
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/daa28e38-ee74-3f4f-be6f-885995574d97.roa
File: daa28e38-ee74-3f4f-be6f-885995574d97.roa (raw, json)
Hash identifier: HunpZWX3ffVhjba8BVePgx7p8W4MpxUuv1Fru+Zwtcc=
Subject key identifier: 12:8C:33:0B:9A:43:5D:AD:97:53:EB:9B:0E:67:5B:D7:3F:96:39:8A
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584EBC77063375206C26AFF5E500
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/daa28e38-ee74-3f4f-be6f-885995574d97.roa
Signing time: Wed 05 Aug 2026 13:00:12 +0000
ROA not before: Wed 05 Aug 2026 13:00:12 +0000
ROA not after: Tue 03 Nov 2026 14:00:12 +0000
asID: 30036
IP address blocks: 173.23.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:bc:77:06:33:75:20:6c:26:af:f5:e5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Aug 5 13:00:12 2026 GMT
Not After : Nov 3 14:00:12 2026 GMT
Subject: CN=482eaf8d-bbbb-40f7-978c-5ff6f1887d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:68:b8:84:00:37:2d:ba:77:6c:7e:2b:12:48:
8d:f4:55:31:1e:e1:6d:1f:96:9e:fe:33:79:cc:b6:
ee:46:54:50:e2:3a:05:0f:40:7e:d2:bf:0c:9a:39:
f9:59:77:a2:ca:c8:76:79:2d:71:0f:03:4e:70:4b:
0e:56:39:1e:d7:10:0c:a7:44:20:46:89:77:d2:90:
5a:bd:57:df:87:33:5d:40:3e:72:aa:8d:4f:73:b1:
d5:ea:39:bd:6b:9f:5f:f8:eb:67:2b:38:2e:99:e4:
97:a1:b1:0d:5f:17:86:c2:54:c1:f3:73:50:57:10:
79:1e:7e:04:b7:c4:02:48:2f:68:ea:f7:5c:bd:98:
6b:f9:6e:df:d8:da:77:0e:0e:d3:4c:49:0c:bf:a9:
08:39:bf:cf:75:7b:25:7b:95:51:b6:60:b9:16:7e:
b0:49:f5:d0:5f:53:0f:d6:bb:1f:1d:49:c1:d9:78:
80:f9:62:32:80:25:31:4d:16:5b:6c:a4:0d:f2:4a:
79:b3:9a:98:13:7a:78:b8:d6:cd:75:90:d3:9c:b9:
b9:f1:dd:3b:d0:ca:fe:80:ce:8e:b1:f7:94:14:68:
ed:87:a7:2a:6b:a4:52:4e:cd:bd:ed:ef:50:fa:54:
31:d1:2b:f1:66:74:15:db:c7:da:13:f0:08:7a:71:
48:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8C:33:0B:9A:43:5D:AD:97:53:EB:9B:0E:67:5B:D7:3F:96:39:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/daa28e38-ee74-3f4f-be6f-885995574d97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.23.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:a0:b5:7e:e6:3f:c6:43:65:69:50:a4:bc:77:70:a6:2e:8a:
50:b3:72:cd:81:4b:d2:77:0d:99:3f:64:56:27:34:af:92:0f:
70:86:bb:9c:bb:11:56:eb:be:d4:da:eb:53:9f:9f:ff:6e:a4:
3b:9f:8b:9e:6f:a1:ec:fc:5a:5e:45:27:8d:73:00:7e:c3:13:
03:60:ad:8b:09:73:3a:81:69:33:11:2b:5b:7e:9b:c1:16:e6:
32:fc:33:1f:f9:c0:47:4a:71:e3:6f:c9:67:84:d4:a3:ab:1b:
d4:65:14:93:dc:6a:20:d9:33:fd:5d:9f:e0:87:1e:b5:0a:da:
d6:b2:22:1b:e2:42:44:0d:86:44:24:46:db:3b:85:48:3f:4d:
73:3a:16:46:3e:28:c0:0f:c7:a3:c5:58:f9:4a:1e:ef:14:1e:
3d:fc:54:0d:d8:4b:c7:14:86:01:81:07:f5:b4:86:49:16:75:
ed:27:29:1e:81:ed:29:5d:53:9c:22:55:e0:42:09:36:c4:5d:
89:ce:96:39:cd:d5:65:b7:9f:ee:ad:7b:00:3d:0d:83:ce:66:
dd:5e:93:a3:c5:c7:73:01:d1:4c:53:5e:79:49:e2:fa:bf:68:
4f:0a:01:c3:c4:ea:66:e4:aa:26:e6:b4:3e:d0:2b:03:92:a6:
86:6f:22:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:45:22 2026 by rpki-client