
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/67c4a8c0-69b9-3096-b820-f43a6dba354c.roa
File: 67c4a8c0-69b9-3096-b820-f43a6dba354c.roa (raw, json)
Hash identifier: dit9eFGsyNUEOyUqnevGnYJ8D+jZlfm9Wm1hy0CzFOo=
Subject key identifier: F4:F2:DF:D2:14:12:17:3C:50:76:98:04:08:57:F7:B0:2D:2A:36:21
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584E1A1435BE9301593DC65E7E00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/67c4a8c0-69b9-3096-b820-f43a6dba354c.roa
Signing time: Mon 08 Jun 2026 09:00:12 +0000
ROA not before: Mon 08 Jun 2026 09:00:12 +0000
ROA not after: Sun 06 Sep 2026 09:00:12 +0000
asID: 19905
IP address blocks: 173.28.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:1a:14:35:be:93:01:59:3d:c6:5e:7e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jun 8 09:00:12 2026 GMT
Not After : Sep 6 09:00:12 2026 GMT
Subject: CN=17872232-431a-479e-b056-3957170ccd94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:79:90:71:85:67:d6:19:45:be:e2:49:38:af:
ac:0c:1c:a2:45:d0:d8:d4:2b:5f:13:d5:a1:d5:7b:
61:94:62:c6:46:13:9d:6d:c1:67:ff:66:3e:4e:25:
9f:a3:9f:ea:3e:26:07:24:bd:a4:8e:3b:dc:60:39:
ab:6f:41:0e:d7:c8:08:c1:ae:79:5a:35:fd:cf:15:
85:32:93:54:3c:92:c2:f8:9c:96:59:97:2d:f9:fd:
b2:b1:d2:71:c5:86:92:5f:c4:b9:e3:e8:41:fa:73:
bf:9e:e3:12:b7:57:39:de:80:46:49:8d:91:eb:ef:
ef:27:d7:32:d1:fc:6b:2e:c3:fc:ee:d2:6d:96:1f:
ac:84:72:7b:e1:b1:b9:d3:46:57:e6:48:66:bc:1d:
cc:c4:95:f7:9e:d8:69:7c:2f:0d:7f:4e:ca:60:72:
4e:4d:47:2c:0e:2c:53:83:b4:24:11:2c:1c:05:9d:
2d:1b:ad:48:99:d1:ec:a7:76:89:2f:95:68:50:9a:
9a:4d:e6:55:b7:16:62:b3:ea:aa:3e:ed:af:7a:37:
62:35:b4:85:a5:e2:1c:5f:2e:55:59:02:a9:31:b0:
81:ac:35:0a:82:ae:2d:ea:d1:b1:65:3b:6b:e1:83:
df:df:af:e1:73:73:6d:bc:84:fb:12:55:4a:8a:08:
73:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F2:DF:D2:14:12:17:3C:50:76:98:04:08:57:F7:B0:2D:2A:36:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/67c4a8c0-69b9-3096-b820-f43a6dba354c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.28.244.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:40:86:74:cd:10:e9:31:7b:45:aa:ed:38:2b:fb:69:99:ab:
18:fb:c9:16:08:f9:d9:a1:5f:70:52:bb:b8:2f:a1:f4:79:a4:
33:00:40:8b:c2:2a:1c:5d:3d:f0:5f:ea:0e:5f:e7:8e:6d:dc:
d9:db:d9:c2:48:55:ea:40:f8:b7:8e:7a:3b:05:21:d4:00:c9:
f2:45:e7:1c:53:21:1c:99:7c:ff:eb:81:e5:8f:2b:db:c5:b0:
d0:80:b5:84:95:22:22:a4:e3:e9:bc:a4:9d:96:a3:4a:9f:4a:
e2:5b:4f:f4:04:69:73:aa:75:aa:51:02:28:ce:25:ac:6e:f1:
4a:96:38:de:e1:0a:ff:3c:fd:36:cb:15:a9:18:c0:31:40:65:
08:be:00:19:71:f3:0c:c9:86:97:95:43:35:0b:51:64:44:39:
af:0b:72:2a:ee:a7:e7:45:d3:0c:d3:67:c5:67:11:2d:e6:25:
29:88:d0:95:e1:8a:9e:39:f7:f4:33:54:40:9d:a2:ee:29:c4:
1d:bd:64:69:ed:97:96:e0:b3:38:94:7e:7d:bf:cf:53:ea:7a:
f4:33:38:0a:a8:2e:1a:42:62:24:47:9e:f5:11:d4:bb:d5:76:
f8:f7:ad:50:5f:94:9e:35:41:69:e2:b6:47:11:22:a3:a5:20:
3d:4a:c3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:13:33 2026 by rpki-client