
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/94b76c04-841e-3278-b45c-572290b4c7b8.roa
File: 94b76c04-841e-3278-b45c-572290b4c7b8.roa (raw, json)
Hash identifier: ENd3jF+FFPry8h8nC3L2yxV9+vgmEXjzMiA9CAoEPzw=
Subject key identifier: 8C:73:74:6E:75:10:8A:B0:66:1C:50:25:02:08:8F:D4:C5:D4:AD:CD
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D0647B837D13AA6445CB2CB00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/94b76c04-841e-3278-b45c-572290b4c7b8.roa
Signing time: Sun 01 Mar 2026 14:00:41 +0000
ROA not before: Sun 01 Mar 2026 14:00:41 +0000
ROA not after: Sat 30 May 2026 13:00:41 +0000
asID: 19905
IP address blocks: 173.28.108.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:06:47:b8:37:d1:3a:a6:44:5c:b2:cb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 1 14:00:41 2026 GMT
Not After : May 30 13:00:41 2026 GMT
Subject: CN=30cc85aa-5176-4fdc-ab2f-a2ad99b3958e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:23:44:44:97:85:42:a5:92:c9:9e:a6:0d:5e:
e0:7d:42:77:ce:d6:20:00:fa:c6:ff:27:c9:66:2b:
90:b7:56:4e:5b:3d:e6:35:31:88:9e:53:2f:c3:de:
16:fa:22:90:78:46:8e:07:88:de:b5:c1:90:03:18:
d9:a3:69:41:3d:3c:cc:3f:08:cf:10:b9:0d:b9:3e:
8e:6e:49:a0:58:15:8f:d5:b3:c2:d5:f4:84:87:40:
f9:dd:3e:5b:61:ec:e3:ff:2d:b8:e6:7a:71:41:55:
d9:df:47:4d:c8:88:a4:fc:25:fd:b0:90:2b:db:8e:
7a:ee:f3:92:c9:b5:bc:f4:78:d7:4d:92:00:20:62:
ba:02:68:ad:e1:63:8a:8f:9e:d6:df:a0:fc:0e:57:
29:23:c0:ab:3a:17:fe:7c:00:37:50:f2:94:49:ba:
0e:cd:9f:f7:91:57:ed:85:79:5b:d4:b0:75:83:1f:
03:ea:68:91:1a:39:d2:ce:8a:45:21:78:a8:43:2a:
55:f8:f3:8d:61:57:c3:7c:cc:c3:17:ef:01:32:06:
d6:87:7c:c5:a1:f1:ad:5d:39:db:28:10:4b:bb:05:
e9:80:a6:b7:16:b5:4c:53:91:96:4f:27:f9:1d:4a:
44:ac:49:b7:17:49:5d:e0:b3:e1:f1:ad:20:81:09:
3e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:73:74:6E:75:10:8A:B0:66:1C:50:25:02:08:8F:D4:C5:D4:AD:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/94b76c04-841e-3278-b45c-572290b4c7b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.28.108.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:f2:4d:61:35:4a:14:ff:d5:47:80:7b:b8:95:f6:c0:63:56:
cf:c5:ce:25:0c:aa:f1:8e:e3:fb:53:5c:c7:a0:10:93:74:07:
b8:85:86:b8:4d:44:66:ec:e7:cd:c9:b3:5c:7e:32:84:c6:69:
c2:d6:25:1c:07:57:49:21:d9:1a:58:7e:1c:a7:29:8b:07:06:
28:d8:ef:b0:75:11:da:97:fa:ad:68:b6:86:fe:9d:64:e1:e9:
f8:68:59:aa:0e:18:8c:99:81:d4:9e:86:3d:80:54:3d:4d:70:
93:51:45:de:5e:06:a7:d8:8b:7e:86:6e:99:6b:81:48:ee:8d:
9c:70:c1:39:72:83:e8:16:33:db:ee:9d:32:8c:cf:38:ba:73:
ac:ae:63:83:3c:c0:8f:55:10:8c:46:de:8d:9a:53:92:24:27:
77:95:63:87:95:e1:0f:93:ca:2f:a8:00:f5:51:ed:5a:ba:c1:
6c:aa:3a:b5:6f:69:07:8e:33:be:ca:00:ee:f1:a9:d0:c8:76:
f9:e1:b5:9a:b0:09:37:d5:ab:3c:8d:31:5e:a7:81:ef:33:7e:
23:0c:e7:b7:10:f8:ce:3c:cf:fc:7b:c8:94:df:ca:fe:31:39:
2b:72:96:97:91:d9:93:88:dd:65:7c:ef:ea:fd:0a:f8:ba:7c:
70:6e:bb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:51:44 2026 by rpki-client