
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/156b32fa-4b16-38ef-834b-df0b47ce0b33.roa
File: 156b32fa-4b16-38ef-834b-df0b47ce0b33.roa (raw, json)
Hash identifier: TAol+WIH/2fclj2LtQqeDEEoM+n3iKPmNRIXc5BNNTE=
Subject key identifier: B1:5D:17:4C:11:73:62:81:A4:08:0F:4A:63:93:5C:3C:73:A9:B5:1E
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D2644D3DFCFB1E4C76ED1F600
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/156b32fa-4b16-38ef-834b-df0b47ce0b33.roa
Signing time: Fri 13 Mar 2026 01:00:31 +0000
ROA not before: Fri 13 Mar 2026 01:00:31 +0000
ROA not after: Thu 11 Jun 2026 01:00:31 +0000
asID: 30036
IP address blocks: 173.22.96.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:26:44:d3:df:cf:b1:e4:c7:6e:d1:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 13 01:00:31 2026 GMT
Not After : Jun 11 01:00:31 2026 GMT
Subject: CN=57c58296-ef4f-4751-95a9-3dc0b45e0e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:7e:35:c9:22:59:f0:df:f8:db:49:27:90:8f:
6d:3e:32:4e:c6:9c:af:2f:cc:f0:b8:13:08:7f:6d:
e1:34:76:82:ac:da:2a:fb:49:33:2e:19:78:11:57:
ca:68:81:1d:e5:37:0b:d1:d7:c6:5b:5c:ed:fc:f7:
44:87:b7:57:c6:41:58:ec:4d:8e:1d:5e:e3:46:1f:
b9:a4:43:d3:5e:85:00:f5:82:2a:b4:3c:33:2a:2e:
9d:02:54:74:17:70:de:a3:49:81:e6:fd:08:ce:bc:
ce:2f:48:ff:8a:71:85:c1:6b:7a:ab:c6:72:0b:e8:
6c:81:34:5a:72:fe:30:db:f1:32:7f:cf:46:94:f8:
2a:88:72:4d:5a:9b:08:27:6e:a1:2e:ce:33:fd:80:
7a:52:05:17:01:e6:87:df:f9:1b:df:4d:89:2f:f2:
37:24:71:84:50:0a:4a:a2:e6:09:d9:65:65:b8:76:
84:36:14:8f:c4:da:18:e2:2a:ce:58:c3:1b:c2:d5:
1f:be:15:68:53:ad:5d:5d:3e:b2:99:f0:a6:6f:ae:
fb:36:94:31:df:6d:d9:c5:1a:25:5d:ea:12:4e:8b:
3d:bf:d4:52:a7:27:0c:82:aa:8a:8a:eb:9d:de:11:
05:73:68:84:35:bf:1a:06:29:c7:7c:bb:ae:41:4f:
e8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:5D:17:4C:11:73:62:81:A4:08:0F:4A:63:93:5C:3C:73:A9:B5:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/156b32fa-4b16-38ef-834b-df0b47ce0b33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.22.96.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:76:01:7b:ed:c0:24:5f:8e:e9:17:8c:34:47:ae:0b:e4:3f:
98:5d:77:7a:ef:eb:12:db:d3:f3:e1:5d:30:4d:b6:1b:16:a0:
6a:cf:63:60:57:fa:5f:26:8e:cc:11:16:96:76:43:e8:a7:e4:
69:17:30:c2:6a:3a:a9:f9:93:6a:27:99:56:03:48:6f:ce:e3:
0e:c8:80:26:6a:ef:d5:81:2c:46:f9:f4:78:49:e0:f9:1e:93:
ba:cc:bd:c8:24:50:17:42:56:1d:ad:29:eb:8c:ee:89:52:e4:
b3:e8:22:12:5f:e4:48:d7:9c:41:ab:ab:5f:e9:98:bb:e4:9d:
c1:c6:ff:e3:0b:1d:71:a4:56:5a:17:fa:ca:05:e0:e2:e7:cf:
0f:26:6c:c8:56:0d:4c:ee:0a:74:2a:9f:80:b1:02:ef:7a:1f:
2e:0c:3f:3b:b1:81:b8:f9:59:8a:f5:e3:8d:55:27:7d:3b:a3:
1d:ea:45:2b:a6:df:52:8f:a3:23:a3:84:97:2c:06:b0:72:94:
78:02:3b:e4:0a:2e:5c:05:3f:d7:98:6c:ff:c4:18:89:98:34:
3f:4e:7c:d0:f5:41:1e:25:f4:3b:1f:ca:68:99:ff:38:db:cc:
05:1f:21:da:bd:bc:48:f1:15:9e:f5:26:58:dd:2d:c8:22:7b:
d3:d9:f9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:23:39 2026 by rpki-client