
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/324edc91-ce19-3b74-87c2-49408a273b64.roa
File: 324edc91-ce19-3b74-87c2-49408a273b64.roa (raw, json)
Hash identifier: jRE5rUQ2rsL+A4By6qx6e+R9TFnjfsXET5VhdJaaHS4=
Subject key identifier: 3E:C7:A1:29:9C:D5:28:0F:33:99:7C:69:AB:D4:71:EE:7D:F4:8F:1B
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584CF587B0717005E6BCD170C0C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/324edc91-ce19-3b74-87c2-49408a273b64.roa
Signing time: Mon 23 Feb 2026 14:00:41 +0000
ROA not before: Mon 23 Feb 2026 14:00:41 +0000
ROA not after: Sun 24 May 2026 13:00:41 +0000
asID: 30036
IP address blocks: 216.108.218.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f5:87:b0:71:70:05:e6:bc:d1:70:c0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 23 14:00:41 2026 GMT
Not After : May 24 13:00:41 2026 GMT
Subject: CN=a9ee3b57-43e2-42e3-ac37-b62958c8c2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:14:e7:1b:b9:89:95:a8:06:9d:f1:2a:0b:3a:
f8:b8:60:65:d6:ca:02:19:d9:7d:f3:07:44:af:40:
f5:ea:de:66:e9:aa:97:ad:3b:c0:c6:68:9e:a0:c1:
02:54:4b:f0:4c:70:2a:26:3c:a0:30:b9:9b:65:62:
f7:26:cc:cd:62:2c:ae:7f:85:31:9f:9a:d1:57:03:
59:a0:6e:b2:bb:c6:43:0d:ee:b1:1f:17:dc:09:95:
28:10:e5:10:f7:72:27:94:30:fb:80:b6:6a:d2:5d:
85:fa:1d:58:3a:68:41:c5:d3:c8:a3:6b:c8:53:64:
05:42:a5:62:53:dd:6d:e6:90:b4:25:13:20:0d:6a:
8e:8c:4d:31:df:f1:01:24:38:4d:35:65:69:03:5a:
73:bd:b7:62:c4:38:94:7d:8c:4b:8a:83:ab:65:2f:
84:70:c1:b9:b5:b3:3a:0a:cc:4b:75:35:fb:ee:86:
bf:38:7a:86:45:5c:e7:7a:c6:30:2a:ba:ee:b4:f0:
d6:28:87:dc:16:c3:7a:f6:44:1e:46:6b:8f:b6:72:
2b:3f:ea:ec:e5:2d:19:8c:db:2c:1f:5a:08:1a:9e:
d9:8a:c4:5d:8f:a3:86:20:e4:e7:cb:ba:b1:19:e5:
bc:70:aa:ac:8a:7a:9d:e8:a0:6d:7f:c1:a7:b4:a4:
0e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C7:A1:29:9C:D5:28:0F:33:99:7C:69:AB:D4:71:EE:7D:F4:8F:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/324edc91-ce19-3b74-87c2-49408a273b64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
216.108.218.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:c1:b9:b9:18:d0:ea:77:18:e2:4b:b9:1d:9c:75:67:56:8e:
16:1a:75:5d:bb:9c:46:06:1d:7e:27:13:9f:56:73:0b:23:8e:
8f:1f:6d:a2:17:bf:e9:3e:01:87:18:96:4d:6a:ea:5c:5b:93:
b1:bd:70:b5:f7:f2:ac:d5:e5:de:8c:4d:fb:12:31:c4:2a:90:
74:24:48:d0:90:81:8e:3b:aa:a3:d5:03:55:7e:4d:4a:6c:85:
03:5d:23:85:5c:3e:44:71:31:bd:65:fa:35:8a:09:ff:ca:f5:
9d:e9:b3:94:84:69:2d:6d:2d:e4:19:7b:22:d1:17:5a:b3:ca:
a8:d4:79:6c:9e:65:d6:59:96:e7:7c:6d:e7:61:33:0a:5a:22:
ff:89:4e:69:38:ab:11:d3:38:11:7e:cc:3e:47:d9:c2:58:ae:
8a:ba:0d:53:d9:c1:e9:42:e9:84:56:b8:08:21:21:31:41:48:
fb:70:e6:ec:f4:58:23:8c:68:81:02:58:08:62:3c:92:d5:5f:
db:8c:46:04:be:b6:b8:96:28:8d:2a:d7:5b:98:80:69:cf:28:
ac:a3:8a:39:46:93:1b:d6:b4:69:a9:52:f2:f7:6f:9f:45:7f:
a9:20:46:a1:a4:09:1e:0a:46:12:28:5e:fc:b0:71:50:92:8e:
84:36:aa:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:01:00 2026 by rpki-client