
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/05ae186f-9bdb-3f1d-8ddd-351ad60f27db.roa
File: 05ae186f-9bdb-3f1d-8ddd-351ad60f27db.roa (raw, json)
Hash identifier: cz8L3AX5ibkdJwMbb++EM+H4zsiOMKhHXIuNxYVQ5Es=
Subject key identifier: 5A:CE:A2:AD:9A:C0:0F:02:B9:00:44:97:04:41:CA:FB:0E:39:16:9B
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D24E119A0B961BA6E012B7C00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/05ae186f-9bdb-3f1d-8ddd-351ad60f27db.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 30036
IP address blocks: 173.23.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e1:19:a0:b9:61:ba:6e:01:2b:7c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=9ca86b03-e90a-4dc0-a333-75dcd1275225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:da:80:bd:bb:cb:de:9c:77:a7:95:39:33:27:
13:e3:af:da:15:cf:0d:ca:68:2c:2e:e0:c1:c0:c0:
83:2f:72:c6:e0:67:de:5b:4c:56:3b:f4:59:66:70:
9d:c5:10:32:6e:4e:53:a5:2f:7d:55:58:88:57:11:
1a:0a:67:29:46:bc:f7:66:e7:00:b9:8e:d8:5e:9b:
65:98:ae:88:29:b0:45:c8:e4:1c:13:9d:c5:b6:0a:
c3:e5:5a:9c:ba:9f:1b:eb:73:79:92:74:4e:fd:52:
c3:a7:68:65:34:e7:ec:ff:13:7d:3d:eb:92:11:19:
90:ce:a0:14:df:e6:29:25:0f:6a:46:55:3f:24:4b:
77:f3:19:ad:46:7b:b1:a8:3c:43:8e:98:24:9f:86:
26:c5:61:5e:94:e5:ec:8a:f4:f6:42:02:b3:c5:c4:
89:62:20:1a:d8:ab:2e:de:65:f7:b8:14:eb:08:09:
2d:67:91:5f:f0:13:83:89:f0:c2:26:a9:ed:8d:81:
bf:c6:94:b4:b0:98:7a:14:4b:85:d8:8f:fa:c0:f3:
de:ea:d3:4b:5e:50:63:1c:89:69:ce:c8:a1:2a:d1:
66:72:e8:e2:fb:23:a8:34:c5:4e:e4:e8:47:28:7a:
be:c2:20:7a:57:45:9d:4a:be:ea:9f:e0:5c:e8:56:
7f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CE:A2:AD:9A:C0:0F:02:B9:00:44:97:04:41:CA:FB:0E:39:16:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/05ae186f-9bdb-3f1d-8ddd-351ad60f27db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.23.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:b7:ce:77:44:bf:3f:34:63:82:d5:75:d7:ed:fa:14:3d:8d:
42:a8:ef:79:62:ad:7f:73:74:f5:79:bf:f0:7d:cb:fb:60:60:
4b:a2:db:18:15:da:13:20:72:fb:bd:1b:7f:8c:b5:d7:90:40:
a8:88:ea:11:f6:aa:ef:24:6f:7a:73:92:a2:c2:d2:46:b1:a1:
03:9c:1c:9b:7c:e0:ec:34:3d:58:a6:e6:a7:fe:8c:93:b9:8f:
50:1d:be:da:6c:64:fa:e7:2d:ae:1a:27:93:b8:58:c6:26:67:
9f:3b:0e:7f:4d:90:07:e0:7d:a3:f2:80:3c:81:ec:b1:a7:f3:
de:50:14:65:46:77:8d:5b:88:18:32:2d:aa:14:85:6f:68:74:
91:49:d3:79:bf:e4:0c:fc:89:de:9a:58:e7:21:c3:a7:7e:4b:
12:61:3b:0b:e1:97:0c:84:fa:32:bd:73:7b:8b:f0:f6:d3:42:
ef:78:f0:50:75:fb:19:43:4e:d3:90:00:94:e1:19:de:cd:b4:
65:7d:a3:e4:47:b3:38:f4:d7:43:6d:85:14:d2:ee:95:dd:00:
83:f6:f7:b0:7a:4d:7c:8f:0d:c0:2d:41:51:62:88:a8:94:72:
bb:e6:81:b1:2b:f7:f9:91:c4:e7:e8:1b:38:13:19:56:2f:7c:
a7:da:02:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:22:34 2026 by rpki-client