
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a2d20af4-1d00-3c85-9ee8-d70c6f2137de.roa
File: a2d20af4-1d00-3c85-9ee8-d70c6f2137de.roa (raw, json)
Hash identifier: i7E6HkEasHhlNCBusZN5TvAU+491TntEVy5rm45AvZA=
Subject key identifier: A2:B9:C2:CB:06:C3:14:90:9F:E0:79:4D:D5:B2:54:0B:79:8F:9E:9F
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584DCDC5D56C97E5C8C687F70980
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a2d20af4-1d00-3c85-9ee8-d70c6f2137de.roa
Signing time: Tue 12 May 2026 01:00:24 +0000
ROA not before: Tue 12 May 2026 01:00:24 +0000
ROA not after: Mon 10 Aug 2026 01:00:24 +0000
asID: 19905
IP address blocks: 173.27.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:cd:c5:d5:6c:97:e5:c8:c6:87:f7:09:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: May 12 01:00:24 2026 GMT
Not After : Aug 10 01:00:24 2026 GMT
Subject: CN=3077428a-4586-49ed-bae3-9cbdca755996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:30:b0:a0:f4:e3:4a:bf:d4:64:5b:01:cc:42:
dc:94:b7:e5:20:5d:2f:34:79:6f:f5:b0:3f:d7:af:
f1:cf:15:cc:ed:f3:30:1c:0d:5b:b7:33:54:df:63:
f7:79:f3:3b:36:29:ee:3d:e7:f3:52:da:06:f9:6b:
0c:44:19:16:46:52:3c:fb:4f:e2:25:4f:03:89:07:
ae:3d:37:95:e2:8a:5d:2a:e0:b1:86:e1:df:66:b5:
af:de:f9:78:2b:5a:e1:ed:aa:42:a5:30:1e:39:db:
06:4b:df:a5:01:dd:da:e6:0d:8d:28:9a:71:52:6d:
09:c5:f9:76:6b:c2:26:d2:df:cf:95:a6:0f:83:7b:
e1:cd:ec:47:51:dd:e2:f6:04:c0:70:00:75:0e:fc:
7f:83:78:d2:7b:d3:33:76:45:4a:c2:db:98:e0:19:
05:fa:95:65:a0:e8:87:5a:51:52:41:e9:eb:c1:0c:
5a:0a:5e:37:3e:0a:4f:ac:ae:5c:d5:fa:71:e6:7d:
49:e4:9c:63:d2:bd:03:e6:59:b8:e9:48:0c:6e:02:
56:b7:5e:01:77:a8:24:03:7d:1e:29:84:1f:c7:fb:
f1:1a:ce:80:3b:b0:91:13:b7:89:fc:49:7e:ba:41:
c5:5c:1d:72:6c:9e:7a:53:31:90:17:60:c9:30:2d:
55:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B9:C2:CB:06:C3:14:90:9F:E0:79:4D:D5:B2:54:0B:79:8F:9E:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a2d20af4-1d00-3c85-9ee8-d70c6f2137de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.27.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:59:de:46:ce:cf:88:16:0d:1a:64:dd:2a:99:8b:b6:b4:c7:
38:bd:92:c2:01:9a:4e:d7:2a:09:4a:3e:79:21:d8:02:ff:82:
bc:79:08:33:e5:4c:ec:90:c3:0a:93:93:54:f9:27:3a:8a:9c:
88:e7:c2:87:a5:51:e6:ef:a6:d5:45:94:df:0b:79:ce:9b:7f:
74:af:98:31:c0:4d:9b:47:86:30:f1:10:4c:92:77:65:cb:d7:
d2:6c:cc:b5:08:44:ba:c5:d5:7c:8f:24:9c:4d:35:c5:9d:bb:
2d:4c:1f:82:81:0e:52:f0:1f:38:75:26:b9:8f:85:b1:90:6d:
24:c1:64:f2:e5:db:67:3b:42:14:d3:4e:37:33:93:e3:cc:1a:
8b:25:ce:88:88:da:eb:d9:3e:a5:23:2f:08:34:b9:57:a3:e9:
d9:cb:8d:55:4d:7f:e4:bb:f2:a5:1f:18:c3:5d:74:39:21:b1:
34:e8:99:6b:8a:5b:42:5b:a8:8f:70:dc:61:3c:09:cb:2c:b1:
f8:4b:22:90:b8:2e:c7:81:09:b0:35:9a:cd:af:ae:73:bf:d9:
bb:09:58:15:a6:0b:c1:24:e9:f9:58:85:1c:cf:c7:4b:64:36:
44:58:e0:b3:cf:60:01:ea:a7:cd:f5:e2:60:82:6d:24:3d:8f:
a1:9b:97:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:13:05 2026 by rpki-client