
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/36d6c13a-506f-35f4-bd0f-1dc00c1a5a87.roa
File: 36d6c13a-506f-35f4-bd0f-1dc00c1a5a87.roa (raw, json)
Hash identifier: JCSe07DuYeZcqqOhCqy0/hW2SrYNqggtXgV2/YGr3jk=
Subject key identifier: C2:4F:CA:DA:D7:49:F7:64:2B:5A:6F:CA:C2:9C:72:01:14:D7:86:E9
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D20AF7CC3C1CCE3431AD17180
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/36d6c13a-506f-35f4-bd0f-1dc00c1a5a87.roa
Signing time: Wed 11 Mar 2026 01:00:32 +0000
ROA not before: Wed 11 Mar 2026 01:00:32 +0000
ROA not after: Tue 09 Jun 2026 01:00:32 +0000
asID: 19905
IP address blocks: 173.16.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:20:af:7c:c3:c1:cc:e3:43:1a:d1:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 11 01:00:32 2026 GMT
Not After : Jun 9 01:00:32 2026 GMT
Subject: CN=35ea51fc-2563-444f-9c27-4aa53b4e6c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2f:f0:1a:54:45:8b:a0:b2:df:88:1d:34:f8:
dc:60:03:6d:aa:6a:7f:bd:2c:ac:de:ca:38:6f:18:
39:e3:85:aa:c1:56:0a:16:5f:1c:23:c9:0e:7b:71:
8b:23:69:ee:8f:3b:ec:c6:da:4d:a3:60:59:99:81:
13:a5:52:e3:29:ab:30:55:ec:0b:3c:0c:2f:a5:de:
a0:ed:df:c6:43:64:ad:aa:38:36:99:12:23:e9:2e:
ae:9e:38:91:72:3c:06:84:67:d8:e0:8c:a2:9d:54:
0f:0d:15:04:e9:71:49:72:a1:6c:fd:8c:2d:4d:db:
ac:45:a3:66:d1:da:fa:5b:54:ae:60:19:1d:0c:c3:
8a:1d:29:fd:89:10:21:c7:ef:6d:bd:b6:57:36:fe:
f0:b8:58:57:48:f4:2c:a6:1c:7e:24:17:a5:04:bf:
7f:c2:2e:57:94:87:78:f3:ba:ce:36:b0:75:4f:1e:
7d:78:c0:06:31:2f:f5:ee:c1:d0:78:38:bb:92:aa:
1f:08:de:56:f2:17:c2:85:1e:f2:52:79:65:d8:f5:
fe:d7:7d:a4:ec:9c:97:bb:2d:97:70:05:78:4a:f0:
ed:80:69:72:37:b0:bf:a9:66:aa:ba:d5:32:0e:6a:
e3:31:7d:30:ae:e3:82:eb:cb:39:f8:1e:4d:ad:23:
16:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4F:CA:DA:D7:49:F7:64:2B:5A:6F:CA:C2:9C:72:01:14:D7:86:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/36d6c13a-506f-35f4-bd0f-1dc00c1a5a87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.16.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:44:87:9f:77:f5:5b:75:99:a9:8d:0a:5c:ac:64:7d:d4:90:
70:24:b6:30:aa:55:a1:1d:ad:de:f3:07:b6:57:90:88:3d:82:
5c:ec:9d:10:11:25:0b:be:67:f3:04:da:e6:c6:7c:a7:d5:9e:
54:4b:1a:01:e1:ae:4f:6d:91:3e:3f:b9:c9:27:0b:5e:57:11:
cd:af:a0:11:e6:12:0b:9b:46:25:bc:3a:31:da:c1:1a:00:8d:
45:7c:0c:75:3f:c1:76:ae:0b:07:8e:03:ac:fc:7f:e7:72:ce:
05:07:6e:26:d9:9a:8c:46:ed:2c:4f:af:e0:3d:88:17:53:e4:
59:72:8e:b2:d9:98:3d:a0:df:2a:f6:80:15:06:c5:77:1c:75:
63:16:5a:0b:6e:49:29:91:4f:f0:0a:55:f9:ba:75:f1:41:66:
b9:47:ea:a0:e9:0a:b4:e1:12:06:5a:dc:82:0b:e5:51:32:e3:
1e:34:a8:6c:86:90:d7:a3:67:a4:ed:53:8f:2d:bb:a6:26:6d:
2a:69:6c:c0:9c:cd:bb:72:5e:97:bf:f4:84:dc:52:f0:d3:b3:
cf:7a:50:4c:93:15:0e:1f:02:d5:ae:af:23:82:fd:fb:30:3a:
d4:4b:8f:11:ce:69:f3:7a:a8:cc:ff:83:8f:38:70:19:18:97:
27:26:60:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:44:42 2026 by rpki-client