
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4390aa88-8392-3e92-b96a-694f6067d383.roa
File: 4390aa88-8392-3e92-b96a-694f6067d383.roa (raw, json)
Hash identifier: FIqwtAp6hJC0HWJmVt9y6cGzRPJxQOKMgycsX0qawzE=
Subject key identifier: 6B:3A:A6:61:CF:A8:8D:5B:6E:AB:B7:B2:C6:6C:C2:27:11:D5:39:B9
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584EAA520BC6F509021D17517D00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4390aa88-8392-3e92-b96a-694f6067d383.roa
Signing time: Thu 30 Jul 2026 01:00:12 +0000
ROA not before: Thu 30 Jul 2026 01:00:12 +0000
ROA not after: Wed 28 Oct 2026 01:00:12 +0000
asID: 30036
IP address blocks: 173.21.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:aa:52:0b:c6:f5:09:02:1d:17:51:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jul 30 01:00:12 2026 GMT
Not After : Oct 28 01:00:12 2026 GMT
Subject: CN=dcbd3418-b304-4ebc-8504-dca8655e2f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d4:0e:c4:a4:b5:60:93:f1:3d:f0:cf:bb:72:
50:70:2f:68:0f:37:cd:01:a4:93:74:52:eb:14:de:
43:3b:67:ef:48:8c:e5:e4:a3:83:31:df:3b:d9:60:
67:29:bb:5d:b6:b1:6b:4b:3d:87:2f:b5:8d:92:bc:
64:f5:78:f3:e7:a1:3b:25:9e:32:95:4c:4d:ab:15:
dd:31:e9:01:ee:57:7b:8c:1c:5c:df:45:a4:ad:ef:
73:eb:66:3a:70:03:b6:29:3e:e3:60:4f:8f:75:e9:
b5:c1:2f:78:39:96:c5:80:24:37:4b:8e:6b:3e:f3:
22:ce:83:13:f6:a4:59:09:7e:07:ca:6c:fd:f0:9a:
37:82:75:ae:26:4d:24:04:c6:46:08:19:9c:e4:85:
24:e6:ee:0b:0f:ee:9e:a9:40:34:03:63:07:f8:12:
10:2c:72:e8:b7:4b:e9:bd:6a:25:74:38:99:50:c8:
7f:00:f6:b8:51:8a:93:e0:a0:d5:1c:7c:ad:16:ba:
89:59:be:83:60:22:d9:88:4d:31:db:41:d6:ad:22:
84:a4:bb:0f:56:af:12:46:d7:b9:bb:b7:66:53:56:
77:5d:14:c5:0b:2e:da:74:d9:ae:af:3a:c0:42:6f:
e7:d5:24:ab:ae:c9:68:b8:89:af:45:a3:79:f8:1e:
09:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3A:A6:61:CF:A8:8D:5B:6E:AB:B7:B2:C6:6C:C2:27:11:D5:39:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4390aa88-8392-3e92-b96a-694f6067d383.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.21.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:95:2f:b5:1b:a7:51:25:eb:8d:65:c3:73:3e:e1:40:95:18:
8b:f4:87:76:e7:19:11:5e:e4:8f:ca:68:2a:03:5d:85:7b:33:
e0:a5:3f:f1:d2:83:0d:95:f2:0a:89:5c:bb:46:26:63:f6:6a:
ac:f1:57:22:d6:8e:c5:35:b2:f2:44:98:a9:24:e4:f9:12:6e:
7f:65:4b:20:20:b7:0d:4d:90:9d:55:38:e8:47:17:96:33:45:
81:70:6e:d2:8f:24:6b:34:1b:d0:b4:b8:06:c1:55:8f:8a:fe:
40:ca:fa:d4:0c:29:3d:79:35:75:66:23:49:f7:b5:89:86:bb:
e8:53:2a:50:ac:25:d1:00:c7:c8:2a:e0:95:2d:d1:4b:13:98:
84:55:4e:a8:2c:34:ad:c6:b6:b7:5b:5c:fd:8c:0f:2a:31:a2:
46:23:41:58:df:66:6e:0e:19:1d:9f:62:fc:fd:07:16:2e:67:
17:e8:f5:34:52:ee:38:07:0a:b5:d4:de:aa:ee:0c:e7:a1:18:
54:d4:fa:d6:6b:dd:58:c6:d2:7f:72:bf:0f:dd:79:38:65:b1:
2e:02:99:ee:8a:f1:1b:12:70:bf:e5:96:35:4a:38:0e:cd:e6:
d7:3b:cb:4d:89:73:3a:bc:50:43:f1:06:a0:28:68:3f:be:67:
59:fd:f8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:09:33 2026 by rpki-client