
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/588c84d0-7acc-3e41-8fc3-096323845d81.roa
File: 588c84d0-7acc-3e41-8fc3-096323845d81.roa (raw, json)
Hash identifier: J4MlWYFIlA0anVUdLn2lGLJ3BKgS4SVxJx35XIVukZ0=
Subject key identifier: 79:95:62:24:4E:C4:44:CD:B5:CC:76:46:31:C5:0C:2D:E0:38:27:A4
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D2379EF1CE1713F049706FFD4
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/588c84d0-7acc-3e41-8fc3-096323845d81.roa
Signing time: Thu 12 Mar 2026 01:00:32 +0000
ROA not before: Thu 12 Mar 2026 01:00:32 +0000
ROA not after: Wed 10 Jun 2026 01:00:32 +0000
asID: 30036
IP address blocks: 173.31.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:23:79:ef:1c:e1:71:3f:04:97:06:ff:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 12 01:00:32 2026 GMT
Not After : Jun 10 01:00:32 2026 GMT
Subject: CN=4ae3a930-e5a5-4e9e-b21a-c292b6cfdc24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d6:b7:66:60:d2:0c:5c:80:18:49:9a:d0:bd:
ac:34:c8:1a:a3:b3:d6:8c:b6:8c:9b:9f:aa:82:5e:
fd:bb:f5:dc:5b:a4:97:76:8b:3d:05:20:eb:3e:e1:
78:cc:00:cb:3f:65:e8:84:80:59:14:b4:bb:21:05:
23:32:d5:b1:51:c4:b1:6b:8a:4b:7c:eb:64:4f:02:
90:06:c1:23:f4:7c:bb:0c:e5:33:ea:fc:73:74:49:
9e:b5:07:25:76:e2:90:22:8d:be:06:f3:b7:fb:44:
22:e0:70:b2:b0:9e:39:f8:10:c2:6b:8e:99:f7:c4:
67:16:f5:9b:64:f6:ba:75:fc:ec:0d:0d:3c:60:1c:
08:42:59:cd:91:9e:b5:28:4c:e7:da:fc:25:12:0b:
be:93:c7:be:f2:f3:c0:06:c3:21:54:e4:a1:d4:73:
bb:5c:e0:9d:c5:b5:ec:f0:ce:72:08:9f:82:39:52:
59:ba:75:2e:3d:10:ba:8d:f7:28:a5:ee:09:2c:ec:
aa:61:b2:cc:6d:6e:d0:ff:e1:1a:bd:70:d3:92:8c:
d3:e4:14:dd:43:f5:da:18:e6:e1:7e:e3:33:9a:13:
1c:3b:18:ff:b5:4f:9b:21:30:24:1b:87:78:79:60:
91:37:0c:ba:5c:b5:df:fb:4a:2c:fc:06:5f:3c:c2:
e1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:95:62:24:4E:C4:44:CD:B5:CC:76:46:31:C5:0C:2D:E0:38:27:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/588c84d0-7acc-3e41-8fc3-096323845d81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.31.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:f7:36:95:90:a5:21:14:c7:13:3c:29:90:cd:16:d1:68:dd:
65:87:7f:1b:d9:30:70:2b:a7:0d:01:0c:7e:72:de:a0:5d:18:
b5:39:79:d0:ad:0c:59:e2:84:b9:fc:12:b7:75:fb:5f:91:74:
d8:4b:14:16:00:db:0b:54:c9:07:64:49:86:85:fe:77:a7:fc:
6e:cb:99:52:f6:a4:7b:b8:c0:7b:93:f1:e0:c0:28:dd:63:21:
d4:1e:6e:02:ac:23:a6:04:b2:35:f8:a6:b7:75:9d:c2:56:2f:
9f:e9:0e:97:d9:26:c0:ee:92:7e:de:57:a8:b2:6d:c4:99:7a:
06:0c:aa:74:28:3d:5c:91:1b:42:f4:14:6d:93:b3:3c:75:97:
7e:45:85:69:17:b9:b0:a7:b9:62:96:3e:5e:5d:26:e9:9a:8b:
b2:6e:ca:4b:4c:e3:12:91:1a:67:38:b5:f5:5f:a3:e0:33:84:
fc:32:7a:a7:54:c3:59:22:52:3f:45:d5:09:ca:49:8a:15:6e:
77:4a:43:f2:e2:07:78:3f:06:95:25:84:80:3d:b4:e4:25:95:
44:e1:77:60:87:76:b0:c1:45:d4:82:1d:0f:0d:22:bd:47:dc:
ac:cf:bc:df:b4:31:e1:c6:95:21:95:f1:9b:64:39:b2:75:05:
1f:5e:33:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jee8c4XE/BJcG/9QwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk
NGFlM2E5MzAtZTVhNS00ZTllLWIyMWEtYzI5MmI2Y2ZkYzI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9a3ZmDSDFyAGEma0L2sNMgao7PWjLaMm5+q
gl79u/XcW6SXdos9BSDrPuF4zADLP2XohIBZFLS7IQUjMtWxUcSxa4pLfOtkTwKQ
BsEj9Hy7DOUz6vxzdEmetQclduKQIo2+BvO3+0Qi4HCysJ45+BDCa46Z98RnFvWb
ZPa6dfzsDQ08YBwIQlnNkZ61KEzn2vwlEgu+k8e+8vPABsMhVOSh1HO7XOCdxbXs
8M5yCJ+COVJZunUuPRC6jfcope4JLOyqYbLMbW7Q/+EavXDTkozT5BTdQ/XaGObh
fuMzmhMcOxj/tU+bITAkG4d4eWCRNwy6XLXf+0os/AZfPMLhoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHmVYiROxETNtcx2RjHFDC3gOCekMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTg4Yzg0ZDAtN2FjYy0z
ZTQxLThmYzMtMDk2MzIzODQ1ZDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR8HMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHT3NpWQpSEUxxM8KZDNFtFo3WWHfxvZMHArpw0BDH5y3qBdGLU5edCt
DFnihLn8Erd1+1+RdNhLFBYA2wtUyQdkSYaF/nen/G7LmVL2pHu4wHuT8eDAKN1j
IdQebgKsI6YEsjX4prd1ncJWL5/pDpfZJsDukn7eV6iybcSZegYMqnQoPVyRG0L0
FG2Tszx1l35FhWkXubCnuWKWPl5dJumai7JuyktM4xKRGmc4tfVfo+AzhPwyeqdU
w1kiUj9F1QnKSYoVbndKQ/LiB3g/BpUlhIA9tOQllUThd2CHdrDBRdSCHQ8NIr1H
3KzPvN+0MeHGlSGV8ZtkObJ1BR9eM48=
-----END CERTIFICATE-----
Generated at Thu Mar 12 05:07:21 2026 by rpki-client