
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b5254390-c338-35b0-965c-77944bca3d24.roa
File: b5254390-c338-35b0-965c-77944bca3d24.roa (raw, json)
Hash identifier: oWD47U6xvfVci62Njy2ZAwWIu3X/GUeB15aKyJWv9iI=
Subject key identifier: DE:41:70:F0:83:DB:6A:9D:B4:1B:B8:54:B0:4F:A4:F9:CF:1C:AC:F2
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D237A0346C5B3142BEDEA46E0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b5254390-c338-35b0-965c-77944bca3d24.roa
Signing time: Thu 12 Mar 2026 01:00:32 +0000
ROA not before: Thu 12 Mar 2026 01:00:32 +0000
ROA not after: Wed 10 Jun 2026 01:00:32 +0000
asID: 30036
IP address blocks: 173.17.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:23:7a:03:46:c5:b3:14:2b:ed:ea:46:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 12 01:00:32 2026 GMT
Not After : Jun 10 01:00:32 2026 GMT
Subject: CN=bc868454-00a4-4bab-9284-4a2d3bdb972e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c4:4c:3b:41:7f:46:5d:e6:2e:75:f4:24:6a:
17:13:a6:62:3c:d9:85:82:f7:7d:96:9f:c5:3e:5c:
5b:ea:07:71:14:18:76:3c:0b:ff:34:af:67:97:55:
53:eb:5e:4d:b1:c2:78:2b:aa:0b:79:79:53:37:75:
db:26:c0:14:f2:e9:e0:fb:5f:0a:8e:6c:1e:fa:09:
1a:21:aa:4b:ba:a9:52:b8:e1:71:72:51:b8:72:1a:
f4:f2:24:7b:bd:4b:20:3e:22:0a:85:ea:e5:23:2c:
98:b1:41:d2:c1:36:29:1b:6e:95:aa:08:0c:b4:da:
3e:5b:91:37:22:cd:9e:3f:f1:83:a8:39:42:64:19:
0c:62:f7:e9:c8:8b:cb:9b:0a:4c:f9:09:63:91:ba:
66:7d:4e:1d:5b:b9:99:65:99:83:d9:ab:12:e6:22:
fd:13:ef:6e:c9:f9:17:93:19:27:23:31:25:5c:8f:
bc:21:33:36:e5:14:9f:b8:c0:98:42:16:22:b5:da:
35:09:c7:26:a3:9e:02:c4:01:b1:42:85:68:f9:eb:
3a:51:d3:4b:ff:98:89:73:21:0d:98:4c:55:3b:97:
c2:c5:70:d1:46:e9:8e:95:25:1c:11:d4:b5:9c:d4:
a8:9f:0f:74:07:a5:1f:36:32:35:0b:f2:ad:70:d8:
4a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:41:70:F0:83:DB:6A:9D:B4:1B:B8:54:B0:4F:A4:F9:CF:1C:AC:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b5254390-c338-35b0-965c-77944bca3d24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.17.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:40:58:51:a1:18:d0:38:94:e1:78:40:f9:9c:ec:07:d5:30:
ea:a6:c8:c1:89:13:5d:e5:87:20:1d:94:98:73:bb:d3:a6:c1:
a5:23:02:25:5f:d0:45:ab:9d:a0:79:7a:95:c7:8c:74:61:8c:
2d:4f:53:0c:81:67:2e:e1:55:21:70:81:1b:89:6c:86:24:59:
6c:2a:e5:3b:9e:10:66:ca:ee:f9:a2:82:4b:42:51:d6:c8:13:
42:f1:cf:64:e9:4c:68:00:07:db:e2:9b:e0:3a:67:35:f3:62:
34:1a:a4:d7:4b:3e:d4:11:3a:92:a3:15:62:26:d3:94:dc:dd:
7f:d0:03:01:05:7e:66:a2:61:c8:87:e6:bc:95:46:0d:81:c1:
d9:fe:e3:7c:84:b6:1c:8e:c6:92:4e:82:50:79:4c:34:fb:d3:
12:73:d7:a1:c5:ac:81:8f:9f:17:5a:c5:04:71:55:19:18:85:
e0:f1:d3:2e:0f:6b:83:3d:fe:15:5f:b3:40:84:56:d2:e6:d8:
cb:8d:3a:bd:98:be:06:04:b1:f2:e8:ef:e0:8a:8c:9a:7e:99:
05:cf:93:a9:ba:97:85:7b:85:6e:09:49:05:70:86:84:ea:b4:
f1:c3:93:7b:47:1b:75:66:31:1b:27:40:87:9b:82:f0:5c:61:
11:9b:61:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 05:05:46 2026 by rpki-client