
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bbf2bda1-6db3-34ae-97e0-4a9026945f20.roa
File: bbf2bda1-6db3-34ae-97e0-4a9026945f20.roa (raw, json)
Hash identifier: 5EevA4I5CUKpZtg19QKkje131efhNQ4X/gmf5pQlMtg=
Subject key identifier: 47:E2:51:BF:69:17:30:BF:52:29:34:87:55:5F:28:99:B3:23:44:66
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584EBC77199209E38D68CAC78D48
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bbf2bda1-6db3-34ae-97e0-4a9026945f20.roa
Signing time: Wed 05 Aug 2026 13:00:12 +0000
ROA not before: Wed 05 Aug 2026 13:00:12 +0000
ROA not after: Tue 03 Nov 2026 14:00:12 +0000
asID: 19905
IP address blocks: 173.24.168.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:bc:77:19:92:09:e3:8d:68:ca:c7:8d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Aug 5 13:00:12 2026 GMT
Not After : Nov 3 14:00:12 2026 GMT
Subject: CN=683b2ee8-fd86-4f38-9c6a-017e8ccb6e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:46:33:08:14:06:84:78:8a:7b:d4:23:7c:52:
83:fd:b3:a5:83:f4:cd:3e:18:a6:b5:ec:8a:eb:a4:
c5:eb:71:04:4a:12:82:ca:f4:54:27:d3:e2:32:63:
ca:ba:8b:f9:09:03:46:e3:41:6b:c9:85:4e:9f:e4:
42:29:a3:70:0c:df:94:b6:15:50:27:2b:74:81:74:
8b:e1:cd:8e:9d:6f:d1:0c:a1:56:17:6d:22:f6:8f:
bb:9e:9b:92:34:f5:8a:f6:c7:4a:ce:d6:25:15:5d:
ee:ab:a6:ac:b0:11:ec:a3:dd:18:55:30:7e:6b:65:
48:1a:6d:8f:05:05:75:54:d7:04:fd:a7:75:e3:ed:
53:03:a3:b9:b3:f4:f1:a6:30:d6:8f:3f:49:c1:69:
a2:e4:d2:7b:89:16:60:c2:3f:2d:1d:1a:ff:6e:54:
9a:6d:d3:3b:d9:35:9d:e7:fc:2c:76:f7:2a:ab:d5:
6b:27:8e:d0:2f:e0:e0:08:15:0a:ba:9b:c4:24:dc:
dd:e9:01:49:dc:b2:68:3b:e8:23:03:9e:d5:93:65:
51:92:34:3d:91:f1:57:16:a8:cc:b5:fd:59:8b:7b:
72:48:8b:d5:81:c3:2c:6a:27:dc:b9:f5:22:de:a9:
20:27:aa:da:38:65:80:b8:df:d5:61:85:3f:b2:72:
75:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E2:51:BF:69:17:30:BF:52:29:34:87:55:5F:28:99:B3:23:44:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bbf2bda1-6db3-34ae-97e0-4a9026945f20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.24.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:3f:75:cc:1e:e5:32:9b:64:30:7b:8b:e6:bc:a6:a2:ca:f0:
89:5a:fa:17:c2:1b:68:4d:a6:68:01:7d:47:a3:35:36:6f:3e:
1a:e8:57:e4:45:f4:81:f5:52:ed:89:50:ae:1a:40:9f:00:af:
8b:79:7b:3f:c6:f5:98:d2:5d:d6:6a:2d:b0:aa:56:d3:0b:36:
07:46:13:f3:ce:7f:a1:aa:95:a5:cc:21:af:68:68:c4:61:a8:
d2:65:74:39:dc:8d:43:cd:45:71:e9:0b:52:23:43:42:91:a8:
65:33:eb:e4:a8:69:58:af:78:e8:2e:af:b9:aa:f8:55:88:ed:
d1:d7:ea:d5:f9:46:1f:0f:07:65:23:6e:6f:d6:5c:57:97:ea:
0b:b8:95:2e:8f:b5:97:15:14:04:d7:4b:36:8c:1b:9c:7a:52:
96:72:ac:e1:af:c9:84:a2:f3:58:19:66:e6:6a:6b:db:63:21:
ba:12:b9:76:6e:49:0f:67:bd:79:cb:78:b4:11:10:f6:95:b5:
9b:9a:a4:f7:54:fd:8f:4e:16:e8:85:48:95:5a:b8:a0:e4:1d:
d4:78:0a:d6:13:30:0f:bd:f2:8e:65:aa:18:e0:ca:8d:be:5e:
48:35:fb:67:86:24:54:aa:80:33:5d:e3:7e:53:23:a9:86:30:
b4:fe:24:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:08:24 2026 by rpki-client