
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/52d46ea0-e254-3a03-8b96-225f61dbb7d0.roa
File: 52d46ea0-e254-3a03-8b96-225f61dbb7d0.roa (raw, json)
Hash identifier: 7hmOclU+h6s5TbDuMu2yGKp2EBo3GgwdR/xScIuhjZQ=
Subject key identifier: 26:E5:B0:62:0F:4F:8D:29:25:43:2B:7C:AE:BB:EB:91:C5:8D:51:6A
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D1B1A5F07E68C4A2C86D6E780
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/52d46ea0-e254-3a03-8b96-225f61dbb7d0.roa
Signing time: Mon 09 Mar 2026 01:00:32 +0000
ROA not before: Mon 09 Mar 2026 01:00:32 +0000
ROA not after: Sun 07 Jun 2026 01:00:32 +0000
asID: 19905
IP address blocks: 173.17.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1b:1a:5f:07:e6:8c:4a:2c:86:d6:e7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 9 01:00:32 2026 GMT
Not After : Jun 7 01:00:32 2026 GMT
Subject: CN=a3cf0caa-e146-4e7f-9d8c-f255205e69f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:34:03:f3:eb:02:46:d4:6c:97:1b:52:5e:bf:
01:78:87:f8:c9:bb:6a:32:5e:17:d5:8d:30:10:44:
87:93:8f:e9:af:55:b2:9a:d1:d1:a0:18:f5:dd:ea:
6d:95:0e:72:ae:07:4a:5b:70:65:72:6d:5e:65:97:
ec:dc:58:49:75:ba:23:5a:89:9e:6e:46:f7:88:67:
fc:ec:31:56:fa:04:b0:b1:38:96:3d:b0:e6:49:ef:
85:9f:0d:93:f6:d7:37:2f:6c:87:e2:54:0d:34:b5:
a2:9e:38:a1:e8:48:fb:82:1d:82:d9:35:1a:77:df:
4e:7a:0f:5c:0d:4d:5c:46:f0:98:70:10:03:7a:19:
ab:28:e3:ea:06:4f:8b:3d:e3:9c:be:f3:54:d5:fa:
8b:6e:4e:a6:64:ce:10:bf:2f:17:b9:43:00:15:8a:
27:c9:71:c9:85:5a:3b:ad:84:fe:68:e2:91:c4:89:
64:23:07:f5:e9:60:4f:cd:51:82:91:aa:29:86:46:
79:f2:c4:ab:d3:16:43:07:ff:28:99:01:5a:fb:4c:
47:57:b5:dc:76:7b:23:18:80:9a:53:62:06:91:7f:
62:8e:d1:7f:25:1d:71:54:8a:1f:64:e1:15:4f:2c:
7e:fb:e6:a5:f8:5c:1e:95:5d:00:ae:d6:4a:82:68:
59:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E5:B0:62:0F:4F:8D:29:25:43:2B:7C:AE:BB:EB:91:C5:8D:51:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/52d46ea0-e254-3a03-8b96-225f61dbb7d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.17.36.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:c7:70:d8:b3:c7:a9:59:a7:09:62:d3:8c:93:4a:72:cc:3e:
2c:3e:88:cd:10:19:53:f1:bf:92:1b:72:ba:9e:fa:32:d1:a0:
2b:51:77:01:5e:6c:8d:35:84:44:56:e3:c1:33:7a:72:c9:eb:
0f:5e:d1:0c:7b:fd:4a:d8:4d:55:66:b8:2c:43:32:c2:e9:2d:
d7:28:d3:be:3e:4a:e6:9e:25:a1:92:ef:36:52:b8:5e:e4:a5:
6d:f0:6e:ce:56:50:b9:e5:ba:fa:8d:5d:db:bf:a4:05:ff:e0:
7a:8d:84:88:89:19:9f:fe:4b:68:a1:c9:c5:da:e1:5f:6a:cd:
08:96:e8:d0:8a:50:35:11:6f:a2:a5:72:e1:1c:4f:da:04:dd:
8c:6f:b2:6b:94:48:62:30:8d:c1:0f:0c:78:36:72:bb:79:0c:
c6:65:06:3c:13:f1:69:15:ad:c4:a6:5e:3e:1a:2c:da:b3:87:
fb:f2:e4:03:b7:af:65:4a:9e:4f:27:53:77:f9:81:90:89:88:
b1:87:d5:17:23:b6:58:fe:0c:61:45:5a:da:97:20:28:27:c2:
d9:16:9b:79:17:c4:2f:aa:ae:07:a5:a5:86:0b:9e:a9:b9:ea:
6b:5e:f1:8b:4e:53:16:26:e9:dd:fe:71:b0:9c:ac:b2:d0:08:
d3:ec:e8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 05:03:32 2026 by rpki-client