
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a2081ccd-8130-3a5c-83d4-ae30c1ae4b5c.roa
File: a2081ccd-8130-3a5c-83d4-ae30c1ae4b5c.roa (raw, json)
Hash identifier: 8DPapTAqbCfIJZBN8a0tfNFGEAwPKO1M5ArTNt7f9PU=
Subject key identifier: 8A:6D:55:CD:23:35:D0:72:6E:93:F2:88:CD:6D:CD:84:8A:D7:D9:E4
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584E04361C4698B32FEEB28FB650
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a2081ccd-8130-3a5c-83d4-ae30c1ae4b5c.roa
Signing time: Sun 31 May 2026 13:00:10 +0000
ROA not before: Sun 31 May 2026 13:00:10 +0000
ROA not after: Sat 29 Aug 2026 13:00:10 +0000
asID: 30036
IP address blocks: 173.21.234.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:04:36:1c:46:98:b3:2f:ee:b2:8f:b6:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: May 31 13:00:10 2026 GMT
Not After : Aug 29 13:00:10 2026 GMT
Subject: CN=094d4a09-e920-4912-a44b-7430cf0d53e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3b:8d:e0:21:a4:c9:b4:cc:61:79:96:c4:a7:
f4:35:65:7e:8f:22:89:21:de:64:91:dd:d1:1b:c0:
12:19:47:eb:68:85:95:ed:3f:c2:d7:2c:d1:c7:4a:
05:f8:09:99:25:ae:35:e9:7f:62:cd:f1:e7:da:5a:
56:16:4d:7d:b3:43:96:3d:69:94:1a:fd:08:11:67:
c5:5c:73:ed:f5:09:26:a3:66:b9:e4:ef:c0:d0:f5:
f9:36:43:85:ae:55:19:a8:81:e6:05:97:4d:3d:7f:
9e:4b:9d:e5:bd:6a:4c:19:a7:66:d3:80:a1:eb:16:
2e:bb:69:3d:c0:f4:4a:21:d0:3d:1c:12:ec:21:1e:
23:ac:98:2f:03:cd:c9:69:56:90:06:bf:ae:7b:7f:
61:2a:58:85:63:98:9d:f5:c2:13:d0:cb:47:e2:e8:
e7:cc:ab:ec:f6:7b:d0:1d:f7:d8:0c:e0:ff:db:e9:
79:ca:1a:47:0a:e1:2a:d8:83:0d:98:83:78:95:25:
21:69:1b:20:2a:0d:e7:30:80:9c:fd:7c:a9:8c:88:
ed:8c:d8:11:6e:57:45:be:54:a5:57:01:98:78:a8:
8e:1c:da:e6:2c:83:93:8a:8c:e0:84:48:32:a9:a7:
b1:b8:2c:57:08:aa:d5:fa:65:60:60:25:16:bf:bb:
5e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6D:55:CD:23:35:D0:72:6E:93:F2:88:CD:6D:CD:84:8A:D7:D9:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a2081ccd-8130-3a5c-83d4-ae30c1ae4b5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.21.234.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:ea:d6:26:df:d0:23:89:6f:d4:0f:c2:65:e6:29:6c:10:50:
9a:f3:d6:13:b7:41:20:f7:a4:d2:94:dc:c0:e2:b4:0c:3f:21:
71:ff:bc:75:44:f0:37:38:65:8d:60:f1:c8:7e:cd:0b:e8:75:
7e:41:34:9c:5b:f1:80:21:76:84:31:88:5e:6a:cb:06:da:f5:
89:18:c9:cc:97:11:10:aa:27:13:30:ab:5c:5e:37:58:7e:78:
c6:0b:a9:89:ee:b6:c3:6c:c6:81:db:0f:fa:25:2c:8d:88:6e:
06:1c:91:d7:40:af:96:de:7c:76:b4:77:a6:61:a3:51:01:70:
f0:61:ec:5a:95:de:47:6e:7c:6c:fc:c5:de:a9:09:b8:59:7f:
21:b3:bf:70:79:f0:10:7f:95:28:8c:c9:09:8b:e5:74:05:5a:
bc:55:23:f1:9e:c8:67:29:2a:54:82:69:1e:78:3f:07:32:3b:
05:be:a8:32:c8:e9:f6:c8:5f:cd:12:de:ac:3b:e9:f7:29:3d:
c2:5b:74:e3:f1:1e:9a:6a:e9:97:17:a4:38:a6:24:0e:fd:7f:
98:0b:09:ba:86:74:5a:01:c8:cd:1a:82:26:6f:6c:1a:43:a8:
31:f1:5b:9b:cb:86:c5:8f:e5:ff:8a:ca:53:17:fe:3c:24:af:
ac:ce:a5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:12:42 2026 by rpki-client