
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4484a151-9584-37ca-a9a6-d2cd53feb390.roa
File: 4484a151-9584-37ca-a9a6-d2cd53feb390.roa (raw, json)
Hash identifier: T1zWKQydl7IxIrI9HkJUospCiRWl8TrJEvuGoCCAGcc=
Subject key identifier: 44:3A:AE:45:BD:63:E0:1B:E7:05:BA:E8:87:D9:49:6D:FF:1C:2B:48
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D24DF6FC1B08072E8343B1100
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4484a151-9584-37ca-a9a6-d2cd53feb390.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 30036
IP address blocks: 173.17.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:6f:c1:b0:80:72:e8:34:3b:11:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=b5a35331-361f-4247-a71a-492f87cc7448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:69:5f:3f:b5:8e:9e:38:82:b0:c6:4e:6d:f6:
fc:04:f2:f0:74:97:73:f3:85:94:31:bb:ad:85:97:
3b:c4:79:7b:7d:6b:a4:0f:0e:b2:34:59:2b:b7:f6:
4e:fb:15:6f:1c:e6:8e:db:0b:ed:dc:e4:17:2c:11:
e1:0e:15:84:1f:8d:2b:8c:f5:dc:e7:0d:cd:52:cf:
bb:14:c4:37:3e:08:1c:97:ef:10:53:5b:b0:af:3d:
f7:93:82:f5:d8:15:da:2a:42:06:1e:1c:e5:fa:ae:
78:d9:a6:8d:b5:fb:d0:47:ec:83:1c:1b:8d:62:7e:
3b:3d:96:c1:04:75:17:50:31:26:87:fc:c4:2d:d2:
e6:72:f1:ae:85:50:9b:5f:dd:c7:29:51:c8:c3:6e:
8b:99:34:9a:a9:b4:7a:15:e4:2d:2f:31:9c:21:42:
58:33:c2:54:9f:54:b3:d9:00:37:42:38:1d:b8:9a:
35:03:c8:d5:5f:f4:9f:b4:6f:2d:b6:a9:6b:21:20:
5e:59:af:4b:2c:a5:4a:ea:7b:92:d1:fe:04:17:ae:
6d:24:2a:be:93:ff:8c:eb:b4:6a:15:b6:30:f8:12:
6a:91:bd:15:d8:85:52:f1:bb:eb:c9:6c:26:da:93:
c5:d4:ec:13:e1:8c:82:e0:40:8e:cf:a9:01:6b:6c:
90:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3A:AE:45:BD:63:E0:1B:E7:05:BA:E8:87:D9:49:6D:FF:1C:2B:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4484a151-9584-37ca-a9a6-d2cd53feb390.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.17.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:bd:9a:62:2d:23:2e:ad:d4:cf:ca:85:89:08:e6:ea:ac:69:
0b:91:1b:94:17:1c:01:12:cf:d3:a3:a3:16:73:3a:72:b6:01:
b5:f8:6a:b8:d6:57:40:42:ed:7e:5e:95:8d:2d:0c:38:43:7c:
34:4d:95:1f:8a:43:b3:6f:eb:e2:22:d1:00:88:23:50:c5:8b:
01:04:98:a7:64:ab:78:23:b4:8d:63:34:06:5f:fd:a4:94:21:
4d:7d:ce:51:1e:ed:7b:31:a8:50:15:06:bd:f6:32:ce:05:26:
b5:36:67:03:95:75:7b:0c:07:9a:c3:de:22:0c:5f:da:60:92:
f9:38:d9:9a:48:c2:e9:48:d4:5c:ed:ae:7e:4c:94:23:fb:24:
a0:ff:b6:c6:74:96:68:0c:c2:20:48:25:f8:96:0b:ca:7a:55:
42:a2:79:7f:1f:63:d2:a6:03:c1:c2:25:b0:84:61:2d:88:e9:
05:5d:c0:76:cc:9c:49:d2:ce:78:a4:33:1e:e8:a2:cc:c6:ab:
fd:d3:91:4e:7a:f0:82:2d:b0:97:67:b1:e6:01:8f:67:db:27:
9c:e4:37:f6:6f:55:f2:29:5f:67:23:0a:e5:15:1a:32:7d:be:
bf:be:e6:23:4e:c9:eb:6b:5d:51:54:83:57:fc:bf:ad:a2:01:
2a:3b:33:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:56:05 2026 by rpki-client