
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c4b360d3-a4c1-3637-a103-fc6d1a0c3542.roa
File: c4b360d3-a4c1-3637-a103-fc6d1a0c3542.roa (raw, json)
Hash identifier: UOHidwxJtztXPq2pqvDIeDImviW+sXfP5T6PulGU17s=
Subject key identifier: 2B:72:5D:E4:80:C7:75:9F:94:48:37:D5:A8:D7:E4:58:67:E2:24:68
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D27AACBFBC215B740015ED680
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c4b360d3-a4c1-3637-a103-fc6d1a0c3542.roa
Signing time: Fri 13 Mar 2026 13:00:40 +0000
ROA not before: Fri 13 Mar 2026 13:00:40 +0000
ROA not after: Thu 11 Jun 2026 13:00:40 +0000
asID: 30036
IP address blocks: 173.30.120.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:27:aa:cb:fb:c2:15:b7:40:01:5e:d6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 13 13:00:40 2026 GMT
Not After : Jun 11 13:00:40 2026 GMT
Subject: CN=60938e4e-b4c9-44d3-8f29-0fad9b5d5b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bc:d7:95:72:eb:94:f1:71:df:c5:0c:1b:37:
31:71:4c:c8:57:91:4e:1c:01:93:06:5c:0c:78:ec:
52:46:3c:1b:7d:15:76:59:de:68:b6:ef:d6:8f:47:
61:bf:61:5e:3e:4d:3a:58:65:64:ad:84:19:ec:c7:
90:60:28:f0:84:8f:75:02:b6:e3:72:67:30:b2:c4:
1f:10:cc:da:ae:e6:3d:0f:14:d4:36:42:2a:c0:64:
1f:48:a8:74:09:e8:7c:ce:6d:f4:7f:01:79:d9:8f:
66:51:f7:59:58:09:15:95:06:56:1a:9e:ed:26:21:
6d:18:ca:5d:31:1e:9d:48:b3:ce:4a:de:f2:26:cc:
7d:86:9d:9e:b9:7b:67:51:2e:03:1d:f0:a9:fd:c1:
33:33:91:d6:07:24:f1:68:3c:e7:74:10:05:a2:2e:
76:30:77:73:94:d3:ad:3d:c4:ae:77:a7:db:45:c5:
1a:1e:78:bb:b7:fa:8b:05:e4:49:89:27:f0:2e:61:
0b:cf:81:49:51:be:4b:7f:c5:3e:99:8b:cf:3c:a9:
58:c2:1a:be:f0:60:6b:40:24:71:d4:a9:b7:c6:b8:
e9:80:ce:ac:38:a0:11:5e:79:58:da:66:30:ed:74:
80:aa:09:da:9f:c5:86:89:6c:5b:dc:8f:4e:8d:c9:
a5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:72:5D:E4:80:C7:75:9F:94:48:37:D5:A8:D7:E4:58:67:E2:24:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c4b360d3-a4c1-3637-a103-fc6d1a0c3542.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.30.120.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:fd:fd:96:c0:f6:25:b4:56:65:12:d8:27:e2:57:70:a6:17:
61:be:bf:d0:ec:a1:0a:0e:39:66:c4:76:16:f2:69:73:da:a6:
ea:01:6e:e3:43:a6:d3:6a:ac:c0:c2:07:bb:dc:3c:51:53:67:
58:76:85:15:fc:89:30:a4:22:17:ff:1e:19:8f:03:ec:5f:12:
da:96:c6:bd:81:4b:09:25:b6:5c:92:fa:ee:d4:04:87:9e:6d:
25:0a:41:b9:9c:84:cd:0f:bf:c4:58:bb:bf:6b:e8:e0:58:01:
53:2c:2d:10:0a:31:9d:b8:30:02:2b:a6:d4:58:06:98:ea:a5:
bf:99:22:a6:4f:ef:01:79:9d:ba:30:8b:69:e4:42:be:89:ed:
f0:80:0b:21:b2:a6:a4:56:0e:b6:a0:47:d3:40:1c:a1:33:23:
2d:37:0d:bd:cf:df:c0:fd:70:d6:e9:65:10:3e:9e:1c:89:48:
da:6a:a7:d7:09:72:07:00:ea:e0:02:94:65:c0:9f:c1:4e:0e:
27:e9:6e:78:03:97:95:09:9d:f8:fa:14:03:ce:48:ea:49:ce:
57:d8:5a:af:ae:bd:f3:c9:3e:bd:33:1d:90:f1:69:38:5c:cd:
fd:1a:90:bc:83:5a:4f:c3:92:f3:c9:7d:83:b8:a6:bf:d5:99:
4f:7a:04:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:48:31 2026 by rpki-client