
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c043170f-a250-3170-a4aa-5ad85a821236.roa
File: c043170f-a250-3170-a4aa-5ad85a821236.roa (raw, json)
Hash identifier: oajP9y9ooMxn3ToRppGVFJoUicV+fJblK0WQPwlIcWo=
Subject key identifier: 2F:85:A1:BA:79:8A:54:8B:50:38:52:E6:F7:AC:0C:F2:07:D2:AA:BC
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584EA79CDCDF890A5C8F73E44440
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c043170f-a250-3170-a4aa-5ad85a821236.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 30036
IP address blocks: 173.20.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9c:dc:df:89:0a:5c:8f:73:e4:44:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=40df6486-2204-4b1c-a2f3-0d75017d3152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3a:b0:33:e3:42:66:97:c1:c2:b8:58:79:2a:
22:84:6a:a7:88:da:0c:47:75:0b:25:16:5f:ec:46:
cc:1d:3e:49:df:4c:98:e9:2a:ce:0b:e7:19:6a:6b:
b4:97:aa:0c:51:34:3a:21:f8:d7:66:47:85:e6:6b:
55:3d:5e:0b:c9:c8:2c:e6:52:37:b2:e4:6e:5d:fc:
be:17:6e:19:29:8a:72:72:96:ba:7f:ef:68:6e:50:
a3:4e:d6:de:46:c7:0f:44:c3:04:b0:0f:db:fe:57:
73:b6:dc:48:48:3a:df:0f:7e:21:4b:a2:db:e4:ba:
ee:44:e7:86:23:55:9b:56:a2:86:3f:67:fe:2e:a3:
fe:ec:0a:df:71:5e:ba:30:0f:fa:33:bc:1e:17:e2:
8f:19:8b:54:20:d4:52:ff:9f:fe:b4:f4:19:71:8d:
b1:51:56:bb:84:85:48:18:e3:aa:8c:02:a3:1c:e8:
eb:b2:27:61:85:78:97:98:f5:46:7c:9d:8b:dd:ec:
7a:b9:55:58:1e:4d:5e:c3:a4:ae:81:eb:c2:49:c8:
24:d4:3c:5b:4e:b4:18:f9:f2:fc:c8:42:ec:0a:7d:
6f:b2:0a:ca:a6:94:fa:e0:c6:11:39:d9:df:b3:50:
49:56:04:76:58:0f:d8:a6:14:98:05:bb:66:bd:a6:
a1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:85:A1:BA:79:8A:54:8B:50:38:52:E6:F7:AC:0C:F2:07:D2:AA:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c043170f-a250-3170-a4aa-5ad85a821236.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.20.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:96:49:33:74:01:20:b9:9a:4f:c9:ce:0d:a7:2c:26:91:f7:
f3:14:52:77:a9:25:06:ec:c5:47:52:b3:cd:02:67:5f:73:97:
33:cc:46:7d:81:6b:7d:4b:77:b3:7e:8c:3c:d2:00:76:f8:e5:
bf:75:31:16:6b:d7:d3:90:7c:4a:09:4a:1e:00:1c:dc:e7:42:
8e:2a:70:27:d3:9b:ff:8e:9e:c0:43:5c:6c:a3:4d:54:24:d1:
d6:d8:ec:31:3d:2f:1c:71:4e:6c:38:ed:69:0a:30:f1:79:1e:
a4:79:30:e4:e3:23:a9:5c:4f:ff:d8:a3:f0:e5:59:83:cb:a9:
dd:a8:90:4f:de:c0:83:cc:7e:0c:49:a7:a5:59:1a:0d:2c:79:
9b:36:9b:21:42:d7:ee:de:9f:40:cb:cf:e1:77:84:66:b2:0d:
55:67:2b:21:46:5f:dd:5a:76:a1:e7:d8:f3:5f:d3:81:3e:3a:
14:8c:34:8e:3d:fc:76:3f:4d:f3:2c:81:e8:c5:c8:29:e1:02:
9e:34:e1:52:1d:2a:27:55:15:77:5f:63:98:53:bf:52:5e:17:
d1:86:30:f9:a3:7b:a8:4d:61:86:f5:ef:1f:e7:d9:ce:35:d9:
45:49:54:3f:d7:ef:e8:31:23:3a:5f:cb:3b:62:f5:f3:37:3d:
5d:db:c1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:47:16 2026 by rpki-client