
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/63ccb013-c7db-3cad-b94b-e530462c4bb4.roa
File: 63ccb013-c7db-3cad-b94b-e530462c4bb4.roa (raw, json)
Hash identifier: ZAkUPUTC0O6m54LrZ6S6DsGdDw9URTfHRpB/+g3P5Xc=
Subject key identifier: A0:71:EE:1D:86:36:6F:57:1F:1D:4C:32:66:8A:BE:E6:01:7C:48:8C
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584F49739E86DC29531A9E680A50
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/63ccb013-c7db-3cad-b94b-e530462c4bb4.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 30036
IP address blocks: 173.17.160.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:9e:86:dc:29:53:1a:9e:68:0a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=866ec2cb-aea5-422a-a188-e669c1f1fc3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5c:0b:cd:eb:1c:ca:13:16:ed:7f:33:9e:e0:
30:a4:6c:d2:a6:ec:65:3a:7f:5c:ae:35:b7:aa:4b:
9c:b4:fa:d3:44:9c:37:12:f7:bc:ca:fa:a5:b1:bc:
54:b1:c0:47:e5:ad:b7:5c:68:7d:ba:0f:3c:6f:26:
9f:f3:00:5f:d6:11:e2:06:a4:72:a3:bf:dd:68:2b:
dd:5d:d1:41:98:4e:60:fc:07:40:84:4b:14:a1:1d:
c8:36:df:b5:da:12:fd:d7:34:80:cb:3e:02:a5:93:
b8:b5:2d:61:6b:12:6d:87:95:41:f5:ce:6f:22:0b:
71:c9:16:f8:6a:b9:c1:b4:38:c9:7e:32:db:f4:65:
89:35:e4:0f:0b:d5:5b:c4:73:1b:57:48:78:ab:0f:
77:a5:2c:6d:d8:da:f8:ea:55:f8:1f:48:56:b9:97:
c5:23:fc:d2:b2:e0:db:30:60:55:d9:93:49:7c:be:
f5:56:9a:5e:35:8c:7e:71:b7:ee:a5:e6:92:a2:af:
6b:c5:59:19:f0:59:05:1d:10:b8:9e:bf:65:5b:fb:
f0:52:bf:98:a2:16:e7:f6:e4:89:f9:54:c7:1c:99:
0c:cc:e4:f9:bc:06:a0:58:75:21:8a:25:e0:8c:cc:
96:0a:43:c8:44:57:05:c4:b8:ae:56:49:79:d0:07:
a3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:71:EE:1D:86:36:6F:57:1F:1D:4C:32:66:8A:BE:E6:01:7C:48:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/63ccb013-c7db-3cad-b94b-e530462c4bb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.17.160.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:4d:cd:de:1a:b2:ef:10:45:b7:f4:91:0d:8a:bd:c8:73:c1:
6d:d4:c1:d9:27:14:7b:a8:dc:34:e8:ad:dd:fc:d0:6c:51:15:
b0:00:9d:99:c6:0f:65:cb:2d:42:64:52:2f:23:ae:3d:9d:55:
29:5f:6f:e3:c1:c6:af:c5:3f:ec:b3:32:a6:ba:8c:3f:d9:94:
2f:76:c8:75:bf:39:97:7b:dc:4b:3c:21:fc:c6:26:84:9f:73:
d8:c5:02:a1:4e:06:9c:49:58:99:da:65:e0:43:19:0f:fe:77:
a1:02:ce:95:2b:0d:76:5c:15:ca:2f:0b:24:03:f0:20:c1:b8:
2b:cb:d4:a6:e7:b0:46:b8:62:54:aa:1a:48:85:fd:65:13:dc:
8e:a8:7a:2e:c4:8a:c4:fc:d7:86:57:ea:9a:aa:b2:b6:6e:77:
75:9a:a5:cf:1b:cf:33:4a:cf:34:44:af:16:5b:86:27:5f:f7:
04:bd:38:b8:a9:25:56:49:4c:e4:fa:3e:53:79:e2:66:de:80:
7d:b6:88:a8:9e:00:37:52:b3:a7:3d:b2:28:60:6e:26:3c:f3:
8c:c1:7c:28:e0:2a:07:37:ee:7c:d7:40:0d:a4:23:97:11:2f:
34:10:5f:c3:1c:42:db:82:b3:31:94:e5:bc:24:52:08:01:ad:
df:e8:80:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc56G3ClTGp5oClAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ODY2ZWMyY2ItYWVhNS00MjJhLWExODgtZTY2OWMxZjFmYzNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VwLzescyhMW7X8znuAwpGzSpuxlOn9crjW3
qkuctPrTRJw3Eve8yvqlsbxUscBH5a23XGh9ug88byaf8wBf1hHiBqRyo7/daCvd
XdFBmE5g/AdAhEsUoR3INt+12hL91zSAyz4CpZO4tS1haxJth5VB9c5vIgtxyRb4
arnBtDjJfjLb9GWJNeQPC9VbxHMbV0h4qw93pSxt2Nr46lX4H0hWuZfFI/zSsuDb
MGBV2ZNJfL71VppeNYx+cbfupeaSoq9rxVkZ8FkFHRC4nr9lW/vwUr+Yohbn9uSJ
+VTHHJkMzOT5vAagWHUhiiXgjMyWCkPIRFcFxLiuVkl50AejHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKBx7h2GNm9XHx1MMmaKvuYBfEiMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjNjY2IwMTMtYzdkYi0z
Y2FkLWI5NGItZTUzMDQ2MmM0YmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRGgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADdNzd4asu8QRbf0kQ2KvchzwW3UwdknFHuo3DTord380GxRFbAAnZnG
D2XLLUJkUi8jrj2dVSlfb+PBxq/FP+yzMqa6jD/ZlC92yHW/OZd73Es8IfzGJoSf
c9jFAqFOBpxJWJnaZeBDGQ/+d6ECzpUrDXZcFcovCyQD8CDBuCvL1KbnsEa4YlSq
GkiF/WUT3I6oei7EisT814ZX6pqqsrZud3Wapc8bzzNKzzRErxZbhidf9wS9OLip
JVZJTOT6PlN54mbegH22iKieADdSs6c9sihgbiY884zBfCjgKgc37nzXQA2kI5cR
LzQQX8McQtuCszGU5bwkUggBrd/ogKo=
-----END CERTIFICATE-----
Generated at Fri Sep 25 17:49:28 2026 by rpki-client