
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4c12ceb0-0dfa-3dfc-9380-1c91f44e47be.roa
File: 4c12ceb0-0dfa-3dfc-9380-1c91f44e47be.roa (raw, json)
Hash identifier: zSuY7XBGm+p17a4uFkImN0G/3xC7SHCD11vn/6IW0fg=
Subject key identifier: DD:65:38:92:DF:40:A1:79:A7:9B:7F:DB:D9:80:D4:08:C6:39:60:80
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D27AAC036BCC19DD853D52500
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4c12ceb0-0dfa-3dfc-9380-1c91f44e47be.roa
Signing time: Fri 13 Mar 2026 13:00:40 +0000
ROA not before: Fri 13 Mar 2026 13:00:40 +0000
ROA not after: Thu 11 Jun 2026 13:00:40 +0000
asID: 30036
IP address blocks: 173.23.16.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:27:aa:c0:36:bc:c1:9d:d8:53:d5:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 13 13:00:40 2026 GMT
Not After : Jun 11 13:00:40 2026 GMT
Subject: CN=22ee2d23-185b-40cd-a1fa-9c1cb594b300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d2:1b:83:4c:e9:9a:29:2c:dc:59:b4:37:82:
fb:72:df:52:fa:c5:45:6e:fe:2c:08:c6:bb:0e:7c:
3d:2a:76:b8:c5:44:9c:83:99:01:cf:fb:f5:b7:24:
21:d1:3b:b0:5a:c2:78:09:57:5e:0c:d6:e8:6e:6b:
ae:5c:3c:db:68:cf:b1:d4:2c:da:19:1c:07:30:15:
7a:c0:17:a2:33:8d:af:7a:0b:ec:b8:4a:57:a3:84:
d5:3b:ce:7a:fa:6c:77:52:01:e1:9c:75:0f:c8:d8:
03:f2:9a:d0:ff:c9:c6:6c:8e:65:86:c6:08:16:d4:
24:0c:87:3a:a0:9a:37:4e:d3:1a:0f:68:2e:ff:58:
87:55:08:9e:62:fd:82:a8:f9:22:1b:56:92:3f:fe:
0f:d5:78:c5:33:ec:c0:24:56:76:92:8e:11:43:29:
9e:4e:eb:46:00:10:1e:c7:8b:3f:6d:be:37:45:b5:
49:c1:9b:8c:81:65:0d:24:8e:ab:28:dc:90:1a:3f:
4e:c4:37:e8:8b:c4:bf:e3:93:b5:82:46:81:02:83:
5e:63:12:b1:c3:22:2b:98:df:b9:4c:c7:d3:20:d8:
e0:c8:e9:75:e3:67:c3:4f:04:09:e3:1c:fe:7f:0e:
c2:0f:84:d7:df:f0:5d:84:ed:1e:c8:7a:4d:5c:e2:
02:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:65:38:92:DF:40:A1:79:A7:9B:7F:DB:D9:80:D4:08:C6:39:60:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4c12ceb0-0dfa-3dfc-9380-1c91f44e47be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.23.16.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:a1:fe:a5:f7:1d:07:6b:ff:fc:db:d6:ce:c5:c7:7e:c5:8f:
a7:4a:69:fb:e2:96:ad:9d:f0:91:7b:b2:c0:ac:32:db:b1:43:
6f:bb:17:7b:88:c5:6b:db:c6:64:89:ef:f7:e6:13:fe:08:4d:
1e:b4:54:b2:a2:df:81:86:22:ea:09:38:33:a2:a4:50:10:90:
99:09:54:3f:21:b3:ad:b2:4d:8f:23:86:a5:05:51:d9:e9:9d:
ed:f2:42:63:1c:cf:fa:c8:3e:37:0a:52:c5:c7:69:08:a0:62:
18:2f:bd:16:ce:6c:63:f7:14:07:51:fa:ee:aa:a7:9b:bf:30:
7c:af:b0:48:2d:8b:ed:92:05:72:8f:98:6b:6e:d9:e5:88:ab:
29:ea:5f:ee:41:7c:8a:4f:55:ef:ce:d0:31:b8:40:ce:1c:7e:
85:50:73:9e:fe:cf:8d:80:fb:a2:b4:c0:f3:53:f6:c8:89:3c:
8e:38:08:5a:02:ad:b7:86:10:b0:bb:c7:e1:f6:40:a7:70:e7:
d3:1e:3d:3e:f3:e2:67:53:90:4f:b5:c6:9b:71:77:97:0e:90:
d4:66:da:48:db:50:ec:27:a3:39:34:04:9f:1d:58:e1:f7:8b:
cc:c3:9b:ed:8f:0c:6b:9c:89:72:ef:55:8b:c8:21:30:50:9d:
dd:07:6c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:37:01 2026 by rpki-client