
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fdef0eb3-0fc5-3153-a046-427e279f510e.roa
File: fdef0eb3-0fc5-3153-a046-427e279f510e.roa (raw, json)
Hash identifier: 6pXB1aZPXgoquWjA/uHnYdbq5yPCBqghuVa7wfP8kAY=
Subject key identifier: 6E:61:43:4A:95:CF:33:34:91:F2:5A:52:0B:A5:2E:D2:8E:5E:9C:A8
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584EA7987EBDB84799EE15AF7080
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fdef0eb3-0fc5-3153-a046-427e279f510e.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 19905
IP address blocks: 173.18.88.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:98:7e:bd:b8:47:99:ee:15:af:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=d1fae942-2ca6-4b87-910e-a5c7b3de24ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c3:6f:b6:27:96:52:aa:6a:4e:27:cc:d3:04:
4e:00:e3:a1:2c:7b:0a:56:4b:e2:d9:9a:df:59:56:
06:8c:49:85:20:41:bd:84:a0:76:9a:49:b5:30:d4:
b2:0b:09:d6:1d:0c:c2:26:63:29:6b:60:9c:39:fb:
d2:bb:59:2a:20:f6:9f:00:66:9b:7d:42:ab:af:3d:
76:2f:f1:47:5b:cf:c2:bc:23:10:a1:0b:ce:97:32:
88:6d:72:72:a9:e7:02:36:6a:2b:fc:7f:02:bb:c5:
f4:f4:00:36:41:2e:00:19:6b:61:ed:f4:e2:90:46:
b3:ae:78:38:dc:35:d3:3f:19:fe:d4:7c:a8:89:3c:
12:4a:87:33:83:4c:75:bc:f5:5a:2f:72:e4:98:80:
db:c7:f5:e4:a5:8a:12:ff:33:a2:99:83:fd:65:6b:
46:9e:5f:96:9c:2a:ab:cf:9a:3b:15:4b:06:78:6d:
99:92:dc:60:fc:75:70:8c:a1:97:69:13:7a:ef:69:
4b:c4:4c:0e:17:d6:19:d0:34:08:4e:8f:6a:4c:1b:
aa:8d:e1:83:79:e0:e6:b9:6d:86:1d:05:4d:87:c7:
a9:8b:1f:cc:5c:56:ba:67:7f:0e:b2:67:9b:55:85:
3b:fa:59:8f:ea:9a:c9:ca:4b:af:69:b5:a4:6f:ae:
22:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:61:43:4A:95:CF:33:34:91:F2:5A:52:0B:A5:2E:D2:8E:5E:9C:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fdef0eb3-0fc5-3153-a046-427e279f510e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.18.88.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:f6:65:3c:51:d0:02:3a:1d:00:23:be:f3:99:4e:bb:70:0d:
59:7e:b3:4f:37:04:20:78:74:10:b8:db:0f:04:b6:85:81:b0:
c4:7e:b2:d1:07:08:3b:1c:f8:ee:0b:de:41:27:a6:0b:53:6b:
01:3d:57:c4:be:f3:da:22:93:1b:b7:0f:a7:78:00:be:17:84:
aa:7a:c6:58:42:93:b6:d1:b9:d2:14:c9:fe:77:e7:5c:63:bf:
45:55:9c:49:64:17:5c:ec:15:6c:11:64:75:f0:bc:19:3e:4c:
86:74:28:a3:00:44:91:68:f9:0b:6b:1e:e4:d0:7e:97:52:53:
7f:6d:6e:0f:ff:60:58:70:d0:48:6a:ac:c7:91:f0:fb:3b:a0:
3a:92:33:22:82:38:ac:73:8f:ed:9c:16:72:50:2b:f4:d6:7a:
ec:3a:54:2e:22:be:f6:49:61:ff:1c:9d:f1:7d:23:7b:98:f6:
c1:74:dc:b1:c7:a1:9d:cf:04:56:5d:31:cd:c7:d7:91:29:ac:
68:fa:03:6a:51:e6:5d:a0:1a:df:66:40:4a:4e:e9:64:fe:4b:
ef:35:f2:9f:d1:50:a8:b2:fe:d1:cb:24:2d:96:43:ae:6a:c3:
56:7a:fb:30:88:db:59:13:d6:a1:9e:25:33:f4:af:63:41:28:
76:d6:0c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:36:39 2026 by rpki-client