
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/36a52c38-5924-3726-a5ee-bb01bcf87ba5.roa
File: 36a52c38-5924-3726-a5ee-bb01bcf87ba5.roa (raw, json)
Hash identifier: tYozfRJNk5Cs6TP1BF0HoZ3MRR+JjP94b6n2/sRHEFM=
Subject key identifier: 17:8E:28:61:1B:99:E7:8F:9B:B9:B7:04:BF:E6:40:EC:4C:9B:F1:3B
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D24DF8DFDD2F8E1586A0BDC00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/36a52c38-5924-3726-a5ee-bb01bcf87ba5.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 30036
IP address blocks: 173.20.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:8d:fd:d2:f8:e1:58:6a:0b:dc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=8d3cce9f-fb04-44b1-8618-2c5b0912ee34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e0:81:e7:c4:5a:e4:a5:14:60:10:4a:ec:7d:
91:7a:f6:ae:d2:8b:cd:2a:f9:43:e7:2b:3e:68:3b:
14:39:c6:c6:99:35:61:94:a7:df:da:c1:0a:95:78:
bc:be:a7:ee:c6:db:f3:3b:61:f3:1c:15:9f:d3:78:
bd:07:a4:e2:ca:fb:c4:a1:4c:ad:71:da:ee:32:a8:
c4:fd:66:fd:5e:39:c1:56:95:be:cd:77:04:7e:67:
46:c3:46:0d:0c:a1:dc:5c:b8:4f:77:bc:60:be:0a:
44:e8:bc:a1:bf:5a:da:3e:4b:c4:78:43:07:ee:34:
95:8a:ac:ea:c1:6f:38:a6:0e:8f:20:71:cf:c6:0e:
e3:af:11:87:49:06:38:6c:3b:5e:bc:df:12:43:c5:
94:f5:e2:ea:ed:d7:c1:40:0d:b9:a7:af:1e:d7:ad:
83:c6:6a:52:d4:03:e0:40:9e:6a:d5:89:dd:8d:b3:
08:e6:d5:a3:40:06:db:61:26:7a:16:90:d6:3a:cf:
89:a1:e5:d4:5c:a5:0a:0a:94:ae:d0:3c:c2:bb:65:
62:9d:80:89:b3:e5:26:06:61:b5:37:ca:eb:9e:86:
be:29:fe:29:1f:56:ff:7f:50:6c:db:45:a2:00:fd:
1a:a2:bb:a7:f2:64:9f:3c:2c:a7:2b:0f:c9:66:a6:
86:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8E:28:61:1B:99:E7:8F:9B:B9:B7:04:BF:E6:40:EC:4C:9B:F1:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/36a52c38-5924-3726-a5ee-bb01bcf87ba5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.20.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:36:c7:e2:1a:fc:c3:d9:fd:dd:b9:ab:d0:f9:98:15:4c:c9:
d3:f2:64:cb:fb:bb:63:d9:d2:69:10:98:95:f4:53:03:ca:be:
04:39:46:10:b5:47:bb:ff:ad:3a:74:5b:b5:8c:5d:5b:02:ef:
71:e5:d7:e5:ca:51:fc:a2:ca:0d:ba:3e:b1:33:06:68:92:da:
53:fb:19:23:c5:86:41:09:a4:12:e3:8c:61:4e:8b:cf:b8:2a:
5e:47:6f:9e:5a:69:64:7e:9f:a2:02:66:f3:92:da:da:0c:c9:
3c:0f:f9:dc:79:9a:2b:66:20:2b:23:79:60:9e:71:8c:fe:f9:
18:d1:ab:86:16:94:c9:00:d0:1c:91:0f:5b:5d:03:2f:0a:46:
73:9d:b0:1e:8f:3c:0c:50:ea:3f:bc:f2:b2:6c:dd:66:e5:80:
c0:d0:ca:14:3c:6a:3f:28:42:ca:ce:0f:a9:a1:eb:11:35:9a:
35:0c:4a:62:f3:07:27:ef:5f:f6:8c:68:9f:f2:63:98:21:c4:
c9:2f:0a:33:1d:d5:9b:4c:1f:3d:2c:e8:b5:db:e7:aa:ed:72:
06:a8:9b:dc:69:a6:46:c4:3c:3b:bf:90:25:50:e8:fb:49:33:
1b:37:34:6c:f8:2c:ee:0e:e4:89:aa:d1:d7:6c:f0:e9:65:d1:
54:f0:55:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:41:49 2026 by rpki-client