
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/57e62e99-03d4-33c8-964a-1992c54ce0c4.roa
File: 57e62e99-03d4-33c8-964a-1992c54ce0c4.roa (raw, json)
Hash identifier: kJ2TXewcQaobuNKTyM9msvVqKbivTGQblbXzSpZAxA8=
Subject key identifier: E8:AA:D0:E2:51:94:A6:CC:62:F8:C6:66:E3:D8:4C:D4:6A:C3:73:08
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D24DF893648D19B1A47ED1580
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/57e62e99-03d4-33c8-964a-1992c54ce0c4.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 30036
IP address blocks: 173.16.108.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:89:36:48:d1:9b:1a:47:ed:15:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=8c7d5343-2e62-4c0c-9f73-22fc82335e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e4:6f:4d:e8:10:d6:28:5d:5b:c6:e1:7a:d5:
5f:82:02:c2:7e:21:c5:2f:f9:ca:d0:aa:95:93:b1:
eb:3b:c1:4b:2d:ff:8f:c3:0b:20:69:f7:96:2b:f5:
8e:e3:5b:2f:a8:8d:1b:00:f7:ef:44:dc:fd:45:ba:
e3:29:b2:26:66:3c:ef:75:c2:a5:4d:e7:cf:a6:50:
0a:a0:51:cd:8c:5c:c2:07:d6:d3:1c:c8:c2:41:c9:
4e:d8:98:3f:47:74:d5:b3:82:97:05:b4:ce:ca:11:
46:6e:25:04:14:a8:4c:d7:d1:3b:94:72:2c:86:cb:
8f:53:09:89:81:34:40:45:d6:22:cc:b9:98:cc:39:
fd:b7:96:43:66:9f:61:ce:3f:55:38:04:20:1a:0e:
c1:12:80:1a:7a:c6:f8:72:9f:49:99:df:39:2d:75:
06:82:06:42:34:41:0a:01:0e:80:01:a4:a4:39:dc:
34:08:b0:29:e7:39:a6:08:5d:5e:98:7c:e4:15:cd:
e8:d2:14:3b:9e:00:5b:f3:ec:c8:29:92:52:e4:aa:
cf:d0:bb:c8:c0:34:b0:c1:c4:fd:cb:30:a8:5a:a9:
b4:f9:32:7e:63:63:65:9c:85:6b:2b:a0:21:a9:74:
c4:11:a5:51:5c:81:51:e4:3e:6b:75:81:a8:cd:43:
c2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AA:D0:E2:51:94:A6:CC:62:F8:C6:66:E3:D8:4C:D4:6A:C3:73:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/57e62e99-03d4-33c8-964a-1992c54ce0c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.16.108.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:2a:7e:44:9d:91:7b:7d:3a:d5:f8:09:08:ab:32:be:31:cd:
4a:92:0a:83:cb:43:bf:e1:55:1f:c1:3f:05:2b:9b:22:bd:ae:
0a:95:3c:84:7c:ef:d0:28:ba:26:6a:64:3b:a0:e3:40:81:36:
4b:8c:08:49:31:ab:f0:62:8f:79:06:f2:e6:66:45:77:a1:55:
39:3e:26:98:6f:30:72:ec:34:b1:19:33:5f:03:c5:00:ef:05:
23:7b:eb:4b:34:20:1e:82:7d:fd:79:29:6e:7b:d9:b6:04:c0:
04:4e:31:73:e9:55:42:83:6d:b8:cd:4d:ce:39:21:0b:9b:77:
b4:19:b2:b6:81:73:dd:19:6c:67:0a:ec:ed:93:ed:7c:eb:4d:
76:83:61:91:bb:74:13:49:a5:4c:43:11:49:1b:db:a3:eb:aa:
2e:72:b2:e7:d5:53:ca:fe:5e:e4:88:3e:23:92:b1:1c:4c:19:
a4:f2:aa:6e:30:d4:3f:67:7d:11:f4:b0:be:e8:21:eb:23:ca:
02:ee:90:76:96:54:c9:f6:8c:d2:50:6a:7c:11:9b:d5:18:09:
9d:7a:87:ec:a4:6b:13:ad:2f:e6:a1:53:33:cd:62:1d:c5:a0:
6c:74:16:fa:03:c7:e7:52:52:dd:e4:ab:b9:c0:6d:53:0b:0f:
12:29:7b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:06:52 2026 by rpki-client