
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfe016f6-3dd2-3a51-8f77-54cd7998218e.roa
File: cfe016f6-3dd2-3a51-8f77-54cd7998218e.roa (raw, json)
Hash identifier: ImaPM5aaGm9Q4L+kp/zr1ODBgPGUZk1Ttc5D3JLp7+U=
Subject key identifier: 2C:C4:18:9E:1D:7A:B8:D9:43:74:5E:64:02:B0:6F:90:39:0E:35:AB
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584F7FD5E79F1B589F8A5AB44080
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfe016f6-3dd2-3a51-8f77-54cd7998218e.roa
Signing time: Wed 14 Oct 2026 12:34:06 +0000
ROA not before: Wed 14 Oct 2026 12:34:06 +0000
ROA not after: Tue 12 Jan 2027 13:34:06 +0000
asID: 19905
IP address blocks: 173.28.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 18 Oct 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7f:d5:e7:9f:1b:58:9f:8a:5a:b4:40:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Oct 14 12:34:06 2026 GMT
Not After : Jan 12 13:34:06 2027 GMT
Subject: CN=481ca31a-9036-4509-99b2-bccc80f0e2cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:32:e4:79:ff:d4:c5:25:9a:11:e9:82:56:a2:
3c:9f:c5:f1:bd:bb:b7:c3:5f:2d:31:9f:8f:d7:7e:
a3:90:91:97:c1:0c:62:d8:8e:92:f6:3d:e1:1c:d8:
8b:4e:5c:e1:24:99:b6:5e:55:ce:20:32:ac:ae:52:
74:e5:bc:8d:f1:0b:87:30:8e:73:b5:68:b3:fb:5a:
fc:ef:50:2a:fc:1a:f8:c7:0c:9e:22:0a:58:73:0f:
c6:e8:3b:89:59:86:7b:f7:f7:a7:e0:d3:07:bd:30:
39:36:72:26:45:2a:9c:e5:37:97:c3:61:df:f6:bc:
cb:7c:e6:f9:12:ee:8d:39:09:dd:7a:8b:3b:d7:ea:
1f:97:61:ee:6c:4f:06:67:69:df:7c:d0:a2:13:8b:
41:36:e4:1f:4e:76:ad:e1:8c:8c:87:92:be:25:0a:
70:20:86:33:a6:9d:c9:6b:e1:e0:96:8e:97:d1:75:
19:02:ed:91:ee:6d:4e:e4:bd:dd:2b:69:3a:5b:a2:
18:8f:5c:a1:d0:5e:27:c3:db:21:a3:1d:0a:13:63:
02:e0:1a:f5:7c:11:31:b5:d4:4d:fc:f1:fd:01:57:
3a:f0:bb:5d:4a:ee:90:9b:c9:80:c6:05:a6:f6:5c:
4c:05:6b:6e:53:b1:95:13:d7:1f:e3:74:1f:03:38:
7a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C4:18:9E:1D:7A:B8:D9:43:74:5E:64:02:B0:6F:90:39:0E:35:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfe016f6-3dd2-3a51-8f77-54cd7998218e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.28.36.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:0a:f5:0b:24:e9:47:be:58:25:b0:47:d4:81:4d:d8:f4:3e:
29:9f:73:04:96:41:d1:f0:ce:35:f5:ed:52:9f:c0:27:99:18:
41:2a:c0:9a:e7:b4:c1:a2:61:9c:83:41:6e:cc:e1:72:e3:16:
e6:0e:51:f9:21:a5:9c:66:24:18:bd:37:6d:33:8b:6a:0a:a7:
bf:c2:ce:27:f6:1a:13:d1:eb:45:7c:2b:5a:ff:3d:e0:24:18:
ed:e1:c2:6a:b7:23:4d:4f:d5:85:2d:10:9b:db:97:63:9c:8f:
bc:53:c2:0b:4a:67:70:a2:fb:60:a8:73:17:6e:01:6a:b6:b5:
43:05:15:32:54:6d:7e:11:d6:6e:3d:73:36:3f:7d:ad:14:76:
fd:25:23:fc:ed:44:61:ba:52:27:64:81:d0:ef:8e:d5:a3:4d:
60:9a:c8:68:18:18:d3:f5:f4:7f:d3:a8:22:cf:85:ab:3d:92:
bc:7e:a0:a4:e5:35:ce:ce:c8:8f:6d:52:9e:3a:8c:ef:db:b6:
2e:a0:98:2d:d2:1a:3e:bc:1d:26:d0:bf:3f:8b:1e:46:1d:b1:
ac:cf:f0:41:82:ed:00:1e:b4:1b:90:52:e5:7f:48:4b:0d:61:
ef:5c:98:85:d8:92:b3:dd:48:b3:03:8b:84:87:ed:c3:3f:b5:
27:4f:cf:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 00:19:10 2026 by rpki-client