
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9cb6c8f8-695c-36ca-9b5d-188d6ee8a112.roa
File: 9cb6c8f8-695c-36ca-9b5d-188d6ee8a112.roa (raw, json)
Hash identifier: KNIJjhzP8a3oX31Lgk9/uOHaEtaxREJUgzR6LqPz5O0=
Subject key identifier: 61:65:78:D2:48:9F:82:32:FB:D5:51:22:39:7F:6A:EA:E5:5A:6D:0E
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D237A043F19607387E964C800
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9cb6c8f8-695c-36ca-9b5d-188d6ee8a112.roa
Signing time: Thu 12 Mar 2026 01:00:32 +0000
ROA not before: Thu 12 Mar 2026 01:00:32 +0000
ROA not after: Wed 10 Jun 2026 01:00:32 +0000
asID: 30036
IP address blocks: 173.19.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:23:7a:04:3f:19:60:73:87:e9:64:c8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 12 01:00:32 2026 GMT
Not After : Jun 10 01:00:32 2026 GMT
Subject: CN=9a9fb0c7-a17c-4726-93df-cd100ea074ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:5e:88:bb:46:77:a1:ba:ab:e6:e0:be:7e:9f:
55:42:3d:3b:2c:78:fc:45:a2:dc:ef:87:28:e3:ba:
fe:e2:c8:c0:4d:6e:5a:2f:19:cd:d2:c5:c3:9a:56:
64:09:6b:3f:0d:a9:34:4c:81:5e:66:e4:4f:cc:98:
41:7e:33:95:85:86:00:5c:e1:06:1e:86:ef:28:a5:
b7:9c:9e:61:fa:df:70:0b:f8:d2:32:3c:23:92:fa:
b9:da:78:45:ed:13:e6:2d:85:13:9b:0b:d1:77:f2:
cd:9e:c5:fb:a1:e6:f3:a1:d7:e0:23:b2:e6:09:5e:
32:01:d6:87:5e:49:84:14:c9:9b:2c:b5:ae:9d:11:
ed:3a:e3:80:1d:e7:a3:85:1a:62:47:f5:4b:f2:f3:
ca:a8:55:08:ea:c8:79:80:a5:73:66:37:87:47:08:
3b:f6:4d:c3:32:85:b8:a6:e4:56:2d:9f:ea:07:17:
3e:ce:70:30:58:1d:c7:87:b9:f9:8a:09:dd:cd:ee:
d0:9c:09:9c:4e:98:dd:83:47:f5:5c:ad:a5:61:1c:
ce:aa:7f:98:bb:cc:1b:df:73:d0:43:2b:08:69:08:
cb:b8:0d:c3:a9:20:db:1d:e6:14:94:54:91:a3:28:
d2:d2:b9:e8:5b:dc:64:be:6a:a6:e8:91:59:a7:5a:
c2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:65:78:D2:48:9F:82:32:FB:D5:51:22:39:7F:6A:EA:E5:5A:6D:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9cb6c8f8-695c-36ca-9b5d-188d6ee8a112.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.19.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:64:2a:d5:18:fa:fe:e7:0e:76:f0:61:e8:6d:42:c7:11:66:
0b:0e:28:0c:51:b9:b1:b0:e6:31:b6:9e:8e:0d:8c:e3:72:85:
aa:cd:8d:e3:a9:6d:0e:b3:eb:28:73:b1:b9:53:59:f3:d7:3c:
d1:0e:cb:11:49:01:7c:04:d7:f8:b7:d0:d9:1d:66:c7:04:7b:
28:35:80:e8:e8:19:3c:19:12:18:6c:c8:8f:15:41:db:4f:de:
fb:e6:a7:9a:d2:fc:8b:44:bb:81:1e:96:57:96:da:9e:8b:14:
b9:99:2e:24:4c:e2:e2:51:43:99:3a:d8:46:c1:c2:44:3d:09:
0e:0f:22:87:a5:13:b1:b4:64:eb:b0:34:71:8a:3c:1e:a7:a6:
4e:cf:43:9d:6d:3a:df:b9:78:b1:3e:67:20:30:59:1b:ab:56:
d2:63:87:50:2f:ab:b6:c9:4f:81:1b:ef:d3:bb:b1:69:7c:be:
23:b7:b6:12:d0:ef:9b:77:35:8b:98:7e:8a:98:e6:ff:cd:10:
fc:66:c4:02:fa:90:a3:2c:5d:f7:91:4e:5b:5f:3c:78:6a:f5:
ff:f4:a5:5c:1f:0d:11:4f:f7:55:37:d0:fe:00:0b:9d:96:b8:
be:15:11:4a:53:7b:d3:96:75:60:e2:39:83:39:51:28:e1:d4:
ba:99:fe:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:41:13 2026 by rpki-client