
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5250e20c-b1c3-3435-b26a-323af8aed982.roa
File: 5250e20c-b1c3-3435-b26a-323af8aed982.roa (raw, json)
Hash identifier: H4q9akdlUQHX2Zm53KmkL0VcXAxNqsacSvK5N5xUib4=
Subject key identifier: D3:ED:D1:79:CA:5C:CC:69:9D:0A:6B:D0:B3:D5:C1:90:63:0F:F5:8F
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584E90BA5B326DB36FE9CB01B0C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5250e20c-b1c3-3435-b26a-323af8aed982.roa
Signing time: Mon 20 Jul 2026 21:00:11 +0000
ROA not before: Mon 20 Jul 2026 21:00:11 +0000
ROA not after: Sun 18 Oct 2026 21:00:11 +0000
asID: 19905
IP address blocks: 173.23.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:90:ba:5b:32:6d:b3:6f:e9:cb:01:b0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jul 20 21:00:11 2026 GMT
Not After : Oct 18 21:00:11 2026 GMT
Subject: CN=0960dfcf-845d-4cc6-af13-af42ef158b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c4:a3:89:0f:51:6b:c6:04:44:5a:44:0f:80:
bc:3d:d9:46:4b:cc:d1:2c:ee:55:e6:52:78:55:f3:
81:b1:0c:56:99:b2:78:0e:9d:f2:a0:4f:a0:58:c9:
8c:e7:ad:f0:75:e1:a4:fd:79:e3:12:f1:6b:45:67:
3a:6e:04:84:42:e6:4f:ab:91:c8:ba:40:3d:f3:fb:
d0:10:6f:00:f5:98:f7:36:e7:eb:15:60:33:f3:aa:
26:1d:59:33:d9:5d:b9:b3:48:a6:a3:e2:bf:f3:cf:
f3:dd:4f:0f:ac:e5:5f:11:37:8c:96:ca:ff:62:d8:
83:48:4a:d6:14:5b:5f:a7:7d:7c:a3:ef:33:71:e6:
ef:1f:38:8d:8b:a4:a0:ce:c7:14:4b:39:75:b8:42:
ed:b0:61:17:90:0d:c5:f7:7e:70:40:ce:22:47:a2:
91:b7:a1:cb:d2:f9:8e:b1:ba:d3:72:a2:46:25:61:
9d:22:bf:47:5e:72:86:f7:80:83:6c:06:b2:9d:f4:
c7:48:21:c3:34:17:b4:93:a5:b8:df:9d:ca:92:26:
c0:be:57:75:9b:8c:a9:ff:65:7c:c9:2c:c3:26:b1:
3c:f6:b7:01:27:04:b0:db:70:38:8e:4e:bc:46:94:
a9:e0:5c:2f:c4:8a:3a:3c:17:14:7a:44:9b:a7:d2:
d4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:ED:D1:79:CA:5C:CC:69:9D:0A:6B:D0:B3:D5:C1:90:63:0F:F5:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5250e20c-b1c3-3435-b26a-323af8aed982.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.23.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:0e:0c:03:54:71:ea:db:da:e9:f5:f0:b0:69:30:66:0c:9c:
32:69:02:c8:d0:c3:64:ec:23:c3:b1:76:ad:77:3e:43:23:9e:
1a:8b:87:d0:1d:56:ec:21:ba:92:93:98:6a:42:39:4f:51:78:
a5:9b:c7:63:8e:3f:38:ad:96:fa:3e:9f:21:93:a8:13:37:2f:
7c:64:ca:1d:97:4b:0e:1b:30:f1:a8:e7:8e:03:7a:31:a1:9e:
2f:30:86:22:95:63:e8:83:5f:0f:36:07:6c:7b:9f:ac:0e:a1:
fd:1e:98:ab:fa:0e:d2:a2:d4:85:fe:4a:66:b7:be:e6:fe:1d:
29:49:57:37:3d:8e:50:62:10:87:47:6e:67:8b:ce:6a:1f:64:
c5:c9:e9:ac:e5:94:80:16:a3:a1:af:98:8b:69:12:bd:26:99:
0b:4d:b7:38:d3:0e:0d:ba:12:9f:37:b4:28:b5:92:ae:e5:19:
ce:f2:be:3d:80:1d:aa:b6:47:ed:ee:ac:90:64:5f:fe:ee:38:
28:6c:cb:7a:e4:e0:51:c6:d7:e8:d5:1d:af:ff:15:28:94:56:
c7:f7:6a:52:d7:f1:b6:ad:07:b0:97:4c:32:f4:4c:9b:e7:1d:
49:73:49:fa:89:5f:21:06:d5:75:dd:c7:0c:1e:f7:2b:75:b0:
2c:9b:aa:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6QulsybbNv6csBsMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDcyMDIxMDAxMVoXDTI2MTAxODIxMDAxMVowLzEtMCsGA1UEAxMk
MDk2MGRmY2YtODQ1ZC00Y2M2LWFmMTMtYWY0MmVmMTU4YjhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsSjiQ9Ra8YERFpED4C8PdlGS8zRLO5V5lJ4
VfOBsQxWmbJ4Dp3yoE+gWMmM563wdeGk/XnjEvFrRWc6bgSEQuZPq5HIukA98/vQ
EG8A9Zj3NufrFWAz86omHVkz2V25s0imo+K/88/z3U8PrOVfETeMlsr/YtiDSErW
FFtfp318o+8zcebvHziNi6SgzscUSzl1uELtsGEXkA3F935wQM4iR6KRt6HL0vmO
sbrTcqJGJWGdIr9HXnKG94CDbAaynfTHSCHDNBe0k6W4353KkibAvld1m4yp/2V8
ySzDJrE89rcBJwSw23A4jk68RpSp4FwvxIo6PBcUekSbp9LUqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNPt0XnKXMxpnQpr0LPVwZBjD/WPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTI1MGUyMGMtYjFjMy0z
NDM1LWIyNmEtMzIzYWY4YWVkOTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRdHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAUODANUcerb2un18LBpMGYMnDJpAsjQw2TsI8Oxdq13PkMjnhqLh9Ad
VuwhupKTmGpCOU9ReKWbx2OOPzitlvo+nyGTqBM3L3xkyh2XSw4bMPGo544DejGh
ni8whiKVY+iDXw82B2x7n6wOof0emKv6DtKi1IX+Sma3vub+HSlJVzc9jlBiEIdH
bmeLzmofZMXJ6azllIAWo6GvmItpEr0mmQtNtzjTDg26Ep83tCi1kq7lGc7yvj2A
Haq2R+3urJBkX/7uOChsy3rk4FHG1+jVHa//FSiUVsf3alLX8batB7CXTDL0TJvn
HUlzSfqJXyEG1XXdxwwe9yt1sCybqpQ=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:13:35 2026 by rpki-client