
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfada9d9-01a0-38ca-8d0e-3c4e2459dc26.roa
File: cfada9d9-01a0-38ca-8d0e-3c4e2459dc26.roa (raw, json)
Hash identifier: 7wTTlarGuNY24fO3jHSIXYO2qtZ2uRhymSSZve87r2o=
Subject key identifier: CE:FA:41:75:68:B9:F7:AA:82:37:CE:A4:B8:96:5C:16:22:68:6A:17
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584EA78861A33808BB3CD0867608
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfada9d9-01a0-38ca-8d0e-3c4e2459dc26.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 19905
IP address blocks: 173.25.96.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:88:61:a3:38:08:bb:3c:d0:86:76:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=1ab611a9-adfa-4f66-a589-b85a3f0532af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d1:e1:6f:d2:94:66:06:8b:44:5b:72:d5:51:
0c:c5:57:96:0c:d7:fd:01:e4:57:55:3c:69:39:1f:
30:2d:49:ca:16:24:e1:c2:12:59:93:1c:6d:ce:02:
3c:09:20:53:cd:37:4f:38:aa:e8:97:b6:5c:fa:44:
d7:dc:aa:1e:7d:dd:32:c3:23:81:da:61:45:b4:d5:
01:a7:72:2b:7b:51:ec:2b:bc:ff:1c:04:3e:74:87:
67:fe:bc:44:08:05:08:85:0e:b0:cd:47:a8:98:cc:
a5:e5:ea:5e:e6:f0:ae:6a:4a:81:b0:47:0b:08:f5:
29:1b:53:65:5e:f4:2a:b0:71:69:c3:f8:77:56:65:
69:8f:1b:5f:0b:fd:20:9e:b0:66:a1:db:82:c3:1a:
6a:cb:3d:ef:4c:8f:68:f2:4e:20:84:7e:e2:40:ff:
fd:cd:20:39:3f:53:30:0c:d1:e2:d9:89:c3:94:22:
cc:77:53:1b:6c:49:4e:b8:1c:52:c0:7e:e5:1a:a0:
f8:39:97:3c:24:5f:1a:80:30:76:6b:72:40:90:6a:
9d:1f:7b:c8:32:25:a9:fe:df:a0:0c:6e:1d:77:0d:
f6:0d:f5:f3:1d:a3:cf:c5:50:9a:88:2f:dd:c0:68:
bc:20:92:72:61:08:7a:81:5b:56:8b:3d:0e:b0:82:
7b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:FA:41:75:68:B9:F7:AA:82:37:CE:A4:B8:96:5C:16:22:68:6A:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfada9d9-01a0-38ca-8d0e-3c4e2459dc26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.25.96.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:17:77:d4:e6:a9:f5:b9:a9:f2:f5:f6:0a:f6:7d:c0:22:71:
1c:a6:4d:83:4d:7d:bc:9d:e7:d2:c9:19:93:f6:8a:7e:99:da:
b3:24:b7:a7:c3:36:69:d3:28:64:e9:45:24:79:2b:9b:74:b3:
bf:40:41:3f:eb:bb:28:22:d9:0d:13:9c:50:6e:1a:02:31:7b:
6e:cd:e3:af:c1:69:40:20:ca:f1:96:ba:9c:d6:86:f7:76:04:
bb:c8:b3:67:ba:fa:4e:df:be:b1:49:a1:fb:1b:bf:e6:4b:74:
04:af:22:fd:80:03:e3:75:62:e1:21:7e:99:e1:61:1c:91:26:
65:2f:12:ea:56:19:ef:8a:88:9a:3e:f7:d5:05:f4:2e:42:13:
59:b0:ec:6f:88:33:a4:52:2c:ac:c3:3f:0e:29:62:35:19:91:
e1:42:47:36:cb:9f:79:c8:97:ce:01:75:3a:70:60:9c:0a:62:
4c:53:02:ee:fa:b5:48:47:e2:00:92:8b:a2:ac:7e:87:5a:e5:
f4:ba:1c:7b:20:fe:77:17:6d:37:47:f1:bd:74:db:bc:48:ab:
be:99:69:0d:7a:88:ff:a2:b1:c0:d1:93:9b:25:91:ca:53:16:
aa:73:fd:2e:0b:af:55:1f:95:05:38:8d:46:ad:75:dc:e5:27:
ea:2b:74:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:42:42 2026 by rpki-client