
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a40ec85a-d6be-3510-b81c-ecbe3ede203d.roa
File: a40ec85a-d6be-3510-b81c-ecbe3ede203d.roa (raw, json)
Hash identifier: U8IcMpYHnDYQwAOMZrxvr1D5wezawh9drbIOe5A/A/k=
Subject key identifier: 66:11:41:98:C7:EE:EE:BB:EC:D3:42:22:BC:17:3F:A6:71:F1:02:0B
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D1B19F646270EF3156E77D700
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a40ec85a-d6be-3510-b81c-ecbe3ede203d.roa
Signing time: Mon 09 Mar 2026 01:00:32 +0000
ROA not before: Mon 09 Mar 2026 01:00:32 +0000
ROA not after: Sun 07 Jun 2026 01:00:32 +0000
asID: 19905
IP address blocks: 173.21.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1b:19:f6:46:27:0e:f3:15:6e:77:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 9 01:00:32 2026 GMT
Not After : Jun 7 01:00:32 2026 GMT
Subject: CN=53dec8af-66ef-4a6b-b796-3ed7d3595bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0b:06:07:0c:03:1f:3d:0c:dd:30:6b:7a:97:
c3:f2:72:c6:96:a0:de:19:a6:4e:6e:27:ab:b0:53:
f7:32:b0:30:5e:0e:0c:72:f8:57:83:11:c3:cb:48:
7f:77:c3:5a:9d:24:b3:6f:c1:63:79:d3:41:c7:4b:
54:6e:08:11:d7:70:83:67:ff:61:aa:ce:b6:aa:f3:
c2:2a:c6:45:2a:a2:70:ea:eb:a6:7f:7c:c0:6d:0b:
ce:6e:52:a8:b1:ed:4c:86:63:9a:16:96:36:6f:c1:
e0:ff:2d:77:17:ba:1b:1c:cc:98:1c:85:6a:4c:d2:
09:dd:fd:12:f3:74:78:02:9a:ab:ba:c1:ce:26:58:
98:dc:e7:bf:f0:cb:f0:21:0d:7e:da:df:1a:9e:a4:
f5:58:02:84:45:cc:ea:94:d1:1f:49:97:bd:21:5b:
26:db:74:1c:97:f7:f6:a6:51:bf:b2:76:64:e5:ee:
34:8c:09:78:bf:58:db:81:fb:23:19:c5:3c:58:f0:
2e:df:ff:08:31:01:51:8e:2a:ce:69:60:47:a1:69:
df:8a:36:10:e8:f0:64:b6:44:e7:2b:8f:1e:46:18:
62:65:cb:e9:57:3f:4c:96:78:6f:92:5f:51:a0:b7:
fc:b3:ff:41:66:e1:eb:0b:e6:2d:cf:9d:6a:54:f6:
6b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:11:41:98:C7:EE:EE:BB:EC:D3:42:22:BC:17:3F:A6:71:F1:02:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a40ec85a-d6be-3510-b81c-ecbe3ede203d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.21.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:73:fa:37:62:80:ff:c6:8c:8b:63:5d:ec:64:3d:0c:36:57:
26:58:0d:da:dd:68:b9:a3:fe:ec:52:f4:2e:21:c3:89:8a:a5:
57:11:97:96:76:63:d4:76:3a:1f:ca:a7:f6:22:f2:1f:95:36:
7a:eb:d0:ef:55:cc:5e:49:29:89:e2:30:92:f9:c3:0d:31:06:
95:22:10:5e:85:34:82:3a:0a:7d:4f:ed:9b:9e:4e:98:37:fb:
d7:cb:54:0e:42:f3:27:ed:da:ca:bc:0d:4b:3f:ff:9a:be:06:
9c:b3:af:4d:fb:be:c2:09:4b:f0:29:23:72:95:16:61:42:7a:
9a:61:22:f3:49:32:e6:5c:7b:40:69:50:43:ad:4e:fd:c1:4d:
c3:ca:f6:4d:13:a6:a1:28:2e:53:c9:b2:cc:85:39:ff:fa:08:
d8:1e:07:74:c2:a2:29:1d:43:67:5a:01:b1:a0:47:71:98:5f:
3f:54:f3:84:32:c0:6c:db:1f:ec:78:c0:7e:ee:1b:16:92:56:
17:10:0d:ef:85:a2:47:54:fb:6d:e2:94:b2:bf:7e:09:1c:64:
76:fa:22:60:46:74:f7:28:18:22:95:37:35:6b:d4:8d:9f:ff:
ec:36:3a:17:1e:36:71:df:83:bf:d6:cb:84:47:bb:9f:de:b4:
e0:cd:ea:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 05:04:44 2026 by rpki-client