
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a8295b53-f638-3af4-99e0-f0a0932ba255.roa
File: a8295b53-f638-3af4-99e0-f0a0932ba255.roa (raw, json)
Hash identifier: knv4GkAtwQTtFaVpTB+RY7ssW6rUvMNMxVFwW9oINT0=
Subject key identifier: B4:B4:AE:EA:E1:11:8C:87:93:23:A8:D9:0D:3A:9B:A4:D2:68:3B:4A
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584E94EA866A43EF51198E343280
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a8295b53-f638-3af4-99e0-f0a0932ba255.roa
Signing time: Wed 22 Jul 2026 09:00:11 +0000
ROA not before: Wed 22 Jul 2026 09:00:11 +0000
ROA not after: Tue 20 Oct 2026 09:00:11 +0000
asID: 30036
IP address blocks: 173.17.156.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:94:ea:86:6a:43:ef:51:19:8e:34:32:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jul 22 09:00:11 2026 GMT
Not After : Oct 20 09:00:11 2026 GMT
Subject: CN=b8b6327e-a90e-455a-8969-be543820bea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9b:2e:1e:3b:ff:67:7a:e1:52:b0:60:2d:ed:
48:85:60:a6:ea:8e:79:a4:ba:cc:2a:ae:27:f9:eb:
65:8a:25:c5:b4:7b:a6:a5:b2:af:1e:1d:4a:82:dc:
af:c5:f9:20:5f:51:0f:51:e8:58:bf:16:9e:36:27:
18:77:dd:30:07:b6:b0:5b:c9:80:12:53:e9:85:5a:
43:2e:9d:c0:cd:e4:72:47:62:30:af:0f:6c:0e:d4:
76:96:ce:87:be:e5:2b:9b:dc:b0:ec:d7:69:c4:75:
16:5e:e7:80:29:df:ac:b5:78:11:e9:3f:65:83:2f:
3e:2b:05:58:b5:ff:3c:af:9f:52:52:3f:3d:38:db:
85:6b:30:be:89:2a:07:00:78:6a:c2:0e:77:b0:4f:
50:76:9b:39:2b:a0:4b:a3:8a:9d:ef:60:01:9b:9d:
ae:bb:a0:42:6a:24:33:88:6e:ad:f8:91:4a:1d:a8:
17:00:4b:d0:72:db:14:25:a5:6f:b4:dc:be:53:25:
1a:2c:0e:29:62:21:78:a5:03:9f:85:7d:35:f3:b8:
43:f1:cd:74:17:46:75:53:2b:21:17:42:72:de:22:
79:7b:52:a9:74:ef:20:20:35:52:bd:a9:7f:dc:23:
86:69:f0:4a:12:82:23:95:cf:a4:27:1a:90:26:e4:
7b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B4:AE:EA:E1:11:8C:87:93:23:A8:D9:0D:3A:9B:A4:D2:68:3B:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a8295b53-f638-3af4-99e0-f0a0932ba255.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.17.156.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:1b:49:32:47:ab:1f:11:84:13:41:4f:b7:79:95:07:22:17:
3c:8f:c0:d7:a1:e5:14:cb:0e:2a:fa:79:7a:ca:54:fb:04:27:
05:02:82:35:13:74:ee:83:f3:e5:a5:2a:b1:e0:3d:36:de:db:
77:b3:41:66:40:cd:83:23:b8:c3:23:c8:dd:6c:cb:41:01:68:
ef:c2:43:13:24:4a:94:4d:ce:35:4c:6f:cc:e9:0e:43:51:9b:
89:0b:ca:78:ad:70:98:5c:cc:39:9d:d9:23:3c:cf:cb:1e:2b:
dd:5b:7e:1d:be:d0:35:5c:b6:6a:a7:fa:e7:f1:f1:64:b4:7e:
2f:36:b6:c0:0a:9e:a5:86:11:da:21:d8:4a:0a:62:b9:88:1e:
37:57:40:49:2c:5e:4a:f8:d1:63:36:5f:0c:5e:b5:d3:2b:e0:
06:36:3c:9e:48:7c:f2:49:2c:6b:96:e8:f9:94:38:1b:dc:8a:
f7:8d:4e:50:f6:8f:a3:3f:3e:f3:85:9c:0b:c9:f5:fb:f0:30:
5b:b0:c3:f7:a5:86:01:12:fc:89:58:72:4b:09:e1:24:c6:75:
b2:61:36:e3:39:d3:29:eb:bb:7d:3e:58:e1:dc:b6:cb:da:c9:
27:ca:0b:a9:1d:e2:c6:2a:ec:a6:89:f7:e8:dd:e1:17:63:02:
3a:5f:52:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:09:46 2026 by rpki-client