
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/914f8dbe-e269-3ac0-b668-2d83ca9b138b.roa
File: 914f8dbe-e269-3ac0-b668-2d83ca9b138b.roa (raw, json)
Hash identifier: gB36vX1EJ9UFv28ZjPbc+ragZTs6Eghvzr4dBVc1Sqo=
Subject key identifier: 77:32:49:12:8B:BA:9E:5D:21:F4:4E:96:D5:0F:8F:48:25:2A:43:CD
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584E6F3EBA70D5AD4539C041D080
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/914f8dbe-e269-3ac0-b668-2d83ca9b138b.roa
Signing time: Wed 08 Jul 2026 21:00:12 +0000
ROA not before: Wed 08 Jul 2026 21:00:12 +0000
ROA not after: Tue 06 Oct 2026 21:00:12 +0000
asID: 19905
IP address blocks: 173.28.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:6f:3e:ba:70:d5:ad:45:39:c0:41:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jul 8 21:00:12 2026 GMT
Not After : Oct 6 21:00:12 2026 GMT
Subject: CN=b6af1ff4-6802-454d-aa21-53eb2b6d4ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e6:45:6b:3e:91:0b:a8:e4:e2:34:a7:5b:c0:
2a:07:ca:8f:42:9e:cd:d8:05:32:1c:03:46:34:5d:
3b:8c:52:6f:67:5f:e3:d3:0a:f1:f1:7d:f4:5f:56:
90:f3:c4:13:84:4d:3d:12:27:e2:4f:5e:2e:60:fa:
59:3b:7a:09:47:28:9e:5b:84:4a:6c:62:c7:57:42:
11:7d:d7:4b:99:f4:2a:ec:8a:a7:be:89:1b:fd:ec:
99:cb:4e:7f:e5:89:eb:c5:57:30:ce:65:7a:5f:f8:
1d:a4:4f:cb:84:e1:46:e2:c2:76:02:b8:8a:dc:de:
7e:8b:74:47:1b:88:51:bf:b1:d0:b0:24:7c:95:b0:
89:7c:88:e4:3e:ca:40:c5:59:56:2b:5c:9a:83:94:
0b:17:c3:27:5c:f8:a0:85:6f:9d:76:32:80:fd:fe:
83:58:39:37:3b:88:1e:4b:72:51:d7:26:31:ae:49:
e0:f9:21:5c:a0:32:60:46:dd:72:25:c6:0c:e6:b4:
62:8c:11:b9:02:08:44:87:98:4a:53:88:17:da:c9:
24:c1:00:ae:54:5c:7b:86:4d:ff:ee:96:f0:6f:47:
08:2d:78:66:f1:ab:6a:d0:6d:15:86:fa:61:1c:e7:
f2:24:94:bc:69:4f:81:9e:1f:1c:ca:18:71:b8:82:
fb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:32:49:12:8B:BA:9E:5D:21:F4:4E:96:D5:0F:8F:48:25:2A:43:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/914f8dbe-e269-3ac0-b668-2d83ca9b138b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.28.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:1f:76:d3:53:93:9b:ff:2f:57:5a:70:c2:7a:be:73:c1:34:
82:93:6c:0a:e1:65:f2:71:28:4f:b7:a5:21:91:c8:6b:43:ba:
e8:bd:72:75:92:32:63:e8:46:48:22:4d:d1:9d:48:c5:3c:13:
b2:2a:6f:9e:27:60:8b:fa:3b:3d:61:ec:66:10:33:0a:17:db:
b7:a6:fb:d3:1a:91:94:d7:6d:11:ad:ab:db:6f:87:ac:b9:d6:
dd:40:58:6f:2d:cc:a6:8c:1c:e0:54:49:56:d0:3d:17:f5:a8:
54:06:8f:49:3b:02:44:f6:43:22:0b:f6:c3:31:cb:49:6c:01:
48:4e:ee:50:dc:b7:9f:c2:69:7e:31:0f:96:41:d6:6e:18:87:
1b:fa:74:be:44:0b:c2:d2:68:bb:bc:90:c4:b2:b1:0b:f7:5d:
96:36:26:65:b6:98:f8:15:30:bf:38:11:66:0e:f0:35:6f:d7:
49:ca:97:82:e6:d8:53:f5:19:69:02:6a:6f:d3:90:c1:9e:34:
04:74:ff:7f:06:b4:8a:5c:91:c2:8a:07:09:b5:d3:d2:e9:e7:
42:c2:11:b0:22:6e:76:aa:5d:cd:99:93:2e:cd:44:84:21:fc:
61:70:32:f8:30:c5:a3:41:07:d8:67:55:49:46:e4:c5:95:2a:
f5:74:8f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:33:22 2026 by rpki-client