
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fc58cf11-5289-327d-ba41-3e1669ac141f.roa
File: fc58cf11-5289-327d-ba41-3e1669ac141f.roa (raw, json)
Hash identifier: 3A9Of1e7VmLz3ofAqbsXUl7HuD5f5av/Ub54JDc07Wc=
Subject key identifier: F3:87:AB:98:1C:42:B7:F6:9D:05:B6:86:CD:56:42:1A:4B:FC:24:9D
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584EA79774FD22B3AC894F8F9A00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fc58cf11-5289-327d-ba41-3e1669ac141f.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 30036
IP address blocks: 173.21.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:97:74:fd:22:b3:ac:89:4f:8f:9a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=8d9c529e-d6dd-4e03-b2f9-bcb2870a6c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:96:2d:c0:ed:d6:74:ce:7b:1b:12:c3:a3:84:
c5:e5:2a:fe:69:15:f9:4b:d9:bf:ef:90:4b:d5:3a:
76:f3:de:06:7d:35:a4:47:89:50:cb:c7:aa:6e:04:
e9:90:83:bc:6e:72:e1:f6:a4:83:a5:0b:6e:77:b1:
43:68:09:4a:84:6d:b0:2f:74:1a:41:f0:b2:62:72:
81:53:2e:5f:45:bc:a3:ab:bc:1f:e1:f1:77:2b:77:
d4:2b:76:a7:09:58:db:97:6c:77:4f:d8:90:ca:1d:
af:49:8c:9c:59:60:81:a6:db:e7:33:9a:78:37:38:
b4:79:54:21:2c:7c:32:8d:f5:8e:8c:40:a6:b6:a5:
00:93:01:b8:e3:13:41:45:91:18:f4:e3:89:aa:5d:
47:92:db:05:14:a2:23:a3:5c:07:10:09:0c:a9:c2:
ab:6e:bc:67:10:32:88:72:b8:45:d7:b3:d6:8c:80:
cf:40:1d:78:d7:0f:4c:94:82:5e:f1:f9:1a:63:71:
b1:56:f5:45:28:9b:05:4f:99:e8:c5:b6:e9:f0:5e:
5a:22:59:83:b2:ff:b5:22:40:83:ae:18:1d:c0:fc:
30:76:fc:52:56:ce:78:e7:85:80:8b:85:25:19:c7:
d4:77:c2:e5:5b:36:96:53:c8:f1:73:59:57:96:d2:
89:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:87:AB:98:1C:42:B7:F6:9D:05:B6:86:CD:56:42:1A:4B:FC:24:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fc58cf11-5289-327d-ba41-3e1669ac141f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.21.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:28:2d:84:73:36:fa:20:02:ed:05:7d:78:0b:26:49:c1:9a:
b7:9b:3c:d5:46:2e:8d:18:33:bb:ba:26:e4:9a:b7:67:f6:fc:
0b:32:28:74:a0:2a:fa:d3:55:89:60:8d:aa:b8:02:e7:fa:37:
f7:eb:4f:29:eb:ac:94:e6:a7:51:7e:64:4a:7f:44:07:64:08:
1e:9a:cc:ec:a6:7e:f2:db:14:6f:50:2d:c6:e2:55:d6:79:7a:
94:2a:11:3f:87:6b:e1:35:ce:7e:73:3f:89:77:92:b7:5a:8f:
59:1b:a9:5f:34:6d:ee:af:a3:be:85:d1:29:68:6b:3c:ea:35:
36:ca:d7:d1:d7:f1:96:3b:5d:b4:4d:46:bd:27:d5:b2:ff:fe:
37:61:86:1e:50:81:fd:9e:d7:23:90:db:cf:09:20:97:8b:88:
df:0c:54:3f:d7:7b:80:1a:67:60:05:bd:f1:ff:42:d7:81:b1:
9a:de:07:77:13:ff:72:07:32:d0:08:f6:c2:24:fa:66:0a:c7:
f1:23:cf:0b:04:d6:ef:7c:8c:87:30:ea:c2:9a:5e:46:20:28:
5b:47:dd:3a:ef:6e:58:92:68:b7:bd:77:3c:89:2b:d7:e4:cc:
eb:c5:c5:bb:63:c9:33:d6:77:31:89:0e:95:af:c8:fa:03:42:
87:39:76:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:41:02 2026 by rpki-client