
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/355c2de8-0117-3773-bad1-d686f6a53499.roa
File: 355c2de8-0117-3773-bad1-d686f6a53499.roa (raw, json)
Hash identifier: vXJ03jac3GO1sqxfR0FUcOYIUfTdheEzvNx73E+8fjg=
Subject key identifier: 80:05:51:98:C8:65:A3:5C:19:58:3C:9B:42:18:C2:7A:0E:FE:D5:71
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D27AA1EBAA6C94075186A8E00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/355c2de8-0117-3773-bad1-d686f6a53499.roa
Signing time: Fri 13 Mar 2026 13:00:40 +0000
ROA not before: Fri 13 Mar 2026 13:00:40 +0000
ROA not after: Thu 11 Jun 2026 13:00:40 +0000
asID: 30036
IP address blocks: 173.31.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:27:aa:1e:ba:a6:c9:40:75:18:6a:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 13 13:00:40 2026 GMT
Not After : Jun 11 13:00:40 2026 GMT
Subject: CN=c62e9007-d1b1-4b56-a552-653f42a7c03c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:54:c5:45:17:4d:45:f6:37:e4:f2:23:0c:bd:
bd:a6:44:b8:ae:d3:e1:60:6f:85:9e:22:a7:21:41:
a8:ce:c4:51:f5:82:14:14:ae:16:fe:fe:86:27:de:
fa:01:05:62:71:7a:db:71:1c:fd:89:48:70:a6:a9:
0a:24:71:1d:0c:fc:a7:05:43:52:3a:2c:c8:79:24:
45:a8:3e:ee:16:56:db:b7:f8:01:58:3a:e9:e3:ed:
e6:12:b2:88:84:61:d0:29:09:f1:d8:ad:c8:c9:69:
a6:da:70:c5:90:21:59:e9:5a:f8:e5:e6:d2:f1:b5:
ba:01:c6:4b:c9:9e:17:4e:67:47:4d:51:1e:d0:4e:
8c:71:7d:69:a4:ee:ed:07:02:8f:d5:44:91:a9:b4:
96:4b:08:e0:cf:c4:ad:6a:bd:dc:74:ce:b1:d7:11:
b8:8e:cc:6f:40:13:cf:a1:c9:2e:15:d7:d8:b3:ea:
64:ed:ef:9e:93:f0:bc:92:90:e2:e7:b5:4f:9e:cf:
89:48:d0:65:bd:49:94:4d:66:18:ca:0d:44:cc:f3:
da:a0:07:0d:77:08:d7:71:16:d2:e6:f5:fa:cf:6d:
bd:9d:36:69:73:32:ff:04:c8:ec:8a:51:85:c2:c6:
2b:23:2b:54:a6:8a:9b:c8:58:83:c5:e7:5c:d3:94:
1d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:05:51:98:C8:65:A3:5C:19:58:3C:9B:42:18:C2:7A:0E:FE:D5:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/355c2de8-0117-3773-bad1-d686f6a53499.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.31.50.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:45:f9:a0:ce:5d:fd:15:b3:d7:13:39:a2:0e:6c:fc:1e:d6:
49:a1:72:c6:a5:20:41:e6:19:51:b5:c4:33:5c:bc:f3:a9:68:
61:d8:86:4f:b0:6a:74:98:1f:96:1a:cc:b9:b8:db:09:20:91:
20:31:30:31:ae:ec:b3:62:66:87:9e:e0:aa:36:23:e9:ed:a5:
17:d0:12:07:1c:ff:a3:0f:89:c6:a7:6f:70:9a:85:97:43:b4:
cc:b5:08:86:7f:59:7e:8f:90:2f:de:65:12:6c:10:a6:ca:e7:
bb:84:14:d1:c3:ed:ae:69:3c:a8:a8:59:54:27:eb:d8:f3:dc:
4b:33:f9:a0:90:58:95:f2:4a:01:b5:c5:a2:e2:bd:a6:26:c6:
39:6c:73:4e:26:ee:50:be:b5:75:12:e0:a4:e3:4e:6e:5d:d3:
23:18:7f:f8:95:99:e7:97:11:8e:8e:95:a0:91:cb:12:a5:d3:
70:97:68:09:f0:ea:1c:88:e2:fc:e1:64:2b:41:8c:b7:03:9c:
67:08:bc:4d:17:55:a5:51:ca:cb:13:13:ec:21:01:23:9a:46:
a8:f0:ea:d5:8e:6b:f0:d1:12:a5:62:51:19:df:47:78:4c:91:
1a:5d:9e:0b:f5:b5:f1:9e:f7:09:21:1e:77:a6:d5:e0:00:11:
14:2f:3e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:26:42 2026 by rpki-client