
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3940a3e1-5d70-326f-bad5-a36f816cf324.roa
File: 3940a3e1-5d70-326f-bad5-a36f816cf324.roa (raw, json)
Hash identifier: 6RsmGjyet8Q9XLs2DkpzMeZiOcYRINM2lVT1e44r1VU=
Subject key identifier: A6:51:71:E7:19:08:62:DC:26:1C:37:96:EF:4D:65:13:AA:64:B3:54
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584CE57D66D3080A4481BBB77540
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3940a3e1-5d70-326f-bad5-a36f816cf324.roa
Signing time: Tue 17 Feb 2026 20:07:25 +0000
ROA not before: Tue 17 Feb 2026 20:07:25 +0000
ROA not after: Mon 18 May 2026 19:07:25 +0000
asID: 19905
IP address blocks: 173.17.24.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:e5:7d:66:d3:08:0a:44:81:bb:b7:75:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 17 20:07:25 2026 GMT
Not After : May 18 19:07:25 2026 GMT
Subject: CN=74ee4aad-f113-43b5-8899-d5b9ba09c575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7c:f0:43:d6:25:89:11:a0:91:cc:b6:22:5a:
42:ef:1e:92:b2:dd:7d:88:75:c9:e1:23:91:75:4e:
0b:80:0d:9e:8c:9e:5a:0d:8e:92:1f:82:d5:30:1b:
57:4f:20:3f:a4:48:b7:21:21:3e:6c:68:1a:af:c7:
9c:7a:51:2b:99:37:5c:c7:f3:4a:bb:26:bb:fe:2b:
2e:c9:8d:5a:8b:68:95:52:36:f1:94:d2:df:11:df:
3f:2c:34:9c:0e:ef:ad:e1:b5:10:27:79:21:c3:d8:
cc:53:a7:3c:ef:38:db:a3:0e:2f:69:1d:6d:5d:c8:
0f:48:f7:79:56:c5:e2:ad:22:30:74:94:d1:74:cc:
ab:9c:0f:ec:53:c5:fa:9d:d0:2c:e2:33:31:20:13:
5a:be:e7:79:f2:a3:7a:59:47:bc:02:78:bd:4e:6f:
c3:48:c2:5f:29:b2:7d:7e:88:81:6b:42:4b:2d:f8:
5c:8b:32:07:76:72:64:d2:87:41:81:f6:fd:6f:c2:
9f:d1:88:f6:84:97:ac:11:de:06:d7:2f:c8:8b:e2:
df:03:70:8a:8f:f2:f8:42:b1:b4:c0:14:76:6e:fb:
79:61:36:19:32:d0:12:eb:25:84:aa:77:8c:4e:7e:
e2:cb:23:b6:9d:2a:7b:19:db:1d:7c:03:b2:fd:77:
17:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:51:71:E7:19:08:62:DC:26:1C:37:96:EF:4D:65:13:AA:64:B3:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3940a3e1-5d70-326f-bad5-a36f816cf324.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.17.24.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:76:cf:55:76:71:76:c7:86:78:98:89:cd:2b:51:58:2d:f5:
05:fd:10:94:39:ab:9c:a5:23:ae:ca:81:65:04:00:1e:e1:17:
34:6d:8a:0e:ee:2f:03:5f:3e:e8:d0:64:18:61:d6:34:65:19:
9b:0e:4e:8f:3f:22:21:0a:af:d3:31:5e:fd:14:24:bc:e1:16:
a2:68:e3:73:11:69:95:2c:50:09:24:f5:e2:3b:83:22:02:38:
1d:fd:93:75:f6:d5:e5:21:ff:93:72:f8:87:8e:4e:a3:8b:3b:
2e:a1:90:b3:2f:47:a4:b7:5f:2e:57:e8:ee:7b:9e:61:b9:27:
fa:1b:6d:bd:42:35:9a:92:81:8e:f4:d7:7f:0f:61:eb:91:e8:
c4:2b:24:50:63:d5:e1:d1:ce:b4:4b:49:24:fc:f0:15:88:45:
c0:c0:65:d6:f0:ee:87:69:96:ef:1f:37:a3:6a:73:26:8e:7d:
b0:ec:eb:50:1e:69:30:b1:de:22:99:45:d8:aa:0c:94:55:e3:
35:58:8c:9f:b9:5c:1c:9f:c6:11:f8:0a:03:82:90:e1:94:d6:
17:2a:f5:8b:61:66:7f:18:a0:cb:e2:71:99:20:24:73:36:2f:
e7:82:f0:d6:3b:1c:52:10:8f:c8:0c:54:55:f0:06:e8:ae:10:
9a:5d:dd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:05:55 2026 by rpki-client