
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0fabb3c1-0d85-3ffc-aad2-7a9ca5d7d48c.roa
File: 0fabb3c1-0d85-3ffc-aad2-7a9ca5d7d48c.roa (raw, json)
Hash identifier: CGvu2UcRLVInwqCXIw3ntGTy1mclRFMYZx0xCguJ53w=
Subject key identifier: 78:7A:9D:7C:E9:84:A1:63:F9:B3:F1:6E:3A:F3:05:7E:EE:19:D4:F1
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D0647B755B71ADED2337FF2F0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0fabb3c1-0d85-3ffc-aad2-7a9ca5d7d48c.roa
Signing time: Sun 01 Mar 2026 14:00:41 +0000
ROA not before: Sun 01 Mar 2026 14:00:41 +0000
ROA not after: Sat 30 May 2026 13:00:41 +0000
asID: 19905
IP address blocks: 173.18.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:06:47:b7:55:b7:1a:de:d2:33:7f:f2:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 1 14:00:41 2026 GMT
Not After : May 30 13:00:41 2026 GMT
Subject: CN=a3d927b5-1613-48db-a309-6e745983046c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e9:18:23:b3:9d:9b:a8:85:45:15:75:15:49:
b9:1b:d4:1a:e7:73:82:e8:60:f7:0c:b7:3a:77:5f:
c8:10:fa:d1:62:23:b8:88:ca:ad:d9:c6:a0:36:f4:
25:b3:12:11:46:5c:88:9a:d7:93:66:e8:21:d6:6b:
21:49:c4:ef:bd:1b:ac:c5:ae:0f:1f:e2:bf:be:13:
82:9d:e9:92:43:a4:36:37:d3:3e:ec:02:dc:e7:fa:
7c:73:35:fb:bb:f4:a9:6d:c8:83:00:c6:4c:a3:f0:
70:12:17:bf:5b:0f:78:e8:3a:e7:5f:2c:74:68:80:
35:d5:ee:f4:7a:91:2f:8b:56:a6:af:b8:ce:7a:44:
b6:06:57:d1:08:00:49:bb:9c:1e:8e:a2:b5:d2:1e:
79:e9:c4:38:d0:00:b1:72:7d:24:da:51:7a:30:66:
fb:0d:c8:13:36:ea:cd:bf:27:09:33:01:2a:e4:c8:
60:db:ab:fb:ae:aa:ab:f5:4b:88:9e:d1:06:75:c7:
20:f9:dc:8c:6d:ca:f0:db:30:dc:90:69:52:3a:93:
e2:87:92:2c:8a:93:67:4d:1a:46:6f:75:73:6c:a5:
47:e0:6a:17:dc:38:f2:d7:a9:08:09:ca:16:12:a8:
b8:03:11:2b:f6:da:87:8b:b3:5b:7d:11:62:c4:15:
e7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:7A:9D:7C:E9:84:A1:63:F9:B3:F1:6E:3A:F3:05:7E:EE:19:D4:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0fabb3c1-0d85-3ffc-aad2-7a9ca5d7d48c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.18.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:a3:19:3c:ec:42:42:aa:fd:94:12:ef:93:00:f1:db:94:d0:
f6:0e:ee:c4:c1:e6:19:94:f2:62:06:8b:be:67:e0:b6:2f:36:
97:6f:6d:57:de:bf:ed:83:2d:76:5d:64:3e:f6:45:e8:f0:d2:
eb:81:db:82:e0:89:f1:80:d0:b5:33:8c:10:ea:5c:c1:06:38:
5a:35:6d:1e:c3:a7:03:60:c2:3e:9f:a8:e2:57:75:94:17:eb:
b6:19:76:4e:c8:bc:95:d5:6a:fa:88:82:60:53:16:3c:5c:9c:
59:2b:45:99:c3:85:37:01:de:d2:04:60:ff:e2:28:82:20:9f:
8c:e2:14:2a:18:81:c5:29:ee:d0:e8:5a:d0:20:a4:68:e6:50:
12:2c:10:2f:3e:a4:a0:09:da:30:16:35:33:74:f0:5e:72:6a:
b5:3f:67:ac:93:f8:34:b5:78:74:4c:34:5f:89:e1:bb:5d:d2:
a5:a4:31:b7:48:49:17:01:f5:4a:02:75:b4:b9:ee:34:3e:51:
16:9d:d2:37:82:ef:33:f3:36:8e:d9:63:d3:ea:c1:38:cb:62:
27:e3:45:90:9e:26:8b:af:e2:88:41:cd:30:33:fa:da:28:91:
84:23:65:b6:c5:15:80:80:f9:a8:23:bf:55:a1:ca:85:1f:0f:
8f:c5:33:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:40:59 2026 by rpki-client