
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/963e3efe-e16b-3101-9c10-58fdc48b8689.roa
File: 963e3efe-e16b-3101-9c10-58fdc48b8689.roa (raw, json)
Hash identifier: xfluZTJinx+hnxaXaY7uM/hpfk4vV5N2gHV/aS+o3dU=
Subject key identifier: C5:C2:D1:2E:17:AE:79:95:DA:3C:6F:F8:26:84:DC:4B:3A:2D:69:C9
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D24DF80E79B9F5EC49FACD5C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/963e3efe-e16b-3101-9c10-58fdc48b8689.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 30036
IP address blocks: 173.24.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:80:e7:9b:9f:5e:c4:9f:ac:d5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=f95b2991-feb7-4db5-b82e-d5303bf74315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:07:f7:06:c3:11:3a:6b:b8:60:d9:83:b7:86:
aa:0b:93:ed:ed:c6:ff:9e:a5:e3:67:65:56:e9:25:
63:ff:93:54:c4:e9:df:2f:42:30:b4:eb:d3:dd:8d:
38:35:e8:cd:df:b3:fb:73:f9:35:77:0e:28:73:1e:
93:51:4a:09:1b:f2:b5:07:be:33:94:0a:83:a4:ef:
62:76:64:f6:27:ea:cc:98:c6:77:c7:36:4b:c6:3e:
7e:bd:f6:44:06:90:74:5b:dc:d1:49:5b:a9:88:6f:
eb:8f:f1:d8:17:50:20:24:12:15:e8:5c:2c:ce:ec:
3a:42:d5:89:54:ed:c5:6c:8f:e9:b0:3c:e4:5a:2a:
56:5a:b1:2f:f6:66:35:ad:bc:23:c0:0a:b1:ba:81:
0e:a2:77:2f:6e:e0:34:67:2e:f5:97:1c:7b:fb:3b:
80:3c:75:59:5a:f0:90:c8:9d:46:e5:f7:25:03:62:
b9:e3:f1:83:f9:68:26:eb:a0:26:15:9c:11:32:92:
f9:a6:fd:98:ce:a2:98:b2:e1:d4:09:87:97:09:7f:
6b:39:b7:6f:97:d9:0a:ee:95:2a:94:ab:c8:7c:89:
ba:36:eb:55:c6:be:cd:fa:18:9f:0c:14:03:c9:07:
f7:20:8b:17:61:43:1b:0d:29:e7:73:ee:eb:37:28:
cc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C2:D1:2E:17:AE:79:95:DA:3C:6F:F8:26:84:DC:4B:3A:2D:69:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/963e3efe-e16b-3101-9c10-58fdc48b8689.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.24.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:56:3b:2a:5d:59:55:49:d4:f8:d5:95:ff:8f:4e:09:6f:c8:
d0:78:45:2b:31:3c:cd:df:0c:b9:b5:21:4d:8d:ca:21:ee:4f:
aa:b5:51:55:dd:37:41:59:6c:17:d7:57:e3:da:3d:c5:8a:0a:
c9:05:24:69:ce:58:0a:f6:43:36:a7:84:52:ca:c8:6c:3b:fe:
63:e7:d9:1b:3f:dd:1b:d2:98:05:d2:72:04:11:e3:bf:9c:2f:
6c:e4:31:fb:e9:f8:2c:76:fa:8d:d0:db:0a:cb:4f:dc:a1:29:
48:d3:59:35:1f:78:13:39:a7:4a:65:eb:bf:0d:2c:8a:c9:09:
4e:99:0a:d2:7f:47:58:95:a9:79:81:cb:c5:ec:8a:39:ef:15:
25:f1:ae:80:bd:b5:05:a3:25:43:d0:e8:35:0a:dc:91:2e:15:
5b:9a:18:d9:c2:ee:8a:ed:db:b6:d8:9d:de:a6:f9:cf:9b:a3:
68:82:83:d5:dc:ba:8b:50:91:24:78:7c:7c:dc:ae:65:e9:59:
ae:65:a9:68:07:34:e5:37:92:50:2a:df:d5:97:b9:b5:04:e9:
b5:9a:65:ae:a1:06:95:dd:c1:e9:27:f0:f3:12:83:d0:7d:26:
38:0e:71:06:3c:1e:a9:e3:8b:ce:ba:78:1f:25:32:2b:ee:68:
5c:b0:9c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:24:32 2026 by rpki-client