
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9fd65bbf-0b37-37c6-bfd2-5292534cf1ca.roa
File: 9fd65bbf-0b37-37c6-bfd2-5292534cf1ca.roa (raw, json)
Hash identifier: AiYrvcAJbYOvcTOyxvCAg2mfvAQ7oYNIqdSrZet/sJs=
Subject key identifier: 4C:BA:30:C5:D0:5F:0B:E6:09:19:54:C3:A5:16:98:83:66:CB:7F:E2
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584EA79D11BF4019CBBF3BA61394
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9fd65bbf-0b37-37c6-bfd2-5292534cf1ca.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 30036
IP address blocks: 173.31.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9d:11:bf:40:19:cb:bf:3b:a6:13:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=d47642d3-76f2-41fe-9674-88e0cce6e16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f7:76:26:d0:ae:4a:55:f8:20:c1:bf:38:79:
04:e1:78:3d:4f:57:7f:d1:cc:6b:f1:57:f0:3a:48:
b9:a1:95:01:b1:99:84:9a:14:df:a1:ef:ca:78:7e:
73:b2:ae:35:d0:18:84:2e:53:78:4e:cb:61:ef:a7:
f1:79:9b:51:20:c6:0e:a1:55:23:a4:37:51:4e:86:
c8:02:1c:3b:28:41:55:7d:fa:b5:73:e5:51:8e:b7:
09:51:52:eb:24:cf:f8:de:00:ab:96:64:42:39:50:
cd:77:d7:c9:52:b6:a7:41:fd:f9:d7:0a:82:f9:5c:
72:b1:bb:6d:b7:43:f4:fe:f0:c8:34:c7:d1:fe:fd:
3d:59:f9:ee:bd:21:6f:e8:7a:25:6c:b6:d9:fb:d9:
07:a1:32:e8:5e:ec:2c:76:fd:d4:7b:6d:7b:35:43:
df:56:6f:66:9e:23:12:58:97:05:22:06:75:8f:f6:
8e:8f:b2:ef:6b:09:fa:2a:16:34:f1:a7:73:01:a2:
9a:02:44:ad:23:f1:a6:dd:81:7d:89:ed:14:ef:75:
f4:0f:26:34:39:d4:20:b6:f1:06:a4:ce:f4:36:a9:
02:aa:ba:f1:23:d5:4e:ff:c8:7c:15:3d:fa:a5:3b:
13:6c:cb:d8:05:d2:23:9f:21:18:98:b3:ad:ba:8f:
7f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:BA:30:C5:D0:5F:0B:E6:09:19:54:C3:A5:16:98:83:66:CB:7F:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9fd65bbf-0b37-37c6-bfd2-5292534cf1ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.31.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:a1:9b:d4:33:d0:64:15:f8:cb:d5:7f:66:e6:ec:3b:92:34:
f6:0f:bb:ef:87:ff:36:b3:bc:20:eb:cf:9b:fb:60:db:a1:82:
46:75:e3:78:6d:0e:b6:38:6c:36:ac:93:a5:b5:1b:3e:5f:23:
fb:ec:e3:8d:af:7e:e9:52:73:a6:fa:38:3d:2c:a9:5b:33:a2:
1f:c4:63:3d:50:e3:c5:db:7e:50:a3:43:08:6b:34:07:98:41:
11:a9:e0:f4:9c:51:ad:e2:ef:cf:e9:9c:64:30:d0:1e:15:46:
de:cc:10:a6:fc:42:b3:78:15:f3:02:99:fd:fb:85:39:72:7e:
20:0a:81:82:81:38:23:79:07:66:53:46:1a:28:39:12:6e:7c:
f2:8a:2f:96:8d:08:fd:84:85:a5:f7:ff:6c:30:74:e7:87:45:
05:3b:fe:98:99:34:c9:46:82:ba:70:d9:a1:c8:fa:b6:92:bb:
79:42:28:5e:4b:7a:e9:de:cd:7a:cf:dc:1a:4b:bd:b1:11:6e:
60:30:72:84:ae:a6:21:1a:f7:39:37:a0:a5:d0:79:1e:0d:bf:
6d:5a:28:4e:9a:bb:0e:1f:ba:18:d5:4a:60:8e:9e:44:31:90:
0c:30:4d:57:1b:6f:28:60:10:9a:75:40:17:ea:fb:d9:12:f4:
61:68:28:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:00:47 2026 by rpki-client