
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9cb6c8f8-695c-36ca-9b5d-188d6ee8a112.roa
File: 9cb6c8f8-695c-36ca-9b5d-188d6ee8a112.roa (raw, json)
Hash identifier: bkRZIB9p671roNHMSFjR9Q0XBEhTSKhNyR87Umy+wx4=
Subject key identifier: 6B:49:CB:5B:64:E0:51:3F:E9:85:6D:3C:C9:E0:24:1E:F8:51:E6:68
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584F49734A3F3D09BC057017D4C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9cb6c8f8-695c-36ca-9b5d-188d6ee8a112.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 30036
IP address blocks: 173.19.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:4a:3f:3d:09:bc:05:70:17:d4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=f9b74328-ac02-47f1-975e-4971f202cd4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6b:a9:63:d9:2a:ba:a3:4c:92:ea:a3:43:f0:
c3:e8:1b:6c:f0:15:2a:9b:d4:af:9a:35:7b:e1:5b:
76:37:1d:7c:e6:1e:d5:e9:c5:b2:2c:89:72:9d:c0:
a7:0a:49:31:13:41:0c:aa:91:4c:62:f2:03:d8:0c:
9c:43:6d:32:cb:43:ee:a7:29:5e:7c:f3:d2:22:84:
42:c2:48:16:4e:93:50:ba:4c:86:84:ae:22:84:b2:
45:af:e5:9e:b2:1f:89:9f:d1:d4:8f:0b:38:22:19:
d0:49:35:2d:af:71:d0:b0:b0:0d:73:83:dc:6e:d9:
6c:85:0d:2a:71:36:7b:18:7b:8e:41:8b:30:a8:82:
8e:8f:63:71:23:8e:7a:24:84:75:8b:a6:18:63:77:
c4:c5:91:08:8a:30:4e:ff:fa:d1:1a:73:7b:a9:22:
77:cb:40:e8:f0:16:4e:5e:3d:51:4c:13:6b:b1:cb:
6a:c2:d2:e5:a3:94:aa:07:16:d9:4e:eb:4a:73:30:
83:f7:86:6b:f3:78:a3:51:87:b0:47:c8:66:43:98:
77:77:01:de:c4:03:4e:39:87:cb:ec:b5:b1:cb:02:
25:84:2b:e0:9f:a5:d9:e0:19:be:14:3e:32:97:aa:
20:62:8e:22:51:b8:f3:47:cc:a2:2d:a3:fd:a1:7f:
48:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:49:CB:5B:64:E0:51:3F:E9:85:6D:3C:C9:E0:24:1E:F8:51:E6:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9cb6c8f8-695c-36ca-9b5d-188d6ee8a112.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.19.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:cd:c8:5c:cc:08:ef:54:1e:29:ce:44:31:f3:49:40:f7:19:
43:89:81:de:96:be:6a:8b:9e:69:02:0b:7e:35:07:b6:53:2f:
d7:aa:47:e8:1b:a8:23:09:1f:b2:4f:fb:2f:2b:c9:c9:7e:8c:
f7:d6:90:ed:be:a7:d5:63:26:5f:6b:c0:48:f2:96:2b:db:c5:
70:3c:75:0f:4a:7b:73:22:e3:37:d4:85:84:a8:14:24:b6:5f:
99:fe:e2:2f:35:93:01:95:d4:3c:04:21:d0:a9:be:71:45:09:
08:cd:2f:87:00:17:c4:d7:40:e0:a5:f0:a9:f5:f1:f9:0e:1e:
c2:bc:4a:d5:3b:8c:a7:03:83:c8:b3:25:cb:82:ed:26:7a:3a:
fd:7a:4e:c9:2e:de:d7:d8:db:01:4f:39:54:d6:52:a2:08:aa:
d7:fa:5f:7a:29:e5:5f:46:d7:21:bc:30:c6:13:33:b7:95:38:
b4:72:1d:6b:db:3c:5f:e4:bd:33:d1:ca:0d:9c:cf:fc:8a:cf:
01:76:fa:a2:3a:0b:f5:eb:bc:a7:38:c4:8d:ef:01:25:eb:4c:
b3:bc:e9:f0:07:c5:28:07:08:25:19:49:29:41:f7:46:c9:74:
9e:20:79:b9:e6:a0:f2:8b:f1:3a:c9:49:fc:8c:47:66:33:db:
a5:75:75:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc0o/PQm8BXAX1MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZjliNzQzMjgtYWMwMi00N2YxLTk3NWUtNDk3MWYyMDJjZDRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2upY9kquqNMkuqjQ/DD6Bts8BUqm9SvmjV7
4Vt2Nx185h7V6cWyLIlyncCnCkkxE0EMqpFMYvID2AycQ20yy0PupylefPPSIoRC
wkgWTpNQukyGhK4ihLJFr+Wesh+Jn9HUjws4IhnQSTUtr3HQsLANc4PcbtlshQ0q
cTZ7GHuOQYswqIKOj2NxI456JIR1i6YYY3fExZEIijBO//rRGnN7qSJ3y0Do8BZO
Xj1RTBNrsctqwtLlo5SqBxbZTutKczCD94Zr83ijUYewR8hmQ5h3dwHexANOOYfL
7LWxywIlhCvgn6XZ4Bm+FD4yl6ogYo4iUbjzR8yiLaP9oX9I6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGtJy1tk4FE/6YVtPMngJB74UeZoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWNiNmM4ZjgtNjk1Yy0z
NmNhLTliNWQtMTg4ZDZlZThhMTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRN4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAADNyFzMCO9UHinORDHzSUD3GUOJgd6WvmqLnmkCC341B7ZTL9eqR+gb
qCMJH7JP+y8rycl+jPfWkO2+p9VjJl9rwEjylivbxXA8dQ9Ke3Mi4zfUhYSoFCS2
X5n+4i81kwGV1DwEIdCpvnFFCQjNL4cAF8TXQOCl8Kn18fkOHsK8StU7jKcDg8iz
JcuC7SZ6Ov16Tsku3tfY2wFPOVTWUqIIqtf6X3op5V9G1yG8MMYTM7eVOLRyHWvb
PF/kvTPRyg2cz/yKzwF2+qI6C/XrvKc4xI3vASXrTLO86fAHxSgHCCUZSSlB90bJ
dJ4gebnmoPKL8TrJSfyMR2Yz26V1dSw=
-----END CERTIFICATE-----
Generated at Sat Sep 26 18:32:09 2026 by rpki-client