:05:10:2c:f9:0d:e9:c1:e0:3d:54:29:dc:92:7c:d8:98:e1:
57:39:87:b6:f2:3b:45:8f:51:26:81:dc:7c:d1:71:8c:a9:31:
38:8d:55:8e:2c:cb:e5:ad:af:8c:f5:67:64:aa:ee:a3:f8:15:
2e:61:af:f9:ac:f8:c1:15:4b:97:44:c0:d5:1b:66:5d:6c:da:
2e:bc:66:c8:dd:bc:09:e4:8f:cb:8c:33:d5:c7:75:8c:47:af:
33:8a:29:1a:da:0c:a8:84:dd:f4:4a:31:34:70:25:df:65:ea:
99:be:16:28:43:23:50:26:75:65:ec:f7:2e:44:06:6d:f6:88:
28:be:2e:92:fe:eb:e3:68:74:01:cc:97:10:04:20:ae:36:bb:
20:7a:23:d7:a5:8a:5e:fe:1e:a3:cf:bd:dd:83:15:40:4c:99:
b1:7f:09:fb:46:ef:88:d6:da:58:74:78:2e:9d:d6:34:9d:d1:
11:63:01:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:28:18 2026 by rpki-client