
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86d6c431-f4cf-38ce-bf3b-a13315ca5ab1.roa
File: 86d6c431-f4cf-38ce-bf3b-a13315ca5ab1.roa (raw, json)
Hash identifier: EPe+TiezL/14iUHqUJsaG7yUwBNVMGIzJk3hzAOVtlI=
Subject key identifier: 2F:A0:E8:CD:53:D1:8F:31:7C:42:E8:71:A4:43:40:CB:6C:D8:88:AD
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D24DF900639B3DA6143578A00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86d6c431-f4cf-38ce-bf3b-a13315ca5ab1.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 30036
IP address blocks: 150.195.36.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:90:06:39:b3:da:61:43:57:8a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=75dd4891-bd4a-4463-ad53-4b159b527fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8e:38:1b:55:57:da:3a:db:5d:48:a8:80:67:
cb:94:f5:ed:8a:2a:77:9b:44:85:b5:b9:7e:af:fa:
b1:11:9d:ef:6f:35:be:8d:e0:d0:e9:2d:9a:57:df:
0b:d7:a1:3b:28:4b:8a:3f:d9:f0:ea:7b:8c:4c:d8:
9a:41:3b:c4:06:bb:01:ea:a9:92:bf:06:0d:b7:2a:
12:d4:63:2a:77:b4:fc:a7:e2:e9:c8:88:18:48:ef:
46:50:d7:f0:84:06:08:a4:9c:a3:c1:db:ec:11:e3:
71:06:42:19:aa:d6:a6:ac:b5:bc:d0:f8:67:2e:e1:
bc:57:11:bd:d3:64:a0:dd:0f:bf:0c:b5:1d:52:64:
34:9d:4f:76:1c:39:24:61:97:05:22:b4:bc:3a:31:
49:df:f4:66:c1:82:09:4c:cc:36:21:20:0f:fd:07:
99:91:b3:4d:ba:20:1f:62:98:de:4f:79:29:03:3d:
32:c5:b4:b9:b7:07:51:9a:19:b9:db:5f:38:d8:e7:
f9:8d:d3:80:5e:5c:ab:af:00:b7:f8:e8:84:11:2c:
c1:72:24:f8:30:3d:f4:c1:62:6d:f9:a1:9e:77:98:
6f:62:8d:3f:00:31:cd:b2:6c:be:1e:c3:83:f3:45:
d6:7b:6f:32:34:20:cb:71:72:a2:33:8f:14:14:43:
c6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A0:E8:CD:53:D1:8F:31:7C:42:E8:71:A4:43:40:CB:6C:D8:88:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86d6c431-f4cf-38ce-bf3b-a13315ca5ab1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
150.195.36.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:cb:35:ad:08:7b:80:af:c6:b0:be:4d:4a:97:c1:8a:02:ee:
23:89:bd:8c:0a:93:8a:f9:7f:61:8a:56:fe:80:f2:be:00:c1:
e6:e0:61:7a:20:f8:e9:a1:31:ef:20:d9:f7:a3:42:d2:ed:5a:
7d:f0:a4:f7:0c:64:41:c1:92:56:b4:57:f6:42:94:6e:e9:72:
45:7c:ad:98:fd:ae:f5:78:b1:32:2c:4c:d5:d3:76:4d:70:f0:
68:13:ff:31:04:6d:48:f4:be:fa:39:4a:93:7d:f3:74:40:0a:
a5:cb:1e:bc:5e:0c:d1:ad:d0:1f:3a:d5:1a:ea:62:06:6f:cb:
a1:9f:39:65:d9:ba:de:6e:8f:03:64:86:0b:4c:46:97:21:d9:
f2:6b:3e:a2:37:44:aa:6d:80:72:a9:32:65:e9:83:75:41:af:
4d:84:62:2a:7f:f9:1f:ff:32:c3:d7:c4:c9:a6:f0:6e:16:87:
7f:f9:ec:a1:69:3c:77:53:8c:25:ad:e7:7f:99:22:3a:d5:3b:
9b:3e:e2:e9:a9:81:59:38:85:1e:09:c5:5b:10:19:38:54:be:
0b:24:08:61:4a:87:1f:77:75:88:43:cb:ff:ad:80:8c:7d:78:
90:80:60:ac:d9:21:1d:d8:18:51:d4:40:31:34:7a:3f:71:84:
3f:99:74:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:34:50 2026 by rpki-client