
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9de043b-ac25-3bdd-8daa-fa73c48ab2c9.roa
File: a9de043b-ac25-3bdd-8daa-fa73c48ab2c9.roa (raw, json)
Hash identifier: aybN6Ry0kCqGTclsOvd9cgER7GrNoJpep1ZlcaQeMjg=
Subject key identifier: 8D:C0:73:C3:3D:86:DF:D3:82:12:24:7C:51:6D:79:9F:DB:74:7F:A5
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D24DF80A688D89FB892169F98
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9de043b-ac25-3bdd-8daa-fa73c48ab2c9.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 30036
IP address blocks: 173.23.72.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:80:a6:88:d8:9f:b8:92:16:9f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=531a1214-188a-4e45-a6ae-328e1c7e1e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4a:82:1e:86:16:86:4e:a0:c0:b6:9e:17:6b:
52:50:c2:57:ef:20:b8:e9:38:8a:1c:04:a4:0c:8f:
f7:86:19:3c:2c:b3:1c:4e:1a:ec:a5:84:8c:98:46:
6f:78:ed:e3:ac:06:fb:97:8b:c4:05:a2:69:fa:52:
a9:41:46:ee:41:65:15:f0:a8:1f:ed:fa:8e:39:19:
40:98:02:f7:61:5e:0f:1f:fe:06:dc:18:56:0d:b9:
98:0f:4f:db:6c:ff:d1:c3:64:9e:f2:1c:80:2a:8d:
40:d2:c1:4a:65:9a:21:48:03:0c:94:85:c0:d8:81:
02:49:6e:d3:5f:d4:dc:29:74:27:72:9e:be:7d:58:
2c:76:27:b5:dc:7d:af:b9:b1:e4:06:ac:f5:c7:53:
3d:04:ac:11:29:e0:52:6e:a2:34:38:9b:7a:fd:a2:
5f:1e:c5:6d:e9:25:d0:10:c5:38:25:e9:28:5f:e4:
87:78:59:d2:4d:19:49:7a:92:de:a0:d9:02:54:f7:
2a:e8:62:69:94:86:44:38:60:a7:0e:54:0d:0f:5a:
05:a8:44:8f:91:fa:6d:cf:61:24:82:85:3c:06:dd:
fa:60:ba:f9:5e:ee:bc:c7:1e:e3:71:32:fc:b8:12:
42:7d:ed:bb:85:b5:8b:90:0f:f5:5b:a1:d2:ec:77:
68:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C0:73:C3:3D:86:DF:D3:82:12:24:7C:51:6D:79:9F:DB:74:7F:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9de043b-ac25-3bdd-8daa-fa73c48ab2c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.23.72.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:f6:08:ee:36:b2:1b:77:75:d2:15:2f:25:14:82:ab:8e:52:
f0:61:b7:52:56:5d:55:a8:2a:a7:b7:b4:25:ec:40:3c:f3:9b:
db:e5:d4:47:39:22:c8:f3:4b:9f:0c:a2:6b:7a:c6:48:55:97:
6b:2b:43:b3:5a:2a:0b:62:ab:4f:76:f5:4b:bc:f4:24:c6:e8:
a8:11:27:0c:03:18:a6:a7:0d:89:0a:5a:43:03:ca:f7:b8:62:
ce:13:1f:60:66:bf:6b:d4:ca:93:b4:da:ef:3c:74:05:0c:76:
2e:d6:93:e3:c8:a9:36:12:4c:42:26:48:85:b9:ad:23:b7:6c:
fe:0f:7a:49:c0:a6:5a:fe:cf:62:f2:3a:f1:3d:c1:17:63:d6:
78:da:c8:22:c6:92:f7:53:34:6a:4c:3d:e9:bc:e2:f5:cc:81:
36:30:cf:73:24:e6:07:b5:ae:c3:14:ab:21:06:24:e2:34:af:
19:9b:17:fd:08:d5:5f:12:51:06:3c:27:69:3e:5d:5f:46:cb:
a6:39:e5:c0:1d:b2:26:73:5f:ad:f3:b6:65:e7:5f:57:10:57:
29:30:96:7c:11:94:a6:49:4e:2b:06:dc:ff:6c:98:90:13:b6:
fd:3f:db:2c:9e:66:c1:89:23:4d:e8:16:6a:de:f4:e7:cf:5d:
b6:c2:c6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:27:51 2026 by rpki-client