
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5884b29c-a872-3e34-b240-29d0cd9512f8.roa
File: 5884b29c-a872-3e34-b240-29d0cd9512f8.roa (raw, json)
Hash identifier: wfX9c9sEWsMac1TfO9UsUQ+hPhFEGTeHWr6swe/6ndM=
Subject key identifier: F0:9B:CA:E3:E7:54:71:DF:24:AA:F6:5E:9E:E8:66:2B:80:D6:BD:D5
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584F49886D9CC907CA57D14A1280
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5884b29c-a872-3e34-b240-29d0cd9512f8.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 30036
IP address blocks: 173.20.100.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 06 Oct 2026 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:88:6d:9c:c9:07:ca:57:d1:4a:12:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=4d4e8ee3-2732-42a1-90d1-d14ed9fcb017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a6:10:50:30:31:93:68:ce:13:bf:9c:86:f1:
1d:0e:4b:bd:eb:d6:d1:8e:00:5b:be:6e:14:cf:50:
bc:aa:63:4f:62:8c:24:0c:18:b6:3f:e4:94:d3:84:
5b:50:05:ef:20:ae:ac:52:85:f3:a3:1d:56:49:46:
a7:80:28:11:29:cc:62:95:aa:b5:75:d1:5d:68:fb:
e8:a8:6a:f3:c4:b3:14:2e:ea:94:33:c3:ba:c5:cd:
47:7d:77:a3:3e:be:9c:6e:d1:fa:d8:86:55:0a:68:
1e:46:a0:aa:cd:e3:00:14:42:92:76:0b:a9:dc:9e:
c9:1b:ee:90:b8:47:b4:e3:7e:59:4c:08:51:8e:02:
31:59:7a:98:3a:74:bc:e7:b9:30:00:6f:8b:6a:7f:
96:11:ef:0e:83:a5:24:35:0c:33:7c:a2:c5:2d:f9:
2f:ea:e7:ea:43:26:b4:ce:26:16:1c:07:3f:a2:79:
0e:9d:d5:23:2d:4e:03:0e:28:45:16:5f:1b:21:ab:
78:6f:88:16:21:90:d4:fb:d3:13:b5:2f:6b:bf:b2:
18:a9:86:ac:2d:8d:d1:c9:ab:f9:e7:9e:2e:c7:b9:
a4:70:6a:1d:49:17:ab:31:72:1c:69:fa:45:c6:3a:
13:54:c7:11:d7:d6:56:3f:cc:59:24:57:e9:11:b5:
e1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9B:CA:E3:E7:54:71:DF:24:AA:F6:5E:9E:E8:66:2B:80:D6:BD:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5884b29c-a872-3e34-b240-29d0cd9512f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.20.100.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:2b:9d:7e:53:15:1d:75:a8:f6:bd:80:e4:04:27:1e:66:42:
13:d7:17:02:02:1d:e3:75:66:5f:6b:2b:bb:86:f8:92:60:a0:
56:82:ce:39:b7:13:38:9e:20:c9:eb:67:56:d5:fb:3b:6d:dc:
6c:7d:00:8b:5e:2e:26:ab:f0:07:de:5b:e8:fa:af:8d:72:e7:
aa:8e:c2:7e:4f:48:f5:ce:25:e8:7f:c1:77:1c:2c:29:ec:ee:
03:0a:c5:95:d5:7d:cd:83:63:40:8e:0a:c6:eb:30:c2:3f:f3:
ea:d5:6a:e2:6c:ec:51:4c:f5:ed:1f:3a:19:f0:62:dd:5b:42:
b6:6e:f8:77:3b:59:fe:96:74:31:9e:ee:fe:b1:8e:17:2d:8a:
1f:77:74:46:7d:d2:ef:df:72:6e:4d:d0:49:ef:68:a7:56:51:
2b:da:62:1a:21:b6:a1:bb:35:da:86:db:cc:51:4f:76:99:a3:
ed:d1:84:da:11:ea:8f:dd:3a:cf:f8:c1:74:da:1a:ed:c0:25:
52:7a:2f:3f:2f:87:4f:66:62:21:e5:27:fd:46:99:0c:b4:f1:
3a:53:a4:3c:98:18:c5:ef:52:60:d9:fc:ca:e2:67:fb:35:0f:
54:aa:da:a8:3f:48:1d:b3:69:41:0e:21:1f:41:cd:30:ed:82:
5f:50:c9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:51:15 2026 by rpki-client