
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/3e967bc0-2abf-3ecf-8a86-afd82320bfba.roa
File: 3e967bc0-2abf-3ecf-8a86-afd82320bfba.roa (raw, json)
Hash identifier: 0GlwxHDKCNmfeKrPeiyD2C/1rKAKINB8zuLAORr2rtE=
Subject key identifier: EF:96:88:EE:4E:BB:EA:E7:16:BF:8F:01:6C:02:4F:7D:F8:DA:05:34
Certificate issuer: /CN=cb3c1858-774e-412f-8f35-dbceb0979782
Certificate serial: 010D0C9F4328584D9FB571155ACF1E14C87BE334
Authority key identifier: B3:17:21:79:FB:C7:21:75:01:31:E9:A1:28:22:A6:C2:CA:8D:B6:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/3e967bc0-2abf-3ecf-8a86-afd82320bfba.roa
Signing time: Sat 25 Apr 2026 13:00:30 +0000
ROA not before: Sat 25 Apr 2026 13:00:30 +0000
ROA not after: Fri 24 Jul 2026 13:00:30 +0000
asID: 23118
IP address blocks: 69.36.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/cb3c1858-774e-412f-8f35-dbceb0979782.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/cb3c1858-774e-412f-8f35-dbceb0979782.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Apr 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9f:b5:71:15:5a:cf:1e:14:c8:7b:e3:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb3c1858-774e-412f-8f35-dbceb0979782
Validity
Not Before: Apr 25 13:00:30 2026 GMT
Not After : Jul 24 13:00:30 2026 GMT
Subject: CN=5ad4c1ba-9b2a-4511-9814-db641d50f053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5e:e9:ae:13:7d:93:cd:05:77:e4:57:3c:8b:
a1:9c:ce:ff:08:93:10:c1:f5:2e:59:bb:0a:89:ef:
54:58:e7:62:38:68:3b:5c:d5:54:83:55:95:5e:11:
a7:81:76:7e:fc:c7:21:a8:d7:da:a4:13:fe:0c:f9:
6b:6c:1b:97:64:87:38:c0:6c:3b:d6:6f:6e:3a:dd:
f2:cd:2c:79:40:c1:e0:c4:03:97:01:f7:95:f4:5d:
e2:b7:c6:f8:c2:df:2f:9e:12:ed:c5:b8:2b:46:69:
0c:6a:ef:9d:8b:80:f3:e3:69:43:43:76:c1:27:72:
27:54:01:ca:98:53:2c:f6:59:d0:ee:50:43:10:da:
e4:4e:d9:c1:7e:61:fc:00:b9:da:a6:7d:cd:e7:62:
fd:4b:60:c8:1d:2b:21:90:da:63:7d:b3:cb:86:b5:
52:52:e0:63:9e:42:22:2a:18:57:ef:ec:57:30:3b:
5a:a4:b7:d2:fc:52:d5:34:8c:a2:4c:4f:56:25:40:
fa:3b:85:38:6b:15:ef:c7:06:b5:0c:bb:c0:2e:ca:
ce:74:a9:93:4b:3a:c0:91:41:db:68:16:ba:b2:e4:
28:60:67:19:43:e5:02:03:45:d2:fd:e5:2b:f2:38:
16:9d:72:d7:13:e0:7a:f7:c4:79:c3:b9:d1:a3:bb:
3f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:96:88:EE:4E:BB:EA:E7:16:BF:8F:01:6C:02:4F:7D:F8:DA:05:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/3e967bc0-2abf-3ecf-8a86-afd82320bfba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/cb3c1858-774e-412f-8f35-dbceb0979782.crl
X509v3 Authority Key Identifier:
keyid:B3:17:21:79:FB:C7:21:75:01:31:E9:A1:28:22:A6:C2:CA:8D:B6:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782.cer
