
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ba8cd25f-bad6-3cd1-8cca-ee5f2a9ca2da.roa
File: ba8cd25f-bad6-3cd1-8cca-ee5f2a9ca2da.roa (raw, json)
Hash identifier: VMk/UsAjHIQb6xBVVaJBWJUtVe7jTKsb8wOYRY5jBvE=
Subject key identifier: 11:1A:6C:5D:44:C6:BF:0F:73:22:EF:67:B3:DB:52:94:53:A5:53:01
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584CE54925078E14447AA2145D00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ba8cd25f-bad6-3cd1-8cca-ee5f2a9ca2da.roa
Signing time: Tue 17 Feb 2026 18:22:08 +0000
ROA not before: Tue 17 Feb 2026 18:22:08 +0000
ROA not after: Mon 18 May 2026 17:22:08 +0000
asID: 30036
IP address blocks: 173.27.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:e5:49:25:07:8e:14:44:7a:a2:14:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 17 18:22:08 2026 GMT
Not After : May 18 17:22:08 2026 GMT
Subject: CN=d7a086fc-5501-4915-a949-b4d4c5f282c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:09:9f:8f:42:c2:ab:80:af:88:8e:46:75:a1:
b5:3e:a6:5b:30:ec:af:7b:be:28:0d:f1:04:2a:2e:
b5:15:02:a5:47:5a:3e:c4:37:d4:a3:80:7a:a5:f9:
7a:60:f4:1d:df:e0:22:83:09:a2:64:da:1a:15:61:
c6:c9:ac:1a:7a:61:2c:89:79:d8:9b:f3:05:36:d7:
23:d4:ba:9e:95:56:8b:24:87:be:8f:68:a3:2c:19:
d7:67:f6:ed:16:15:5b:34:75:a2:4b:26:6e:16:e7:
fd:81:3f:b9:f2:ec:f6:c9:fd:44:20:18:53:eb:bb:
c0:c0:c1:92:88:bf:75:05:c1:76:fe:12:66:63:c8:
0c:38:d0:cb:dd:2b:7b:36:70:a7:02:6e:5d:3e:2c:
4d:4d:e2:3f:28:b9:d2:97:83:ab:bc:5c:10:7f:32:
09:a6:78:78:ce:81:9a:03:5a:9a:51:ef:b6:52:01:
bd:20:5b:31:a5:cd:1f:18:1f:3d:5d:7d:74:35:db:
c2:d0:42:50:fe:76:6c:34:cf:1d:60:0d:cf:88:aa:
ae:da:34:90:51:5a:b2:86:5d:40:84:34:a0:9a:f9:
53:8c:85:87:84:b5:5a:4d:3b:18:2f:f9:4a:ae:0b:
bc:63:38:20:ee:a7:00:b2:2a:76:cc:d5:c4:79:c5:
ff:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1A:6C:5D:44:C6:BF:0F:73:22:EF:67:B3:DB:52:94:53:A5:53:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ba8cd25f-bad6-3cd1-8cca-ee5f2a9ca2da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.27.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:58:3a:c9:84:82:60:50:61:e2:f4:33:39:6c:91:48:47:e4:
71:84:56:7c:2c:09:c0:ba:6f:37:a8:39:50:d0:de:7f:56:3f:
f6:a9:0e:10:0b:af:09:23:2c:f7:36:2b:77:a4:1a:fe:9a:3f:
5d:7c:24:27:f2:59:13:43:14:f9:29:2c:78:11:6a:96:98:2d:
89:28:05:64:75:6a:7a:49:d9:5e:26:8e:a6:c8:0f:14:d7:88:
7c:a5:a6:6a:cc:39:ed:b2:62:55:36:30:f9:b0:d3:f5:b9:7f:
ff:24:91:ba:05:07:15:74:80:28:be:4c:bd:32:aa:8a:93:5d:
13:c1:d1:f8:8a:1e:27:5a:da:d3:04:64:a1:de:ef:a2:a5:01:
74:d7:3d:94:62:0d:65:92:8d:f1:bb:09:42:86:88:cb:f6:a3:
e0:f1:2d:87:9c:bc:f0:b2:4a:cf:1c:ab:50:de:b6:f4:a8:d9:
b1:22:de:78:c2:8f:15:26:5c:14:37:ac:e8:9d:35:e4:52:c3:
f4:97:aa:31:e0:92:e8:aa:88:b5:84:ed:12:1e:09:45:ba:9a:
97:f5:1d:4f:6e:03:56:73:06:c4:73:53:85:b8:87:f7:46:22:
80:38:dc:43:14:cd:e2:c7:01:1d:41:b0:36:63:c8:75:df:49:
33:ab:35:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:23:05 2026 by rpki-client