
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4479c5de-3c66-3b32-beaf-d2a0ce0bce06.roa
File: 4479c5de-3c66-3b32-beaf-d2a0ce0bce06.roa (raw, json)
Hash identifier: zLN/OGEqwGXKOpwRmrCsIKWJGuCyo8MADvMq4Es+fUc=
Subject key identifier: A8:1F:10:CB:1A:40:59:DC:CF:05:DD:5B:7F:BF:7D:87:66:A4:63:C0
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584F497308B533DB71B6F83A17D0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4479c5de-3c66-3b32-beaf-d2a0ce0bce06.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 30036
IP address blocks: 173.25.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:08:b5:33:db:71:b6:f8:3a:17:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=3c45579a-ffef-446f-a8ae-9abf506bd605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:37:f7:d5:a2:3e:ef:22:47:d1:df:35:b7:4f:
55:99:dc:36:43:0e:6b:9b:49:9c:48:8a:45:9a:64:
d9:df:9b:91:d4:d8:8f:0d:6c:98:48:9c:6a:d2:68:
35:e3:b8:44:15:af:2f:02:58:4d:d4:1f:40:29:9a:
60:cc:9b:a7:1a:b5:01:cc:88:7a:55:ff:f5:b0:3f:
9f:67:db:49:63:65:2f:3e:c4:59:ca:e9:d3:02:fa:
db:c1:8d:a1:9a:ea:da:ba:c0:d5:a6:a7:2a:48:af:
93:05:85:7a:4a:86:6a:61:1a:ea:f8:3d:ae:b8:8e:
fb:97:75:74:6a:48:64:78:ee:b1:27:a6:e4:0d:f9:
b0:4c:16:a1:4c:b2:1e:22:da:8d:d1:e7:57:fb:ab:
be:2d:e4:68:cb:1f:ee:8a:7f:49:17:0e:95:63:ba:
80:51:a2:8c:bd:c6:1e:6f:7f:f1:f4:f1:72:82:f2:
f8:5b:10:c4:d3:18:d7:1b:c4:31:c1:5e:1f:5a:2e:
40:96:2d:bf:f4:ea:c9:de:a8:f4:b1:04:8b:05:30:
4d:55:3f:41:05:d8:df:c7:8f:f9:b8:72:e1:57:54:
45:9f:70:10:ba:47:a9:65:3b:f1:1f:c8:fd:88:93:
53:78:6e:80:75:95:ae:a7:25:b6:2a:a5:dc:83:91:
77:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:1F:10:CB:1A:40:59:DC:CF:05:DD:5B:7F:BF:7D:87:66:A4:63:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4479c5de-3c66-3b32-beaf-d2a0ce0bce06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.25.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:ec:60:69:cd:54:05:46:8d:50:eb:67:13:a4:1c:63:8e:09:
f2:b3:0b:0d:de:d2:cf:20:5b:cb:3d:04:55:42:f7:07:01:24:
40:2a:6d:ef:28:b4:6f:d6:ca:a8:06:8f:f1:63:99:25:a5:02:
63:ef:5d:2c:d1:49:7c:6f:e2:3d:2f:a8:41:c6:7a:58:65:3e:
7a:65:83:7f:3c:03:28:ba:97:ac:e7:28:cf:7a:0e:53:5f:99:
83:b2:98:81:05:4d:52:18:c9:bf:9c:36:fe:b5:8c:10:91:a4:
21:c7:54:4e:92:a7:7b:86:35:f6:38:84:0f:c8:11:67:df:dd:
3e:3b:9e:01:f8:fd:66:09:12:04:87:24:61:b1:7f:b7:9f:2a:
6e:78:54:6b:f9:5e:33:f5:58:4a:e6:fb:6d:06:9a:b5:47:e7:
c8:6c:26:0f:97:cd:c5:55:25:87:ae:16:a1:3c:da:17:96:85:
06:80:6b:27:05:0d:5a:9c:a6:1f:b1:97:01:3e:d1:c5:10:1e:
bd:c9:d3:c0:9f:93:50:ee:83:da:19:11:68:1c:df:60:71:a2:
7c:71:62:8b:e9:88:e1:d0:c2:cd:2e:3f:9c:fc:11:3a:38:3d:
8b:1d:73:e5:8b:bc:b5:c7:54:03:4a:74:d2:2c:5d:81:3e:54:
cd:6e:62:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:33:55 2026 by rpki-client