
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4621b67f-9370-3400-8ca6-4dae26955529.roa
File: 4621b67f-9370-3400-8ca6-4dae26955529.roa (raw, json)
Hash identifier: IWcRtiEED49FucAWhzANb8+HiN/bBGlrEzLfz+FlJWI=
Subject key identifier: C6:84:FE:66:7E:93:3B:28:9B:D1:8D:B3:29:1D:B8:B4:C3:A5:22:0C
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584CFDE7A9B49947C4571218D5E9
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4621b67f-9370-3400-8ca6-4dae26955529.roa
Signing time: Thu 26 Feb 2026 14:00:40 +0000
ROA not before: Thu 26 Feb 2026 14:00:40 +0000
ROA not after: Wed 27 May 2026 13:00:40 +0000
asID: 30036
IP address blocks: 173.22.136.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:fd:e7:a9:b4:99:47:c4:57:12:18:d5:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 26 14:00:40 2026 GMT
Not After : May 27 13:00:40 2026 GMT
Subject: CN=7e26df06-daed-4a2a-9feb-bcf80cf8e31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d8:a7:6f:45:fd:b5:b4:f0:2f:72:ea:3b:f7:
41:46:43:ce:fe:c3:ef:46:ba:cf:03:e1:4d:27:d9:
23:cf:4b:61:cb:2a:3a:57:11:b0:6d:68:fe:da:a3:
ad:bb:76:cb:5b:b8:88:8f:ed:91:e5:92:ac:62:f1:
8e:a3:98:4f:d6:e4:e1:0e:4a:d7:39:a9:3d:75:9f:
8a:9c:1e:cc:b7:a4:91:ce:30:3b:cc:8a:55:cb:6c:
be:4f:07:9b:3f:a9:85:8a:58:5b:f6:eb:42:42:0a:
5f:83:81:0b:4a:58:19:ac:a5:47:45:fd:05:13:72:
b7:e7:04:2f:c5:a9:6f:40:48:1b:cb:a0:35:3b:2e:
34:ca:ac:4c:53:73:b7:5c:24:19:e3:f1:e6:38:98:
82:78:46:de:e0:09:7d:59:2f:7c:21:9b:d5:b8:4a:
2a:f8:ca:fc:6f:5d:c4:ed:e2:a8:04:ea:08:e2:75:
95:e8:23:7d:43:87:6f:0f:91:a3:75:c1:4a:06:8c:
4c:c1:33:66:2c:89:d2:7a:db:1c:66:81:29:d1:48:
c2:4a:dc:a7:df:20:a2:10:8e:ce:e5:97:74:66:27:
f6:43:a0:4b:85:63:91:d5:99:04:aa:f9:94:78:c2:
25:6b:76:0d:52:47:20:c9:22:07:21:fd:3f:5c:59:
10:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:84:FE:66:7E:93:3B:28:9B:D1:8D:B3:29:1D:B8:B4:C3:A5:22:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4621b67f-9370-3400-8ca6-4dae26955529.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.22.136.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:02:c0:c9:a1:2f:27:85:86:2b:7f:e2:a6:3a:3f:09:2b:de:
6d:f6:9b:d2:ee:c6:50:76:4d:e1:ab:a6:19:30:ef:16:68:e3:
8e:da:05:1f:6a:4a:19:9d:9d:52:30:48:ed:f1:f3:d4:09:bc:
c1:25:b0:a4:bb:94:6e:ac:b7:5f:25:fa:6f:9a:e1:78:3a:56:
f2:fb:aa:3d:a2:22:a9:66:da:b3:27:b3:4c:76:42:a9:71:9a:
78:ec:57:47:42:60:b5:05:de:da:30:07:d2:6b:c7:06:7e:3a:
b5:60:a7:01:a2:01:56:fe:92:f9:1c:dd:53:09:68:de:f5:34:
23:9f:8f:87:17:7e:94:0e:12:74:5c:07:28:17:21:14:08:f4:
df:9c:ff:63:c7:d8:e5:48:9d:f6:1c:41:df:6b:1d:11:24:f5:
d5:51:dd:cb:af:0c:9d:54:ad:c3:10:bc:e1:7f:66:36:fe:24:
83:ed:a7:f4:ec:8a:d3:7b:bf:45:78:86:2b:98:3a:d3:ad:ca:
a7:c0:17:17:81:9b:77:f1:47:85:b5:34:68:bb:06:8e:56:81:
1b:78:5c:89:a8:8a:2e:3c:65:03:07:73:fc:1f:fe:3c:a3:0f:
ff:cc:8b:8e:63:d7:a2:5f:43:1c:ca:d8:9e:80:64:0c:67:59:
e4:91:c7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:20:27 2026 by rpki-client