
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/42c9c1a9-bb84-3aca-841b-ec382dd6e768.roa
File: 42c9c1a9-bb84-3aca-841b-ec382dd6e768.roa (raw, json)
Hash identifier: 1SbzKeYFCdwv5+j8lpa5/UgrOxN6tbDZVnpZZ34oXHY=
Subject key identifier: 4E:E6:D3:5A:EF:07:DD:28:34:C3:20:07:0B:7D:B4:BC:AC:69:AA:19
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584DE6E5C863D38D8C30B1B7AF80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/42c9c1a9-bb84-3aca-841b-ec382dd6e768.roa
Signing time: Thu 21 May 2026 01:00:25 +0000
ROA not before: Thu 21 May 2026 01:00:25 +0000
ROA not after: Wed 19 Aug 2026 01:00:25 +0000
asID: 19905
IP address blocks: 173.21.96.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:e6:e5:c8:63:d3:8d:8c:30:b1:b7:af:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: May 21 01:00:25 2026 GMT
Not After : Aug 19 01:00:25 2026 GMT
Subject: CN=61fbd46c-9aec-462d-8cde-8f356ab57ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9c:7a:e7:a0:58:ec:b5:06:8c:d8:5d:b4:fc:
68:ff:a9:0a:42:43:7e:ea:f9:20:59:ef:46:00:38:
55:fb:e7:11:fb:43:cd:bd:ba:04:d1:c6:60:ad:8c:
72:a6:b3:b3:51:10:58:c7:d2:6e:23:81:b8:d1:52:
d3:e7:14:47:5f:0c:ee:64:d5:bf:09:1c:e8:0a:02:
f8:f8:f8:46:2f:bd:41:40:4d:8c:c3:cb:64:3d:c3:
d3:63:b1:96:80:dd:c9:fd:9f:9a:51:d7:55:60:8d:
7e:81:55:cc:e6:ed:11:a0:0b:e5:df:21:9f:47:34:
8b:30:e6:f1:91:fb:e3:ca:56:1e:6e:22:89:3f:d8:
63:1f:da:38:c0:9c:0f:39:66:de:51:9e:47:54:d6:
d1:4c:da:9d:c3:3f:92:69:a8:d6:cd:4c:3a:73:b7:
9c:ad:82:a1:cb:dd:20:90:ba:9a:e6:b5:49:a7:ba:
26:0e:98:0c:79:d9:f3:2c:c2:99:2b:ef:5d:6c:bc:
97:07:be:3b:4e:2e:94:8e:e1:2c:8e:45:2b:d1:1b:
4f:29:07:4f:26:40:73:83:32:7d:f2:44:4e:1c:5d:
8a:34:b5:e7:bb:4d:4a:c0:69:fa:a2:6d:ae:6c:f0:
4b:d6:08:d8:fb:40:df:34:24:f6:30:6b:d8:b6:0e:
1e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E6:D3:5A:EF:07:DD:28:34:C3:20:07:0B:7D:B4:BC:AC:69:AA:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/42c9c1a9-bb84-3aca-841b-ec382dd6e768.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.21.96.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:f1:96:52:10:f8:7c:72:1a:97:83:ea:3d:a3:a1:af:9c:37:
59:74:df:cc:b2:56:05:b9:03:79:72:07:b5:7e:fa:a3:be:73:
b1:1d:fd:da:ef:4d:e1:07:de:f5:9a:5c:76:3b:52:68:f2:97:
d6:d0:ac:31:0e:5c:be:1e:2e:fa:3c:22:be:62:4b:4b:9a:dd:
8f:f9:1c:b4:93:42:92:98:04:ec:93:fe:40:65:47:bb:ed:c0:
da:64:bc:ed:15:b5:be:f4:ae:a0:6a:42:fc:32:60:b5:1d:b5:
7f:1b:61:5e:60:ad:ab:ce:c8:b7:89:71:a9:50:cb:68:85:3e:
5c:d0:ee:4e:59:ec:52:5c:69:b2:d3:2a:a9:cc:cf:3d:53:89:
10:e0:a1:62:80:c2:d3:be:e6:e6:d9:77:de:ee:46:22:e0:59:
74:27:00:5a:d5:b2:92:a1:3f:0e:9e:e5:71:e5:d5:09:7c:ba:
10:81:3d:62:20:58:c2:c9:3b:57:21:46:da:23:8e:7f:45:25:
a7:a0:cf:0c:bd:f9:b3:bf:fb:24:9e:24:ac:d7:ed:21:44:4e:
68:c0:b8:9b:16:c8:da:aa:a1:0b:ae:19:5e:57:0e:da:14:30:
6b:e7:79:bc:e6:f4:68:c2:f2:0e:ba:17:90:2b:b0:fb:ab:e7:
27:16:2c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:33:29 2026 by rpki-client