
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9b5a48fd-3dc2-3c6a-a666-892a6cfb1b4f.roa
File: 9b5a48fd-3dc2-3c6a-a666-892a6cfb1b4f.roa (raw, json)
Hash identifier: VxDTHERJD1t/CJNscYh+rg9DqhbVXc76w3SCrkxnsVk=
Subject key identifier: AA:47:55:35:FD:01:2F:BD:CF:BE:A3:1A:65:72:3C:07:E6:C6:B9:65
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584F4C3D4C3F3D46065E4BFEE460
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9b5a48fd-3dc2-3c6a-a666-892a6cfb1b4f.roa
Signing time: Sat 26 Sep 2026 01:00:13 +0000
ROA not before: Sat 26 Sep 2026 01:00:13 +0000
ROA not after: Fri 25 Dec 2026 02:00:13 +0000
asID: 30036
IP address blocks: 173.16.160.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 14 Oct 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4c:3d:4c:3f:3d:46:06:5e:4b:fe:e4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Sep 26 01:00:13 2026 GMT
Not After : Dec 25 02:00:13 2026 GMT
Subject: CN=8ed77bfe-4076-49e6-a707-2c66b90b72b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a0:46:18:0f:e4:8a:3f:c0:86:23:cf:07:9e:
e1:d7:51:77:e3:ca:1f:5d:71:63:0b:93:48:67:39:
20:5e:1d:96:ee:57:78:74:d5:11:db:11:ca:55:8b:
aa:4f:18:15:9a:e9:3c:ff:7b:2a:0e:55:89:3f:81:
3f:58:b9:8b:4d:4e:dd:ab:e0:66:72:8a:23:83:96:
f1:9a:76:6e:37:31:51:61:17:f4:a4:ff:82:7c:a9:
61:11:bd:0a:ca:59:4a:b0:ec:d4:0e:9a:1a:1d:77:
1c:f3:cb:2d:2c:d6:4d:32:06:22:15:f2:0b:ae:90:
3c:27:6d:a6:69:8c:7b:98:e3:0c:1c:1a:8e:ca:aa:
a4:e5:0d:4c:cf:d9:3b:3e:d0:63:82:8d:cc:33:f6:
58:63:99:ba:e8:44:76:fe:a1:4c:62:98:56:92:60:
6f:28:1b:dd:22:f1:91:f1:22:6c:8a:21:9c:93:ea:
45:dd:db:df:74:f0:10:0b:19:3c:ed:ef:52:c6:eb:
bd:fb:e3:c3:44:6b:d5:5e:65:bc:4b:a3:19:43:54:
a5:b7:99:93:bd:67:57:c7:58:13:38:20:ca:cf:61:
b5:2e:6f:66:cd:55:96:b6:dd:21:0b:43:8c:09:f0:
83:93:d0:63:63:1b:c2:a9:06:57:2e:6e:00:3b:c9:
3f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:47:55:35:FD:01:2F:BD:CF:BE:A3:1A:65:72:3C:07:E6:C6:B9:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9b5a48fd-3dc2-3c6a-a666-892a6cfb1b4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.16.160.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:42:63:26:d3:13:35:78:38:30:84:0b:e1:05:9e:0a:66:ca:
61:31:b5:83:b3:c8:dc:8f:5a:6c:c2:e0:0d:e6:34:06:70:c9:
96:f2:ca:d5:f0:dd:b0:4a:82:af:2d:01:79:e2:27:11:86:98:
df:dd:8e:1a:26:31:73:f0:89:af:9a:11:07:3e:43:e5:06:2d:
4b:ea:0d:36:68:21:13:83:ad:69:66:a8:81:10:5e:e8:57:74:
1c:d9:3d:44:ba:9d:d6:49:e7:71:ce:e4:09:40:88:24:fa:3e:
7e:d3:b5:a3:6f:07:a3:8b:c3:5f:4d:43:35:58:53:7d:9b:d3:
b1:83:5d:f4:16:28:e3:b7:b6:34:f1:be:1c:51:d6:51:8f:e0:
e5:ec:1b:af:f9:f9:3b:b2:66:90:87:82:c5:68:3c:c4:b9:dc:
af:79:41:4c:09:19:04:35:2b:5b:d0:2d:52:3f:7e:41:69:77:
6b:13:db:32:b3:8e:6d:e4:4b:2f:fb:9a:9f:7e:76:83:d3:b8:
03:d9:34:ea:96:e8:1d:06:b7:8b:5f:d2:99:de:0d:03:81:ca:
00:74:d9:a4:88:c5:6e:62:a8:1e:15:34:6f:72:71:4b:61:51:
97:ab:ca:b6:4d:a2:7e:50:f6:ee:1e:43:ab:2f:c3:99:d2:94:
da:ec:5b:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPUw/PUYGXkv+5GAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk
OGVkNzdiZmUtNDA3Ni00OWU2LWE3MDctMmM2NmI5MGI3MmI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaBGGA/kij/AhiPPB57h11F348ofXXFjC5NI
ZzkgXh2W7ld4dNUR2xHKVYuqTxgVmuk8/3sqDlWJP4E/WLmLTU7dq+Bmcoojg5bx
mnZuNzFRYRf0pP+CfKlhEb0KyllKsOzUDpoaHXcc88stLNZNMgYiFfILrpA8J22m
aYx7mOMMHBqOyqqk5Q1Mz9k7PtBjgo3MM/ZYY5m66ER2/qFMYphWkmBvKBvdIvGR
8SJsiiGck+pF3dvfdPAQCxk87e9Sxuu9++PDRGvVXmW8S6MZQ1Slt5mTvWdXx1gT
OCDKz2G1Lm9mzVWWtt0hC0OMCfCDk9BjYxvCqQZXLm4AO8k/7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKpHVTX9AS+9z76jGmVyPAfmxrllMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWI1YTQ4ZmQtM2RjMi0z
YzZhLWE2NjYtODkyYTZjZmIxYjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRCgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACJCYybTEzV4ODCEC+EFngpmymExtYOzyNyPWmzC4A3mNAZwyZbyytXw
3bBKgq8tAXniJxGGmN/djhomMXPwia+aEQc+Q+UGLUvqDTZoIRODrWlmqIEQXuhX
dBzZPUS6ndZJ53HO5AlAiCT6Pn7TtaNvB6OLw19NQzVYU32b07GDXfQWKOO3tjTx
vhxR1lGP4OXsG6/5+TuyZpCHgsVoPMS53K95QUwJGQQ1K1vQLVI/fkFpd2sT2zKz
jm3kSy/7mp9+doPTuAPZNOqW6B0Gt4tf0pneDQOBygB02aSIxW5iqB4VNG9ycUth
UZeryrZNon5Q9u4eQ6svw5nSlNrsW+I=
-----END CERTIFICATE-----
Generated at Sun Oct 11 17:12:10 2026 by rpki-client