sbgp-ipAddrBlock: critical
IPv4:
69.36.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:fc:f3:8d:64:b6:19:3c:19:67:e9:cd:18:23:5f:74:01:59:
4b:50:1d:9e:13:f6:7c:5d:aa:e8:71:e0:78:4a:cc:e3:45:b5:
2f:e5:14:d2:da:cb:24:23:92:f4:fd:76:ce:b5:29:38:96:49:
d4:43:24:39:bb:06:cd:5a:d2:ad:21:ea:31:1a:be:72:f9:c5:
1c:ee:9a:84:e9:ba:52:16:44:45:fa:8b:63:d2:a7:1e:72:7f:
ad:da:fc:69:08:18:22:09:48:d4:26:92:ef:a1:da:4f:a7:6a:
78:70:38:73:84:26:ee:2a:c6:83:09:c1:57:5b:f1:70:e2:c0:
bd:42:12:0f:c8:60:75:a3:9c:76:0a:e6:f0:13:00:33:61:0a:
82:6b:7c:c5:aa:59:ab:eb:55:55:b4:7b:8b:40:b8:7c:e4:84:
39:43:02:b8:80:f9:26:59:77:ee:a3:1f:8a:bd:e6:73:ab:33:
f2:71:13:c2:f6:28:b1:45:f6:33:ac:bf:98:d1:66:90:71:82:
09:e7:2a:f4:2a:58:25:f3:ac:1c:4c:00:ae:38:a5:f8:b4:e7:
a4:79:a0:b5:d8:92:03:db:3f:4f:05:a6:20:f7:77:9e:72:78:
74:e5:f3:df:fc:55:7a:ab:39:21:1c:67:53:b4:fe:84:e6:0f:
5f:ee:c2:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ftXEVWs8eFMh74zQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2IzYzE4NTgtNzc0ZS00MTJmLThmMzUtZGJjZWIwOTc5
NzgyMB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk
NWFkNGMxYmEtOWIyYS00NTExLTk4MTQtZGI2NDFkNTBmMDUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl17prhN9k80Fd+RXPIuhnM7/CJMQwfUuWbsK
ie9UWOdiOGg7XNVUg1WVXhGngXZ+/MchqNfapBP+DPlrbBuXZIc4wGw71m9uOt3y
zSx5QMHgxAOXAfeV9F3it8b4wt8vnhLtxbgrRmkMau+di4Dz42lDQ3bBJ3InVAHK
mFMs9lnQ7lBDENrkTtnBfmH8ALnapn3N52L9S2DIHSshkNpjfbPLhrVSUuBjnkIi
KhhX7+xXMDtapLfS/FLVNIyiTE9WJUD6O4U4axXvxwa1DLvALsrOdKmTSzrAkUHb
aBa6suQoYGcZQ+UCA0XS/eUr8jgWnXLXE+B698R5w7nRo7s/KwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO+WiO5Ou+rnFr+PAWwCT3342gU0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jYjNj
MTg1OC03NzRlLTQxMmYtOGYzNS1kYmNlYjA5Nzk3ODIvM2U5NjdiYzAtMmFiZi0z
ZWNmLThhODYtYWZkODIzMjBiZmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvY2IzYzE4NTgtNzc0ZS00MTJmLThm
MzUtZGJjZWIwOTc5NzgyL2NiM2MxODU4LTc3NGUtNDEyZi04ZjM1LWRiY2ViMDk3
OTc4Mi5jcmwwHwYDVR0jBBgwFoAUsxchefvHIXUBMemhKCKmwsqNtjwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9jYjNjMTg1OC03NzRlLTQxMmYtOGYzNS1kYmNl
YjA5Nzk3ODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARSTYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKr8841kthk8GWfpzRgjX3QBWUtQHZ4T9nxdquhx4HhKzONFtS/lFNLa
yyQjkvT9ds61KTiWSdRDJDm7Bs1a0q0h6jEavnL5xRzumoTpulIWREX6i2PSpx5y
f63a/GkIGCIJSNQmku+h2k+nanhwOHOEJu4qxoMJwVdb8XDiwL1CEg/IYHWjnHYK
5vATADNhCoJrfMWqWavrVVW0e4tAuHzkhDlDAriA+SZZd+6jH4q95nOrM/JxE8L2
KLFF9jOsv5jRZpBxggnnKvQqWCXzrBxMAK44pfi056R5oLXYkgPbP08FpiD3d55y
eHTl89/8VXqrOSEcZ1O0/oTmD1/uwrk=
-----END CERTIFICATE-----
Generated at Wed Apr 29 15:32:52 2026 by rpki-client