
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f296c396-1442-32eb-b6ae-430a94b7a364.roa
File: f296c396-1442-32eb-b6ae-430a94b7a364.roa (raw, json)
Hash identifier: +b0/gF8wuEoOdCDVfT0qwpJNhCCvASmoNdhTb3H8BgQ=
Subject key identifier: D3:7D:E7:96:FB:91:4A:92:6F:74:9B:D8:B6:35:AC:DF:6D:CF:C2:E2
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584EA79BA8F27C33EFB7CB3E9280
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f296c396-1442-32eb-b6ae-430a94b7a364.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 19905
IP address blocks: 173.28.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9b:a8:f2:7c:33:ef:b7:cb:3e:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=ca512dc4-fead-46eb-88ba-8dfe89e726ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:21:87:e3:87:10:92:71:81:86:4d:93:52:c2:
e2:04:70:df:a1:9a:a4:d5:bc:44:7b:9c:11:f6:78:
5d:c5:cd:6b:d0:5d:9e:cf:b0:73:dc:7a:22:9b:18:
59:f8:5b:64:53:33:6c:b4:89:dd:87:4e:4e:91:70:
8a:9d:9d:f6:9d:89:1f:31:4c:6c:44:c9:80:5a:7b:
a3:de:22:e4:25:87:1c:2e:c5:51:aa:5f:0c:3c:cd:
30:8d:c9:c1:d2:22:d2:9c:50:5f:e0:e1:01:6e:35:
63:f3:62:b2:ad:cc:09:14:b9:2c:77:b3:f6:99:57:
41:86:dd:de:4d:a7:8f:42:c8:df:5b:b1:32:3c:43:
b2:0e:bb:9f:ae:b8:d9:72:50:5d:94:79:a0:a9:36:
76:1a:f1:dd:16:47:30:fe:81:04:c2:af:d1:ff:f3:
0b:94:f2:30:8c:fc:63:8d:3a:cd:d4:bc:d6:9a:1d:
29:8a:48:03:f6:73:19:d7:f6:fb:3e:3b:3e:51:e8:
75:fd:00:b9:08:9c:13:15:55:a3:3d:4f:10:8c:0e:
91:00:c9:54:d8:dc:22:e9:fa:00:46:a6:1c:71:9b:
9f:4e:90:ca:8c:75:84:3a:26:10:23:6d:30:b2:8e:
3f:7a:b4:64:74:5c:9e:a3:55:42:9a:54:05:3d:c9:
ed:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7D:E7:96:FB:91:4A:92:6F:74:9B:D8:B6:35:AC:DF:6D:CF:C2:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f296c396-1442-32eb-b6ae-430a94b7a364.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.28.57.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:49:76:27:09:56:ca:72:91:4a:e7:0f:1a:08:07:49:1f:09:
57:77:83:61:8e:0d:46:67:d1:70:2e:d9:46:2d:d7:17:9a:95:
ac:11:bc:b7:33:0a:56:8c:71:dd:3a:69:9c:df:10:7c:0a:8f:
76:24:a6:4c:90:eb:ab:d5:fe:c5:37:cc:d9:1d:00:c7:59:9b:
23:80:c5:ef:56:8b:9d:fd:83:24:67:bf:f7:49:fb:82:53:ba:
dc:d6:5c:eb:3e:94:46:48:45:31:7b:9d:88:d1:2c:0c:1e:f6:
6b:e9:27:ff:e3:54:bc:8c:64:83:26:eb:b7:48:0d:16:8b:aa:
f5:95:6a:b8:f0:06:67:9a:0a:93:b1:7f:ac:8f:e6:de:d0:a7:
12:79:0a:9c:9e:61:01:39:09:e6:93:d8:04:71:2d:37:40:f4:
9d:cd:ed:71:20:a0:24:4a:77:ec:ba:f9:77:00:db:7d:e0:1a:
58:2c:b9:8a:c4:18:e1:65:8f:3f:c6:f1:4c:a7:b3:03:0a:ff:
cc:2d:6e:98:28:01:48:fb:d3:cf:23:7c:19:ca:a2:1b:67:de:
96:5b:78:b1:75:9a:c4:a3:64:ad:5d:ae:eb:3f:9d:5d:1a:64:
12:18:6e:f7:15:54:78:e1:55:2d:bd:18:36:a4:e6:18:e0:66:
6a:eb:00:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:41:55 2026 by rpki-client