
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/53c2e012-ec24-3b74-99b3-c9a272ffd49e.roa
File: 53c2e012-ec24-3b74-99b3-c9a272ffd49e.roa (raw, json)
Hash identifier: 9hfAijJT/Vv5DzT2C9QalpeTBoZuo3BkrpC33t6Rr1k=
Subject key identifier: DC:6B:4D:74:C3:D6:F0:20:16:C4:7D:57:C8:07:86:82:3E:98:65:33
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D2B0F6CBBABC22F9CA78B6A00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/53c2e012-ec24-3b74-99b3-c9a272ffd49e.roa
Signing time: Sat 14 Mar 2026 18:12:25 +0000
ROA not before: Sat 14 Mar 2026 18:12:25 +0000
ROA not after: Fri 12 Jun 2026 18:12:25 +0000
asID: 30036
IP address blocks: 173.17.168.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:2b:0f:6c:bb:ab:c2:2f:9c:a7:8b:6a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 14 18:12:25 2026 GMT
Not After : Jun 12 18:12:25 2026 GMT
Subject: CN=d1bb2e11-b1b2-4976-ae06-8f7e71e28e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:34:77:a8:cb:18:25:ab:4d:0b:c7:3e:26:4f:
90:00:92:d1:f0:54:ef:de:45:ac:f7:7f:1e:2c:25:
8d:dc:55:c4:75:5d:c5:fa:76:f3:05:8c:21:33:c2:
9a:c7:b4:8b:ec:e6:b0:59:11:85:14:bd:31:86:16:
47:87:ed:93:86:3a:f1:03:cf:dc:f4:c0:15:8d:5f:
ea:87:3a:b6:63:e1:49:5e:0c:ef:a4:02:91:43:59:
b1:16:a5:ca:a1:43:6a:d2:aa:4d:a5:50:c5:3e:04:
6c:05:45:ea:97:07:e9:0d:8c:ed:f6:32:17:b3:62:
b3:82:0d:2b:c7:69:cc:bb:40:69:89:13:c2:09:23:
ac:66:a5:39:f1:55:f7:e0:43:ca:37:a3:a3:c1:96:
2d:d7:b8:06:39:c5:bb:a6:3a:14:36:a8:7c:e9:83:
26:cf:a3:34:05:94:95:00:da:03:a9:fd:d9:c5:17:
18:5d:47:cf:3b:9a:0d:91:4b:e8:e9:2d:35:86:7c:
95:0d:02:3e:97:73:52:d1:fd:02:70:68:c1:91:ea:
b9:01:c6:c4:34:b8:c0:2f:d4:36:9b:e8:99:ea:94:
50:a9:4c:99:c4:5a:a0:ad:ce:f2:cc:8f:11:4a:75:
b5:bf:c2:d2:ec:5a:38:f5:31:27:e2:6c:ae:e7:32:
33:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6B:4D:74:C3:D6:F0:20:16:C4:7D:57:C8:07:86:82:3E:98:65:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/53c2e012-ec24-3b74-99b3-c9a272ffd49e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.17.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:b9:a1:df:af:cc:f9:e2:9d:74:ff:04:44:34:e1:41:ed:72:
6d:6d:dd:0b:24:bd:47:22:d4:2c:68:3b:13:66:60:ff:fd:c0:
fb:7d:c7:c6:e1:70:c4:8f:ff:d3:ca:6a:35:f2:1c:cc:18:db:
fe:60:61:1b:d1:f0:c8:1d:fc:f4:5b:30:5b:61:ab:70:0d:92:
fb:d9:e0:7b:91:e5:fc:dd:2e:53:c9:fe:0d:18:f7:ec:1d:a2:
00:0c:34:9d:4f:36:fc:8d:94:07:7f:08:00:87:36:50:e9:11:
21:52:d2:9c:97:cb:17:5f:89:8d:7c:e0:c6:33:d2:f7:70:c3:
04:3b:8d:c0:18:66:3b:64:83:b0:cc:51:a2:d8:cf:a0:75:d2:
db:14:20:ba:80:dd:ef:d7:48:f1:b2:cc:49:46:91:34:21:44:
6e:0c:1c:23:8a:e8:fe:fe:17:6c:3a:17:96:d7:9a:13:e4:0e:
72:33:83:18:25:48:5a:de:93:bf:68:c7:4d:65:ef:69:b2:bd:
f1:28:65:64:09:ce:b2:e0:f9:eb:27:7f:cc:0f:d8:b2:5f:46:
ab:4a:c8:5d:16:8e:e1:61:df:11:0c:05:3c:40:8b:fc:f9:92:
1c:4b:1b:a0:4f:80:ed:1a:3b:cc:3c:de:ed:90:45:d2:6d:57:
a5:49:6b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:27:20 2026 by rpki-client