
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8376ab96-427f-3cf5-9685-2f52992eb56e.roa
File: 8376ab96-427f-3cf5-9685-2f52992eb56e.roa (raw, json)
Hash identifier: 6zLOHzFooennqLCwZwGH1xN8eMJ2sxjkGWQKGGfQWxw=
Subject key identifier: 28:03:87:B8:A7:25:86:90:36:0B:7A:33:E5:C9:57:16:50:AD:2E:81
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584DEB15E41D1FB257DB62474600
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8376ab96-427f-3cf5-9685-2f52992eb56e.roa
Signing time: Fri 22 May 2026 13:00:31 +0000
ROA not before: Fri 22 May 2026 13:00:31 +0000
ROA not after: Thu 20 Aug 2026 13:00:31 +0000
asID: 30036
IP address blocks: 173.31.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:eb:15:e4:1d:1f:b2:57:db:62:47:46:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: May 22 13:00:31 2026 GMT
Not After : Aug 20 13:00:31 2026 GMT
Subject: CN=4296e089-194e-4951-91a7-cbb2cf795fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f9:63:b2:bc:35:b5:28:50:28:1f:b5:30:e7:
66:70:03:9c:65:bc:6a:6b:83:ff:99:a1:97:94:d1:
f0:c4:35:8d:bf:b1:4d:1d:e2:0c:87:1b:78:86:49:
7d:a6:b4:1a:52:b4:d9:c2:a7:89:2b:fd:1e:00:a4:
46:7e:66:f7:6a:38:13:52:82:6c:9d:8f:d5:e3:fc:
e4:59:19:0c:4e:2f:44:d8:86:2d:a0:0f:2b:12:a3:
a4:3a:2d:f6:9d:7d:da:73:1f:81:28:b6:60:22:67:
de:c9:85:5e:22:18:6d:59:bd:f4:4a:ce:30:39:37:
e5:e6:d2:f4:da:30:ac:d7:03:94:58:0a:2a:af:e0:
44:01:14:a5:20:84:9f:ff:80:d5:7f:0d:7e:63:40:
83:5b:b9:2f:c0:33:73:b2:62:3c:55:9c:02:07:aa:
fe:e0:b9:9b:29:d4:60:01:3b:86:ca:ef:35:53:2a:
60:69:7d:70:a5:03:c2:7c:50:da:e0:64:2f:96:60:
03:dd:08:04:e9:29:ba:f8:66:4a:42:6b:12:62:19:
f1:4a:8b:e3:cb:4d:b2:5c:83:2b:ad:92:34:84:d8:
69:0d:1e:73:01:8f:9c:a4:d7:53:a4:cf:17:7e:49:
e0:f9:a9:eb:e0:2b:a7:46:8a:19:af:56:b8:5b:02:
57:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:03:87:B8:A7:25:86:90:36:0B:7A:33:E5:C9:57:16:50:AD:2E:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8376ab96-427f-3cf5-9685-2f52992eb56e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.31.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:66:08:34:db:56:22:7f:9d:2b:5f:40:d1:3e:63:fb:21:57:
cc:3a:11:0c:b0:a3:f8:2f:76:58:7f:fb:cd:ad:ca:5f:07:4a:
59:bc:27:b3:2b:13:43:8f:8e:3d:ad:68:65:d0:bf:a9:14:bc:
9d:84:cb:1f:c8:88:26:ec:f8:2c:33:7c:0f:bc:ac:e7:fe:1c:
a6:03:db:1a:71:37:b9:fd:5b:26:57:bd:d0:8d:a5:bf:10:25:
d5:21:d2:59:5a:a1:ab:9b:a2:7b:5f:58:2e:61:14:7c:d9:b0:
42:8f:ce:0a:69:e8:fa:b5:8c:59:7e:ca:b8:da:8f:d5:2d:ca:
21:88:04:d8:02:5e:20:83:49:67:2f:0e:4f:b9:61:c6:70:5e:
2f:78:e3:7f:13:8b:51:b4:27:c5:3f:23:99:6c:c4:a9:d7:cf:
76:db:aa:20:61:c5:df:d9:dc:6f:19:88:82:c3:d8:ae:3d:dd:
d6:cc:bb:ef:95:f2:98:63:eb:63:da:72:38:38:e9:0b:a0:54:
54:b8:80:f0:49:ca:c5:09:ae:2a:67:6f:29:61:a8:f6:57:82:
51:f2:63:15:a4:40:6b:12:df:b2:cb:a5:e9:ed:5c:04:92:b8:
81:91:4a:5c:aa:5f:78:fa:4d:8a:ba:e1:c2:ad:0d:97:64:7f:
8b:32:25:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:00:08 2026 by rpki-client