
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/968256d3-cb78-314c-bb42-530413b2968f.roa
File: 968256d3-cb78-314c-bb42-530413b2968f.roa (raw, json)
Hash identifier: TPFCCxqK5sFxmlzhDOmu284tC8ILq6emKQ/hizwISik=
Subject key identifier: 5E:18:50:50:67:1B:11:BD:61:26:5A:52:D2:4D:53:70:0F:2B:D4:FF
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D24DF910729F84730361BF480
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/968256d3-cb78-314c-bb42-530413b2968f.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 30036
IP address blocks: 173.28.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:91:07:29:f8:47:30:36:1b:f4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=735cca9a-5f43-4fbc-be9d-745fc4fdfb83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a2:0f:2f:5d:66:27:79:47:81:3b:22:1c:e1:
bb:a4:8e:49:3a:84:20:10:f9:a3:34:04:02:77:f0:
70:fd:b5:61:c8:15:77:ec:1e:fc:5b:4e:0f:1e:95:
e0:ac:56:55:68:1a:16:b6:53:26:c1:98:83:39:83:
81:70:d2:17:06:31:6b:ce:37:aa:c7:54:89:05:41:
38:f6:be:41:ae:9e:2a:3a:92:27:13:54:22:b7:b5:
07:3e:a2:03:05:f5:e1:21:f1:35:27:f8:c9:3f:0f:
15:83:d3:d7:42:0d:d0:c7:64:3a:ab:e6:2e:21:54:
b6:bb:b1:03:80:88:cb:bd:d6:af:0c:42:1d:d6:1c:
97:94:0e:54:09:cb:b2:ab:1b:35:d1:eb:88:1a:e0:
56:60:ed:1b:1c:88:88:36:9c:eb:1a:a1:91:e9:17:
60:c5:a4:0f:7c:1b:9b:b9:be:bd:be:85:c0:7d:ef:
d3:80:d8:1f:0b:b6:dc:c9:83:f6:55:58:5f:38:e4:
0f:bc:c1:53:b9:fd:e3:b4:ab:f7:da:6e:f9:40:db:
cb:3e:00:3e:53:b6:97:98:67:58:3a:1e:de:65:6e:
20:81:ae:04:13:b7:4c:90:ec:37:da:74:74:31:7f:
2b:fc:e0:b0:66:f7:83:e9:b5:44:92:bc:fc:d8:a6:
06:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:18:50:50:67:1B:11:BD:61:26:5A:52:D2:4D:53:70:0F:2B:D4:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/968256d3-cb78-314c-bb42-530413b2968f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.28.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:b2:05:c0:31:ee:9e:f5:c7:50:4b:37:5d:d1:9f:28:35:56:
75:ba:06:9b:cc:12:58:88:0f:f0:1e:92:99:31:26:66:36:15:
35:47:f4:72:12:23:81:5b:cb:e3:94:76:52:f2:da:8a:71:15:
6b:5f:eb:83:93:59:b2:df:8b:e6:c0:de:91:fe:98:12:f8:27:
22:03:d3:0c:1f:cb:07:f1:d1:66:11:3f:0a:89:7b:af:cb:e4:
1c:a0:ec:7e:05:e4:de:8e:d1:00:76:0b:99:61:be:db:f9:5a:
62:96:3e:2c:da:f7:75:3a:b1:5f:48:e2:1b:d3:93:4b:9e:68:
5d:eb:6a:65:a4:b1:75:cb:b6:f3:8a:51:55:d8:b4:ad:8e:de:
a3:dd:ba:a0:53:39:58:83:78:a9:ff:15:b3:da:90:65:37:25:
3a:1f:53:8d:71:41:ee:b2:c9:6a:55:73:a2:a5:d2:bc:01:c3:
c5:cc:48:36:36:dc:4d:09:81:40:1d:1a:a3:33:ee:5a:8e:3f:
4b:2b:a7:ca:8f:89:40:4f:89:28:56:a9:9d:cc:f0:23:b0:12:
a7:a1:98:ea:56:06:53:f8:f4:c0:5c:43:4c:4b:51:41:18:04:
d8:b6:cc:33:97:89:91:3f:1f:56:1b:7a:40:26:85:10:5d:e1:
6c:4b:cf:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:40:44 2026 by rpki-client