
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9d2f1c98-8b81-3a00-969c-595615b80cfd.roa
File: 9d2f1c98-8b81-3a00-969c-595615b80cfd.roa (raw, json)
Hash identifier: BFjpPNwPEekxoFXcje3L1tBjz3m/NpbQ+vPW6S7Szgk=
Subject key identifier: 59:51:81:9A:5A:0A:97:C0:08:6F:54:7D:05:4F:36:E8:96:5C:C1:E5
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D0647B8B61A467965C1DCB000
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9d2f1c98-8b81-3a00-969c-595615b80cfd.roa
Signing time: Sun 01 Mar 2026 14:00:41 +0000
ROA not before: Sun 01 Mar 2026 14:00:41 +0000
ROA not after: Sat 30 May 2026 13:00:41 +0000
asID: 19905
IP address blocks: 173.27.24.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:06:47:b8:b6:1a:46:79:65:c1:dc:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 1 14:00:41 2026 GMT
Not After : May 30 13:00:41 2026 GMT
Subject: CN=aca3c772-ae54-45fe-90aa-dc3031c40bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:69:0b:6e:6b:ad:f0:68:cd:d6:99:e5:36:bc:
75:f6:6c:9a:c1:4a:97:8e:11:83:e0:17:c9:8f:a7:
77:e2:38:1d:c3:0c:30:ad:df:8f:62:12:a4:00:80:
0e:e0:72:bf:ac:f5:a1:d0:a8:72:26:3d:fd:ba:bc:
7d:20:6f:17:34:43:e2:c0:d3:c6:10:10:cc:98:f3:
2e:f5:43:7a:ea:db:51:5b:db:3c:72:9c:4e:7d:0f:
0d:85:4b:41:da:bb:d6:03:30:2c:2c:0f:43:51:2a:
eb:d2:d7:45:41:b4:9f:ee:8c:ea:70:4f:26:96:69:
8d:df:97:57:53:bf:3f:a8:97:81:8c:11:f5:ff:e8:
a7:d8:05:f4:cb:19:3b:f0:0b:1f:e2:4a:99:bc:c9:
07:d0:ee:f6:ba:ce:69:3c:47:c2:42:0a:96:9b:46:
e1:c8:93:04:ae:bb:fa:88:26:4b:d3:ac:5f:a8:42:
14:18:b4:ed:3b:99:71:06:d7:9a:22:32:89:0e:50:
2e:2c:cc:4e:c2:70:19:46:9a:67:be:91:d6:23:33:
02:9a:ca:e7:19:97:7d:5b:ce:ce:8b:0e:d6:ec:54:
95:5f:1a:88:cf:f8:67:65:4a:8e:9d:54:45:32:9a:
46:09:ac:fb:23:bf:01:17:d1:f8:4a:24:f1:01:c2:
de:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:51:81:9A:5A:0A:97:C0:08:6F:54:7D:05:4F:36:E8:96:5C:C1:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9d2f1c98-8b81-3a00-969c-595615b80cfd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.27.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:f8:df:bb:d6:dc:4f:6b:eb:d9:5f:7d:ff:b0:36:7f:6e:07:
b7:10:68:63:fc:f1:34:cb:b4:0d:11:17:77:1e:c2:9b:c5:5a:
8b:11:0b:bd:1c:51:b4:98:43:8a:c8:95:3f:1c:ce:f5:d9:47:
f6:bf:33:e5:cc:8e:59:3b:0d:7d:6f:6f:8c:b9:06:fd:bf:d0:
01:15:ba:d0:cf:cf:00:a2:47:ff:dc:b6:e0:f9:5f:96:73:65:
7e:91:b1:78:ce:27:72:bb:b1:be:72:df:e2:64:e9:db:43:1c:
e4:80:c6:d1:6f:18:4b:83:86:c1:a3:02:a2:18:b8:9e:b8:dc:
99:86:e6:c3:35:e5:21:38:ee:b8:fd:85:a3:62:16:70:4a:7c:
1b:53:a2:af:6c:b5:b9:7c:0c:1a:f2:36:ab:e8:d0:4c:0a:41:
48:e4:c3:e7:d9:d0:66:4a:45:85:62:ad:07:d3:10:1a:c7:23:
c5:68:90:f7:5c:78:e1:53:a6:76:12:a4:86:68:ad:73:72:c9:
2a:78:79:06:13:66:35:48:93:7c:c3:65:83:da:e7:d8:aa:58:
d4:2d:2e:c7:c1:20:af:36:19:f9:0e:68:c2:d9:7b:55:c3:24:
a4:4a:1e:c2:94:dd:bb:ff:88:03:e3:db:e8:17:f5:f9:2e:bc:
a7:22:10:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:43:30 2026 by rpki-client