
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ed67d5f7-25ab-3965-b617-25aa4f7810f3.roa
File: ed67d5f7-25ab-3965-b617-25aa4f7810f3.roa (raw, json)
Hash identifier: vRrnDrwAsZUMOE76NvHbNY5qyC0M90sNFLHr3yCfoM8=
Subject key identifier: AE:4B:7D:DC:F4:89:A2:C2:7A:59:29:9A:D7:3B:54:6A:97:35:D9:83
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584E059C5C72C7E1A489FFEB5FE0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ed67d5f7-25ab-3965-b617-25aa4f7810f3.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 30036
IP address blocks: 173.28.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9c:5c:72:c7:e1:a4:89:ff:eb:5f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=3148c41f-46ff-40d3-8cb0-a96df83d2f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:da:16:3f:79:06:d3:3b:f7:0a:2e:64:56:08:
3a:e0:9c:6c:2a:4e:aa:2c:ba:30:06:e7:5f:92:8f:
d0:19:4a:dc:57:34:97:c0:33:4b:01:1f:f0:b5:71:
9f:9d:5b:c4:a7:34:3e:cc:31:9e:af:bf:f2:be:a1:
b0:fa:b1:c2:8a:97:91:b9:b2:9c:57:dc:56:be:44:
0e:80:3b:10:a6:42:73:ea:a8:c1:80:5f:5a:0f:1a:
ec:fb:36:10:1f:43:23:10:2d:4b:c1:4b:50:02:08:
77:9e:a7:16:ee:7a:cd:f4:0a:f4:da:98:f1:82:53:
97:48:90:0b:bd:da:f1:5d:35:a5:05:75:58:e5:b6:
11:a5:0f:82:f8:d9:2b:dc:59:ee:6b:43:e5:a5:27:
43:81:80:cf:f7:d2:cb:ec:4a:78:21:b3:bb:d3:82:
e6:58:8c:88:3e:6b:e4:e2:f1:41:37:c5:06:68:fe:
68:3d:12:ad:d7:70:70:2f:a5:6d:ed:ee:7a:f7:65:
01:ad:a3:e7:ec:1b:16:5c:82:6d:4d:03:81:86:fb:
91:8d:35:13:f9:d4:86:0b:38:31:15:de:3f:a1:8b:
84:96:da:2f:a9:52:4b:57:f1:26:e6:bf:af:04:e4:
82:84:95:e7:d2:23:09:52:e2:f8:d1:a4:e0:69:97:
4c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:4B:7D:DC:F4:89:A2:C2:7A:59:29:9A:D7:3B:54:6A:97:35:D9:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ed67d5f7-25ab-3965-b617-25aa4f7810f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.28.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:86:b1:11:bf:47:d2:77:e3:2c:be:f2:b0:0f:e9:45:83:8d:
26:cb:22:57:8b:e3:5d:0d:f4:29:ae:58:ed:57:14:2e:ca:71:
c6:07:fb:df:50:bb:33:6e:9e:c6:9e:4e:7b:e6:a8:01:b9:21:
08:a6:cf:6d:80:9d:ea:75:43:de:9d:5b:0f:e8:d0:b9:e4:a2:
15:36:f5:1e:bb:d8:16:e9:67:a5:26:36:eb:d5:75:ed:7d:b6:
00:e7:4d:48:ef:33:f9:54:6f:0d:82:0d:86:0e:c8:c3:ec:33:
fd:62:75:ba:ce:1e:a5:9a:fe:39:c2:2c:44:ce:42:7b:a1:16:
30:2f:c9:29:19:33:da:4b:3c:ae:70:d4:c1:b4:3e:38:41:bb:
03:8d:e8:79:89:cd:08:c9:a8:97:d4:49:20:d4:94:f3:ec:e2:
aa:c2:3c:eb:53:bd:7c:9a:5c:3a:73:e5:a1:25:5f:90:9b:88:
b7:35:a0:a1:5b:c3:2f:4e:83:79:f3:f2:5e:a1:db:a7:c9:44:
82:65:fd:06:07:0a:f3:d9:4f:08:8b:7f:3d:d6:18:1d:f4:af:
4b:0d:88:53:5f:06:b0:0e:11:9b:de:eb:16:f0:4b:4f:37:1b:
92:65:2e:a8:59:5e:d6:23:6c:cb:c4:96:ba:06:72:20:3f:94:
8d:42:6a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:28:23 2026 by rpki-client