
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09de78f4-20f4-3844-a639-a328eb5db662.roa
File: 09de78f4-20f4-3844-a639-a328eb5db662.roa (raw, json)
Hash identifier: RXo9VhU5u5lPY0r729xAZyJnmwt5H8OPRn2DQuYSXbE=
Subject key identifier: 05:6F:21:53:A5:89:21:52:AB:62:40:29:8E:DA:D5:DF:B7:22:78:FD
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584E059C72652ACFED0204716480
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09de78f4-20f4-3844-a639-a328eb5db662.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 30036
IP address blocks: 173.21.12.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9c:72:65:2a:cf:ed:02:04:71:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=47e880a4-9bf6-4ac1-a948-22b84fb39d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:46:19:0a:28:55:7c:d6:0f:e9:ca:0f:18:71:
de:7f:83:f0:ca:6e:9d:3f:17:1e:7d:5c:d0:c7:2a:
91:ac:a5:a1:61:0c:d5:a8:94:12:ad:c4:2c:2d:9a:
17:8b:cd:4e:d6:01:9b:eb:e9:20:a1:32:c2:97:18:
85:83:be:28:2a:66:75:10:cc:1e:b8:53:cc:8f:8d:
93:86:ef:73:20:ef:f5:b0:ee:d8:f1:df:8e:cb:a7:
bb:c6:0e:91:cc:e0:a1:71:d8:ca:0b:cf:1e:4a:41:
74:42:12:00:76:55:d5:0f:16:54:57:0b:7d:b9:f3:
bc:26:84:af:07:97:91:51:2d:7b:5b:c9:eb:17:c3:
60:49:39:b3:06:75:cf:10:58:4a:a6:a0:07:14:97:
82:83:a6:e1:cb:a0:b7:d2:4f:65:c1:cb:3c:1c:64:
f9:64:a4:d2:9a:48:bb:81:ed:0f:9d:28:92:fe:24:
bb:dd:83:55:bb:11:9e:83:ed:14:2d:ce:9e:e9:9a:
16:51:d6:73:86:63:b8:5d:f1:a2:5e:d2:5b:75:b8:
4a:29:c0:66:0c:93:39:1e:51:7d:a4:79:15:2b:bb:
40:75:d6:9d:ac:68:78:5e:5e:b4:1a:01:ac:4e:e3:
97:0c:78:72:20:be:70:15:fb:15:6f:48:70:ec:78:
f9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6F:21:53:A5:89:21:52:AB:62:40:29:8E:DA:D5:DF:B7:22:78:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09de78f4-20f4-3844-a639-a328eb5db662.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.21.12.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:d3:39:4f:62:48:36:5e:b2:c1:f5:5f:15:dd:fc:25:d4:af:
95:3e:6a:24:34:8e:0f:3d:f0:ed:50:09:2e:a7:7e:9a:e8:5e:
57:21:2d:50:c3:20:8c:ee:ad:9c:4b:0f:8c:22:8f:7a:75:83:
c1:f9:c2:cc:af:f4:cd:12:bd:8b:20:fa:db:5c:e4:2e:48:9f:
bd:84:5f:0e:0d:f3:f6:68:8d:61:5d:2e:24:fa:bc:42:de:d8:
6b:6e:72:26:38:11:8a:5c:a7:b3:3b:de:83:c8:3a:dc:01:ac:
5b:ab:6c:17:8b:f2:4c:b2:57:c0:6f:81:3a:83:36:a3:1f:11:
8b:e9:68:39:7e:10:76:8e:fb:f6:59:87:cd:c8:b0:67:12:9a:
e7:13:1b:9b:bb:77:0e:d6:77:14:96:79:63:4e:74:7d:7b:dd:
3d:59:94:3a:30:53:88:b8:8d:bf:4c:b1:ef:29:77:00:b4:ea:
3f:6c:ae:33:d5:05:84:e7:4d:5d:93:3a:8b:5e:c8:9f:d9:44:
3b:f9:32:b5:5b:60:9e:aa:14:50:2b:e2:23:65:3d:40:0c:22:
78:4a:d8:b0:7c:1c:2e:eb:8c:3f:38:d6:a3:c1:bb:84:31:5f:
d9:7e:52:87:dd:f1:cf:0c:da:a5:7c:73:1d:14:59:c3:24:27:
7c:b8:39:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:36:35 2026 by rpki-client