
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1488fa84-3d0f-3a66-9d4e-39b5d44cc26d.roa
File: 1488fa84-3d0f-3a66-9d4e-39b5d44cc26d.roa (raw, json)
Hash identifier: lChzplCre+Gc0QSTNMyE71UqB6VypMEieEJxIhOeH7g=
Subject key identifier: 9A:8B:F2:49:D2:09:36:CA:C5:09:BF:2F:22:E1:F2:4C:A6:12:33:71
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584E059C652876D4E3B297D15B00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1488fa84-3d0f-3a66-9d4e-39b5d44cc26d.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 30036
IP address blocks: 173.23.208.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9c:65:28:76:d4:e3:b2:97:d1:5b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=b3ff6b95-aa67-4e80-81b6-6f38810b6379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cf:7a:ba:28:cc:6d:70:32:20:e3:f9:61:24:
0f:be:ac:c5:63:55:a9:54:0b:db:67:f7:fe:38:a6:
fd:01:0e:6e:25:60:cc:41:b6:53:e3:67:63:be:43:
37:a6:5d:9c:8d:75:e4:c7:a4:68:f9:b3:43:11:23:
ff:d1:bc:2b:85:d3:72:ee:c5:f4:5d:2c:64:90:f0:
88:e0:77:5d:33:95:3f:10:7d:2b:31:4e:1d:42:02:
64:94:e5:f1:7f:c0:bc:44:82:65:be:da:76:08:7b:
11:a1:86:87:11:2e:fa:1b:a7:71:a1:36:37:44:e2:
75:b8:4f:ef:5b:b2:b4:be:98:f4:a5:55:cb:f3:55:
0b:e6:10:3e:f9:d9:9a:05:9a:ed:97:25:56:70:e6:
61:48:94:f4:15:a8:f3:f5:f1:2b:8d:5f:ab:d3:fd:
3b:c3:7f:eb:42:d6:45:c6:b3:27:2c:9e:00:04:a1:
7e:e7:33:e1:ae:fc:7a:d9:7c:ce:f4:a3:3a:cd:fb:
52:35:41:b5:88:34:18:e5:1d:cc:db:cf:7f:ec:f0:
5c:6c:1e:6c:f9:61:5d:f4:6d:b9:1b:30:af:fb:74:
66:54:45:84:c5:1e:96:8e:03:76:65:e1:ee:00:30:
66:8e:59:3b:ab:ad:2a:78:55:28:5b:2f:e6:3d:fe:
48:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8B:F2:49:D2:09:36:CA:C5:09:BF:2F:22:E1:F2:4C:A6:12:33:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1488fa84-3d0f-3a66-9d4e-39b5d44cc26d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.23.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:84:3b:18:61:3f:d6:dc:a0:c1:2a:8a:1b:f4:03:47:83:61:
d2:4c:12:4e:32:a3:bd:98:f1:03:12:b7:b1:e6:18:f0:ed:da:
89:2a:24:30:07:21:aa:e8:6a:e9:45:5b:57:13:a4:bb:e9:4e:
93:6b:fb:fc:48:40:1b:51:c3:3b:2f:67:ce:a5:18:5c:8f:7e:
9c:d0:e8:c8:97:c8:05:ec:39:b5:cb:66:ac:68:d9:8d:11:c1:
01:85:70:cf:7b:43:26:e4:8f:f0:b0:9e:7d:7d:3b:5f:d8:44:
3c:f8:dd:41:59:e7:40:51:2a:fe:00:86:78:2d:fd:1b:83:74:
51:cf:2c:2c:46:e3:84:0c:8f:76:50:ef:a1:19:81:00:23:a0:
ef:27:07:3b:7c:84:67:18:d5:b5:eb:ee:63:24:7b:71:dc:2a:
78:08:ef:86:91:7e:26:75:cb:bf:3d:cd:e5:2b:ad:4f:87:e2:
e9:f5:9d:a1:38:90:5f:88:2c:59:cd:b1:96:a4:3d:11:9a:96:
84:5b:50:17:78:0c:7c:84:c0:0f:b0:00:da:64:0b:ec:b1:13:
eb:1c:5e:bc:ec:1f:96:9c:a7:53:32:22:2f:b0:60:ff:c6:37:
1b:34:1b:b6:6c:8e:4f:56:54:dd:66:ff:ff:4f:e8:f9:11:47:
23:4c:53:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:59:43 2026 by rpki-client