
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c834b3e-e46c-3687-a3e5-ce0abb44cc48.roa
File: 3c834b3e-e46c-3687-a3e5-ce0abb44cc48.roa (raw, json)
Hash identifier: DQCiqJsmDafoOlozTXoCtsuQs/e36+PYrNkXOOWOMk8=
Subject key identifier: B4:0C:F6:93:F6:E1:8C:6B:92:58:EA:D1:22:6A:F1:78:6B:5A:53:52
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D0647B69DF117FB229E0E1FE0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c834b3e-e46c-3687-a3e5-ce0abb44cc48.roa
Signing time: Sun 01 Mar 2026 14:00:41 +0000
ROA not before: Sun 01 Mar 2026 14:00:41 +0000
ROA not after: Sat 30 May 2026 13:00:41 +0000
asID: 19905
IP address blocks: 173.24.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:06:47:b6:9d:f1:17:fb:22:9e:0e:1f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 1 14:00:41 2026 GMT
Not After : May 30 13:00:41 2026 GMT
Subject: CN=17c2e301-1cd1-4b63-a9a9-4c6408f108c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a4:03:69:f8:0f:b5:3f:eb:b4:87:32:f6:63:
55:c4:c9:ee:ae:a1:99:3b:d1:8a:a5:29:b4:e2:ce:
72:81:0c:2e:84:b1:f1:96:89:43:86:0e:5c:94:e9:
c6:7c:ad:6b:56:78:a2:52:42:a6:e4:5b:07:e0:fb:
ed:53:27:20:b9:70:cf:86:04:ce:70:d2:bf:13:3a:
86:8b:89:f0:23:3c:14:8b:83:be:50:95:ab:85:20:
a9:73:6c:05:94:cb:61:eb:43:f2:83:e7:72:ad:9a:
4b:6d:7b:a1:5f:83:e7:b6:be:28:94:14:a9:91:c3:
1f:43:f3:86:30:85:10:69:61:ae:27:77:bc:e5:e2:
ae:d4:75:8e:9f:51:d6:f6:c4:03:15:fa:de:57:92:
64:f8:ee:e6:82:e7:23:ab:7b:59:c6:20:e2:36:b8:
34:c1:5a:dd:75:77:02:ff:37:86:ca:ba:4a:c1:69:
b7:36:8e:fb:c4:3b:dc:5e:bb:e9:28:da:93:42:95:
54:ce:10:1b:92:c7:66:9d:8c:f3:d6:01:7e:85:c5:
07:0b:78:8f:a0:ca:97:6c:da:af:0b:80:e3:dd:7c:
36:50:48:bc:e8:d6:ea:50:93:7d:fa:1f:7e:1b:7f:
9a:b4:fc:16:60:20:72:92:0f:46:d4:8e:dc:80:11:
e9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0C:F6:93:F6:E1:8C:6B:92:58:EA:D1:22:6A:F1:78:6B:5A:53:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c834b3e-e46c-3687-a3e5-ce0abb44cc48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.24.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:6e:f9:8e:fe:73:3d:2f:26:28:3c:ba:20:1c:42:0e:2d:83:
29:99:57:1a:db:47:cb:80:df:ff:df:dd:99:6e:82:39:b4:36:
ed:6a:47:4a:01:da:62:df:bd:a7:44:a6:00:d9:be:9b:df:92:
ee:8c:46:7f:dd:a5:53:4e:1b:59:e8:3f:3f:8b:2d:45:d5:24:
38:4c:6d:9a:4b:ed:c4:8b:24:81:63:39:01:2e:92:d7:94:1b:
a5:87:ff:6a:da:bb:07:c5:ba:5e:ed:9a:32:a9:dc:4a:6d:37:
4c:af:68:cb:40:b1:d2:64:b8:f7:87:e8:3a:73:0b:6d:97:77:
94:32:26:a3:ab:59:df:af:a5:67:2d:5f:dc:c8:51:a4:14:f8:
50:9c:79:ef:e7:9c:ae:6d:c9:eb:b0:39:6c:63:22:be:de:07:
d6:d4:69:73:ae:dc:c8:cf:6a:f6:1a:63:fe:4f:d2:ea:d4:63:
52:13:5b:5c:43:1d:5a:ef:b5:a7:28:4b:47:a5:0f:85:61:b5:
55:37:a3:f7:41:d1:e8:49:a1:d3:52:d2:71:70:8e:96:e9:62:
cc:35:83:c7:18:65:92:6f:34:da:a2:b2:ed:ba:fb:16:a0:2a:
a5:22:9e:35:ca:4c:ee:37:ee:84:00:57:10:14:ea:e7:aa:a8:
61:35:fa:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:06:39 2026 by rpki-client