
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/593485a7-c008-3e53-82f6-d39ddaa6358a.roa
File: 593485a7-c008-3e53-82f6-d39ddaa6358a.roa (raw, json)
Hash identifier: SyzPbLynl5h3e0LNb8MXoN5uwQjcRwRWOwdSM2divhs=
Subject key identifier: 8E:CD:13:6F:B1:5D:BC:3F:70:0A:3F:B8:89:88:61:92:E4:32:EC:6B
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584F4C3D7071EA2E3C2ABFB9B610
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/593485a7-c008-3e53-82f6-d39ddaa6358a.roa
Signing time: Sat 26 Sep 2026 01:00:13 +0000
ROA not before: Sat 26 Sep 2026 01:00:13 +0000
ROA not after: Fri 25 Dec 2026 02:00:13 +0000
asID: 30036
IP address blocks: 173.18.88.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4c:3d:70:71:ea:2e:3c:2a:bf:b9:b6:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Sep 26 01:00:13 2026 GMT
Not After : Dec 25 02:00:13 2026 GMT
Subject: CN=d802bed0-fcfc-4273-b48a-9192579df58f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1a:b5:54:cb:7f:6f:3d:2f:9c:52:d2:90:58:
9a:09:8e:62:d7:98:7f:b6:44:d4:fe:0e:a8:4f:bb:
38:f5:3d:e3:94:72:84:a1:bf:f5:8a:12:19:34:c1:
ce:9c:fb:1e:7a:6c:ae:30:59:d9:f5:bf:d8:0d:5f:
d0:cc:8a:f4:a0:b4:f6:82:26:ee:9c:7c:5f:ab:57:
41:21:31:ba:b9:7c:96:2f:a1:73:05:ad:b5:fb:21:
32:67:c5:b2:20:aa:0a:7c:da:e3:c7:e4:39:1a:b1:
18:9b:92:00:cb:14:eb:83:ea:cb:2a:2a:3b:da:6b:
38:33:ab:72:de:c7:cd:2f:41:88:31:0b:a8:01:01:
99:3f:67:fc:59:8d:ae:1e:c7:cf:02:89:1d:86:d9:
8e:ff:0f:c6:95:fc:24:44:98:8e:46:41:f7:3b:96:
ac:cb:46:ad:48:cc:87:08:e8:e2:7f:b5:44:4b:0c:
fd:ad:a9:9d:1c:51:b8:da:f3:cf:1a:83:ee:ad:de:
50:bc:9a:61:ab:56:63:e3:68:c0:70:10:4a:df:10:
8e:65:51:7a:2d:ab:fc:3c:47:66:6b:ca:1f:73:98:
7f:9b:e9:6d:94:f5:b4:94:5f:e5:96:e0:c5:b5:e4:
8f:db:1c:37:ea:3a:ca:d3:58:aa:3d:d9:fd:ae:e6:
ae:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CD:13:6F:B1:5D:BC:3F:70:0A:3F:B8:89:88:61:92:E4:32:EC:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/593485a7-c008-3e53-82f6-d39ddaa6358a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.18.88.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:44:60:c0:4c:5c:ff:cc:4f:e4:ea:0c:95:e1:a3:51:86:57:
14:90:16:93:c9:fe:1e:bc:21:c0:1d:cf:54:7c:62:14:65:07:
91:0a:d3:42:1a:2f:d2:52:1b:61:24:03:2c:f0:fe:11:dc:b7:
8e:83:8d:ef:61:54:cd:9d:f4:78:90:c0:b4:85:d6:30:ff:1b:
c9:d2:92:a6:71:94:45:b3:e2:9b:09:fa:61:44:dc:71:a7:75:
bf:f4:c2:f7:70:be:2c:f2:18:ba:4e:68:39:56:9f:12:e1:97:
99:0c:6c:e2:a6:11:bc:3f:a7:8a:09:42:dd:92:9d:1c:85:5a:
55:0b:b7:9b:87:07:c1:e3:1f:fe:0b:f4:69:d2:83:70:74:13:
ba:be:50:b0:70:e7:83:53:32:40:62:f1:4d:17:42:b7:eb:1f:
31:8f:9c:bb:9b:e8:54:dd:f5:9f:ee:b5:5b:fd:59:ce:81:d1:
16:09:f8:63:4a:09:ed:78:20:b6:08:21:54:2a:fb:23:87:bd:
91:a1:89:a6:65:30:4c:d2:26:dd:be:68:df:cc:71:d0:a4:13:
7c:3a:5f:05:5d:29:f9:0f:b2:52:50:be:ed:c1:2f:21:3d:18:
8d:0c:f2:87:1e:6c:8f:e6:12:06:e1:18:b4:21:68:5e:df:0b:
1e:bf:10:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPXBx6i48Kr+5thAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk
ZDgwMmJlZDAtZmNmYy00MjczLWI0OGEtOTE5MjU3OWRmNThmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxq1VMt/bz0vnFLSkFiaCY5i15h/tkTU/g6o
T7s49T3jlHKEob/1ihIZNMHOnPseemyuMFnZ9b/YDV/QzIr0oLT2gibunHxfq1dB
ITG6uXyWL6FzBa21+yEyZ8WyIKoKfNrjx+Q5GrEYm5IAyxTrg+rLKio72ms4M6ty
3sfNL0GIMQuoAQGZP2f8WY2uHsfPAokdhtmO/w/GlfwkRJiORkH3O5asy0atSMyH
COjif7VESwz9ramdHFG42vPPGoPurd5QvJphq1Zj42jAcBBK3xCOZVF6Lav8PEdm
a8ofc5h/m+ltlPW0lF/lluDFteSP2xw36jrK01iqPdn9ruauXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI7NE2+xXbw/cAo/uImIYZLkMuxrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTkzNDg1YTctYzAwOC0z
ZTUzLTgyZjYtZDM5ZGRhYTYzNThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRJYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABNEYMBMXP/MT+TqDJXho1GGVxSQFpPJ/h68IcAdz1R8YhRlB5EK00Ia
L9JSG2EkAyzw/hHct46Dje9hVM2d9HiQwLSF1jD/G8nSkqZxlEWz4psJ+mFE3HGn
db/0wvdwvizyGLpOaDlWnxLhl5kMbOKmEbw/p4oJQt2SnRyFWlULt5uHB8HjH/4L
9GnSg3B0E7q+ULBw54NTMkBi8U0XQrfrHzGPnLub6FTd9Z/utVv9Wc6B0RYJ+GNK
Ce14ILYIIVQq+yOHvZGhiaZlMEzSJt2+aN/McdCkE3w6XwVdKfkPslJQvu3BLyE9
GI0M8ocebI/mEgbhGLQhaF7fCx6/EK4=
-----END CERTIFICATE-----
Generated at Sat Sep 26 05:21:54 2026 by rpki-client