
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3940a3e1-5d70-326f-bad5-a36f816cf324.roa
File: 3940a3e1-5d70-326f-bad5-a36f816cf324.roa (raw, json)
Hash identifier: w3ixteFHt82bB1Ct8F+wTNyFxTXZihZcLuHjbGq0OQg=
Subject key identifier: 94:49:74:06:CF:04:F4:56:4D:3B:44:3C:E9:A0:4A:28:8E:CE:54:36
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584EA5AA944C05B2048622C0A340
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3940a3e1-5d70-326f-bad5-a36f816cf324.roa
Signing time: Tue 28 Jul 2026 09:00:11 +0000
ROA not before: Tue 28 Jul 2026 09:00:11 +0000
ROA not after: Mon 26 Oct 2026 09:00:11 +0000
asID: 19905
IP address blocks: 173.17.24.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a5:aa:94:4c:05:b2:04:86:22:c0:a3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jul 28 09:00:11 2026 GMT
Not After : Oct 26 09:00:11 2026 GMT
Subject: CN=f396b9de-a691-4e9d-b349-690d06a6b88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1f:b9:35:d2:7a:a6:ea:c1:c9:a3:36:ea:c3:
e0:4d:2b:a4:dc:1a:3a:77:8e:e2:e9:94:3e:d7:3a:
0a:40:08:fb:45:b5:6a:81:8f:09:4c:12:b5:d4:2f:
15:6b:a8:e3:f1:af:9a:da:c5:59:26:37:18:ca:12:
d3:11:ee:b4:88:cc:ea:13:42:ff:37:8b:26:12:13:
45:a4:35:7c:17:c3:6d:fe:68:79:4b:0c:a1:a5:ee:
0e:d9:76:80:ff:03:56:8b:18:da:63:19:61:0f:52:
66:31:e2:c1:50:83:2b:70:a7:08:ea:77:02:60:38:
ed:85:9a:e0:2e:41:e3:70:c5:bd:2d:53:9f:0f:10:
31:10:88:7e:c4:56:8d:ea:dd:df:d9:3f:86:08:78:
db:49:0f:49:fe:3f:62:25:00:11:82:66:55:b8:cd:
fd:1f:bc:5b:38:7c:15:7f:7f:10:62:aa:97:a1:18:
00:4e:96:36:8f:54:b5:fd:9e:33:30:e4:87:20:c6:
ae:69:55:88:a7:c0:c1:60:15:1c:d1:99:dc:c2:fc:
bc:61:05:7b:7e:44:96:a8:7f:5d:d0:b1:8d:ae:34:
4c:eb:c0:9d:93:2d:4a:bf:00:47:45:5e:9d:05:00:
00:d0:ee:b2:da:cc:1e:ea:34:96:f7:11:da:9e:01:
c0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:49:74:06:CF:04:F4:56:4D:3B:44:3C:E9:A0:4A:28:8E:CE:54:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3940a3e1-5d70-326f-bad5-a36f816cf324.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.17.24.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:86:ca:77:71:e4:90:25:ec:5c:d7:55:0f:91:69:61:af:4e:
69:27:57:2f:06:57:00:f0:12:eb:be:7b:20:e0:8c:21:03:b0:
23:cc:ef:4a:8f:65:a0:ed:33:1d:9c:cd:4a:58:58:29:8d:12:
e2:71:95:8e:b7:95:b6:08:80:06:c0:a0:c2:8e:4e:e4:9b:f9:
69:24:86:03:ae:9b:77:c8:75:0a:93:0c:4a:ad:5c:ab:1b:be:
32:eb:42:c0:92:89:53:9b:23:35:bf:74:7f:b6:20:2b:8e:49:
9a:dd:d6:92:05:76:3b:37:13:5d:25:50:74:07:44:1f:04:64:
61:88:7f:91:4d:4b:19:77:fa:c4:de:84:9b:b2:e8:69:00:95:
85:d4:b9:32:ad:53:af:6e:6f:11:20:3b:23:71:68:a1:43:70:
1a:44:b4:b3:9a:55:90:36:b6:bd:9a:ff:2c:66:6e:1a:96:06:
c4:e4:b7:1a:8c:f4:02:55:8f:b7:d1:04:4b:17:8d:cc:e6:86:
96:e1:f6:56:cc:d4:d8:3a:14:1a:02:70:1c:a3:cb:f2:e4:ed:
99:c2:42:92:02:69:6c:ef:49:7a:30:f1:1c:de:28:2f:02:80:
76:84:8d:c9:9d:c4:06:fd:e9:20:64:2a:03:36:cd:55:ea:7d:
e4:bb:8a:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6lqpRMBbIEhiLAo0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDcyODA5MDAxMVoXDTI2MTAyNjA5MDAxMVowLzEtMCsGA1UEAxMk
ZjM5NmI5ZGUtYTY5MS00ZTlkLWIzNDktNjkwZDA2YTZiODhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwx+5NdJ6purByaM26sPgTSuk3Bo6d47i6ZQ+
1zoKQAj7RbVqgY8JTBK11C8Va6jj8a+a2sVZJjcYyhLTEe60iMzqE0L/N4smEhNF
pDV8F8Nt/mh5Swyhpe4O2XaA/wNWixjaYxlhD1JmMeLBUIMrcKcI6ncCYDjthZrg
LkHjcMW9LVOfDxAxEIh+xFaN6t3f2T+GCHjbSQ9J/j9iJQARgmZVuM39H7xbOHwV
f38QYqqXoRgATpY2j1S1/Z4zMOSHIMauaVWIp8DBYBUc0Zncwvy8YQV7fkSWqH9d
0LGNrjRM68Cdky1KvwBHRV6dBQAA0O6y2swe6jSW9xHangHApQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJRJdAbPBPRWTTtEPOmgSiiOzlQ2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzk0MGEzZTEtNWQ3MC0z
MjZmLWJhZDUtYTM2ZjgxNmNmMzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrREYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADKGyndx5JAl7FzXVQ+RaWGvTmknVy8GVwDwEuu+eyDgjCEDsCPM70qP
ZaDtMx2czUpYWCmNEuJxlY63lbYIgAbAoMKOTuSb+WkkhgOum3fIdQqTDEqtXKsb
vjLrQsCSiVObIzW/dH+2ICuOSZrd1pIFdjs3E10lUHQHRB8EZGGIf5FNSxl3+sTe
hJuy6GkAlYXUuTKtU69ubxEgOyNxaKFDcBpEtLOaVZA2tr2a/yxmbhqWBsTktxqM
9AJVj7fRBEsXjczmhpbh9lbM1Ng6FBoCcByjy/Lk7ZnCQpICaWzvSXow8RzeKC8C
gHaEjcmdxAb96SBkKgM2zVXqfeS7iiM=
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:56:31 2026 by rpki-client