
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8c2898a9-cad9-308f-9cf2-148979fb3943.roa
File: 8c2898a9-cad9-308f-9cf2-148979fb3943.roa (raw, json)
Hash identifier: QcIIThzulviggYo0Samj1i6ViyEogyt1KTAdBd17xz4=
Subject key identifier: 14:E5:1A:25:B1:4A:B0:8C:5A:43:A2:8E:01:40:B1:2C:6E:B3:E7:FB
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584E1A1438628F7375618BE28440
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8c2898a9-cad9-308f-9cf2-148979fb3943.roa
Signing time: Mon 08 Jun 2026 09:00:12 +0000
ROA not before: Mon 08 Jun 2026 09:00:12 +0000
ROA not after: Sun 06 Sep 2026 09:00:12 +0000
asID: 19905
IP address blocks: 173.28.160.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:1a:14:38:62:8f:73:75:61:8b:e2:84:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jun 8 09:00:12 2026 GMT
Not After : Sep 6 09:00:12 2026 GMT
Subject: CN=34d7724a-32b8-4482-9017-a80abae367ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:65:e4:80:aa:87:58:56:d0:07:dc:12:1a:71:
31:1c:dc:96:49:9d:51:f4:57:99:7b:f9:2f:5c:6f:
db:16:99:ee:97:c8:65:fd:db:20:73:14:77:de:9b:
e8:8c:60:f0:1f:64:4f:e2:a4:cb:40:5a:62:2f:e0:
19:21:db:53:5f:6f:81:46:b3:40:63:12:6d:7f:c8:
8e:b8:75:ff:9a:14:dd:8c:2b:73:3e:bc:8d:d8:ef:
4c:3c:f3:ab:4d:3f:29:29:f5:39:38:90:5c:ee:16:
68:81:63:a8:2a:bd:18:ca:85:2a:9f:03:68:1e:ad:
49:99:41:bf:ac:5b:15:4a:7d:07:68:42:75:2f:15:
c8:5e:8c:ac:dc:a2:72:1e:6f:9d:67:57:f8:42:b7:
63:46:d9:ca:4f:12:76:89:6b:e1:cd:c0:e6:9f:9c:
0e:ca:99:a5:52:d9:13:6a:fb:8c:09:54:61:ac:52:
88:53:a2:0c:62:77:13:54:c5:b5:92:2a:d9:81:83:
63:7e:53:eb:3f:b8:2a:bf:ed:f2:15:2a:52:ab:06:
e4:e5:2c:36:47:84:6b:30:34:e2:03:70:c4:ed:55:
af:15:ab:f9:d9:3b:d4:ee:27:4e:fe:52:28:da:3c:
45:0d:df:2f:a7:f5:c9:b0:0e:1e:92:7f:14:45:cd:
21:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E5:1A:25:B1:4A:B0:8C:5A:43:A2:8E:01:40:B1:2C:6E:B3:E7:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8c2898a9-cad9-308f-9cf2-148979fb3943.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.28.160.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:5c:43:2a:9f:b1:69:83:1b:0e:e4:bd:23:30:10:7d:58:38:
1b:80:69:5b:52:72:78:b9:25:fa:06:30:98:89:44:48:f9:e2:
dc:de:83:03:2f:3e:af:d7:6c:ce:a4:ad:f7:8c:44:09:16:ef:
79:84:5f:71:a3:dc:1b:4c:28:3b:56:32:35:88:23:34:a9:b6:
80:57:68:5e:a4:e2:1f:d3:dd:43:1e:06:00:aa:65:90:d1:8e:
55:08:5e:de:21:01:69:57:b0:54:8f:e2:c9:a7:c4:24:45:8b:
58:61:12:d4:c7:89:09:30:45:b4:c4:8b:a2:87:a6:37:52:0f:
b5:ef:00:f2:8c:47:16:5a:40:23:af:fc:47:e4:cd:73:33:da:
d1:ea:2b:7a:cf:68:19:f0:4d:55:1a:58:ed:47:39:c6:59:dc:
46:f3:b7:03:f8:b3:da:74:70:09:1e:a7:19:44:04:26:81:80:
83:8b:45:73:cd:d4:6b:ef:0c:57:3b:12:ab:18:10:b1:cc:6e:
4b:0d:cc:e1:dd:02:b8:7c:dc:58:36:83:ff:54:49:60:c8:e0:
2f:7e:ab:0d:9d:88:af:fc:fb:a8:83:c9:59:2d:ac:82:df:9d:
dc:e5:02:06:43:98:da:89:ba:4b:e7:1d:09:63:4b:7f:4e:c7:
8f:a1:2d:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4aFDhij3N1YYvihEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDYwODA5MDAxMloXDTI2MDkwNjA5MDAxMlowLzEtMCsGA1UEAxMk
MzRkNzcyNGEtMzJiOC00NDgyLTkwMTctYTgwYWJhZTM2N2VlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2XkgKqHWFbQB9wSGnExHNyWSZ1R9FeZe/kv
XG/bFpnul8hl/dsgcxR33pvojGDwH2RP4qTLQFpiL+AZIdtTX2+BRrNAYxJtf8iO
uHX/mhTdjCtzPryN2O9MPPOrTT8pKfU5OJBc7hZogWOoKr0YyoUqnwNoHq1JmUG/
rFsVSn0HaEJ1LxXIXoys3KJyHm+dZ1f4QrdjRtnKTxJ2iWvhzcDmn5wOypmlUtkT
avuMCVRhrFKIU6IMYncTVMW1kirZgYNjflPrP7gqv+3yFSpSqwbk5Sw2R4RrMDTi
A3DE7VWvFav52TvU7idO/lIo2jxFDd8vp/XJsA4ekn8URc0hLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBTlGiWxSrCMWkOijgFAsSxus+f7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGMyODk4YTktY2FkOS0z
MDhmLTljZjItMTQ4OTc5ZmIzOTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRygMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA9cQyqfsWmDGw7kvSMwEH1YOBuAaVtScni5JfoGMJiJREj54tzegwMv
Pq/XbM6krfeMRAkW73mEX3Gj3BtMKDtWMjWIIzSptoBXaF6k4h/T3UMeBgCqZZDR
jlUIXt4hAWlXsFSP4smnxCRFi1hhEtTHiQkwRbTEi6KHpjdSD7XvAPKMRxZaQCOv
/EfkzXMz2tHqK3rPaBnwTVUaWO1HOcZZ3EbztwP4s9p0cAkepxlEBCaBgIOLRXPN
1GvvDFc7EqsYELHMbksNzOHdArh83Fg2g/9USWDI4C9+qw2diK/8+6iDyVktrILf
ndzlAgZDmNqJukvnHQljS39Ox4+hLXE=
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:26:58 2026 by rpki-client