
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a0dccb90-a69e-370f-aeed-db67aec4bf0f.roa
File: a0dccb90-a69e-370f-aeed-db67aec4bf0f.roa (raw, json)
Hash identifier: LvNDq5d7qLxrgDMHFvWmxB6GphsbtQDfWK6N8MKiJ6Q=
Subject key identifier: EA:6B:33:01:CB:7F:CF:7B:01:AA:6F:ED:0C:04:8F:28:A9:6B:B7:E1
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584E9384FB99C10B7000358327E0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a0dccb90-a69e-370f-aeed-db67aec4bf0f.roa
Signing time: Tue 21 Jul 2026 21:00:12 +0000
ROA not before: Tue 21 Jul 2026 21:00:12 +0000
ROA not after: Mon 19 Oct 2026 21:00:12 +0000
asID: 19905
IP address blocks: 173.29.60.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:93:84:fb:99:c1:0b:70:00:35:83:27:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jul 21 21:00:12 2026 GMT
Not After : Oct 19 21:00:12 2026 GMT
Subject: CN=f9afc5c3-dcb9-46a9-a57c-cec3941c4c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:27:a7:12:c6:30:be:71:97:4e:b4:62:ba:cb:
b1:52:02:f9:b0:56:e9:e6:67:d4:89:23:a4:65:24:
5a:31:72:1b:dc:2b:0f:41:16:f6:14:1c:ab:e8:d3:
cd:8a:6a:ae:31:5d:70:bd:8e:f8:ae:5a:9d:01:91:
12:a0:8c:57:53:cd:bb:c6:bd:fc:79:48:bb:ea:d1:
0b:eb:3b:c7:41:83:16:d9:37:01:c9:0c:f1:c7:cf:
68:b2:08:40:3d:74:4b:c2:f0:06:d5:8e:e5:0c:8d:
86:06:b6:e0:80:5a:58:7a:a2:a3:9a:ba:05:47:3b:
ea:55:e5:48:29:ad:fa:84:d8:71:7d:90:79:9e:d7:
0b:9f:20:da:0d:17:71:2b:7b:28:78:34:4a:a5:b9:
12:f4:f4:60:70:89:0f:b8:7f:fa:18:c8:35:46:ab:
46:a5:9e:9b:6e:ee:42:55:6d:77:f4:8f:48:83:ef:
a7:7b:13:c6:d8:83:1b:c6:44:1b:1a:4d:2a:64:d6:
31:63:83:3a:1a:df:04:02:3e:63:64:e7:87:88:50:
2a:3d:9b:a9:b7:7f:9c:ab:48:b0:26:d3:c1:4a:c5:
d5:23:31:ff:7e:89:e1:0e:82:9c:7f:48:e0:4d:73:
b9:10:ff:02:3b:57:ab:7e:9e:ba:da:14:7d:ed:a6:
38:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6B:33:01:CB:7F:CF:7B:01:AA:6F:ED:0C:04:8F:28:A9:6B:B7:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a0dccb90-a69e-370f-aeed-db67aec4bf0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.29.60.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:d3:b8:58:2a:ce:67:07:20:a5:c6:9f:46:a0:6a:b4:b6:a5:
a0:36:d6:61:dc:af:cd:fb:d7:9a:66:13:95:9c:fb:fa:c6:60:
f2:b4:e1:12:76:a6:1e:08:67:a8:60:ed:34:cf:86:33:47:80:
68:79:2f:87:df:8e:16:7d:ce:6e:d9:1b:40:b9:d5:dc:6f:58:
92:60:8a:7e:9a:43:53:96:23:b1:7d:7a:04:5f:f2:08:99:9a:
2e:94:2b:f4:c4:7a:ec:49:5d:c7:f8:c5:f5:5b:b1:5e:9a:17:
1f:63:9f:78:16:f8:52:8c:95:1e:09:5b:a0:4e:8e:d5:f3:ee:
c4:75:b4:7c:e7:9b:2a:c9:a9:45:03:8f:43:cf:83:dd:5e:3a:
14:df:53:02:59:7c:bc:21:50:bd:e2:7e:75:1a:6f:b3:50:75:
4d:92:f1:24:3d:93:64:47:e9:03:f1:94:80:4e:ae:f1:40:fd:
71:a5:4e:2e:a1:46:ec:e2:af:c9:d5:9c:f2:28:00:95:12:c6:
01:0f:07:3f:2a:39:3f:b4:8e:09:f8:92:33:f7:b1:03:5b:c6:
61:af:99:23:94:8c:28:c5:17:33:a1:b0:3f:b3:29:7f:d8:88:
de:d8:24:4a:dc:05:24:9a:ca:6a:fa:36:ab:4f:bd:ee:91:07:
cb:bb:40:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:36:50 2026 by rpki-client