
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f53d40b-e3cf-3c18-8ef5-c6754eb53392.roa
File: 3f53d40b-e3cf-3c18-8ef5-c6754eb53392.roa (raw, json)
Hash identifier: P2Xbs5D0ui0QnbbrhanIl56QD/6rwpqU9HntZEpAat0=
Subject key identifier: 14:A6:E1:CE:45:5F:CA:C9:69:56:09:1A:1D:D6:43:0A:0C:E9:F2:12
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584F4989BF120184C40ABAF2AB00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f53d40b-e3cf-3c18-8ef5-c6754eb53392.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 30036
IP address blocks: 173.19.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:89:bf:12:01:84:c4:0a:ba:f2:ab:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=43c213f2-fb85-4d72-8056-b3a9da39e790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b4:25:9d:d3:ff:51:21:ef:df:cd:b9:e5:35:
0d:e7:2c:cf:c8:0f:3a:b7:42:1a:ff:0d:9c:c6:1d:
20:8a:a4:8e:db:e4:ea:60:6a:56:a5:4b:b0:50:da:
8a:35:76:33:00:35:0a:e8:41:9d:d6:f0:18:c5:f7:
d3:b5:7b:44:39:bc:bc:56:75:4c:4b:63:a6:ee:8f:
c0:3d:87:2c:6c:a9:89:1a:92:38:c9:10:ca:c9:a4:
1f:f5:ff:b7:fe:20:0e:e8:af:d0:ca:26:07:b9:1c:
35:f2:a5:50:77:bc:4d:76:4c:4b:93:38:1e:00:84:
60:8e:6b:8b:d4:9f:8b:0f:36:82:b0:95:e2:0e:17:
59:2e:ec:17:e7:2f:79:f0:59:38:6c:11:2c:fe:8d:
19:c8:31:bf:5a:51:de:7e:33:c9:3f:69:54:b3:f1:
3f:78:55:57:3c:da:c3:05:6c:a5:b8:c0:f6:55:06:
da:2b:e0:21:22:e8:3b:76:04:a3:4d:ed:4a:2b:4b:
ff:34:96:49:bb:64:4e:31:69:66:fe:0e:ad:17:35:
c8:d2:bc:56:4f:53:e6:c7:55:08:37:f2:23:97:83:
48:1c:59:27:97:87:6d:8f:ce:b8:47:f0:ff:80:6a:
04:04:2b:4e:fd:f0:e1:cf:bf:8f:08:c5:f0:04:71:
8e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A6:E1:CE:45:5F:CA:C9:69:56:09:1A:1D:D6:43:0A:0C:E9:F2:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f53d40b-e3cf-3c18-8ef5-c6754eb53392.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.19.87.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:0a:b5:18:87:d0:2c:d9:d5:5f:9b:f3:df:aa:01:ad:e7:73:
82:c8:90:36:0b:ed:4e:22:9d:d0:2a:d7:41:5e:9b:6d:99:68:
2f:84:12:1b:ac:33:ce:36:7a:ea:f1:97:bb:c3:dc:5b:c2:d4:
86:9b:1a:6a:ca:ee:f3:0f:81:d3:5b:61:83:e7:f2:c4:a7:ff:
f7:e1:a1:d9:fb:28:de:8a:a0:94:25:e7:a4:2d:14:ba:60:30:
a8:21:97:b2:e4:0e:85:d6:38:ea:e5:f2:c3:ae:be:00:8a:7f:
07:ea:8d:23:c3:ed:70:81:0b:1f:31:fa:30:bb:94:14:95:66:
0f:d4:f3:04:7c:f6:ad:16:63:d8:2d:da:a7:6f:54:8b:f3:a3:
8e:05:3d:70:d4:3f:61:98:bc:b8:e4:ae:78:43:a0:15:94:9b:
7b:48:d2:99:ba:a1:cc:f0:8d:14:97:e5:69:42:a9:c4:a9:fc:
56:dc:9d:26:e2:00:e9:f7:43:2a:25:45:c9:90:78:49:ba:e0:
4d:84:9f:1e:d7:c6:5f:7b:ec:fb:be:40:dc:85:95:f4:8a:9d:
f4:15:21:a2:6f:fa:a8:0d:40:46:79:45:14:ae:21:11:d8:2e:
50:2e:b5:f6:09:a6:09:98:0b:cd:f9:81:cd:f6:ae:05:15:e9:
e7:0c:7d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:12:54 2026 by rpki-client