
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cdecd28b-3502-3e7e-8d9e-b838cee49236.roa
File: cdecd28b-3502-3e7e-8d9e-b838cee49236.roa (raw, json)
Hash identifier: zvSvp2Mr0W7QoXRSuseB8g0EhabdRHGxS4o6KyjZkpY=
Subject key identifier: F7:25:E5:84:DE:D3:DC:06:54:EF:A5:EC:74:AA:23:82:7D:CF:F4:98
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D24DF6437C6E68407FCF6C680
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cdecd28b-3502-3e7e-8d9e-b838cee49236.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 30036
IP address blocks: 50.81.220.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:64:37:c6:e6:84:07:fc:f6:c6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=3c063188-a5a2-4b0e-bb65-0cf8f4501d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:eb:02:7d:78:31:1d:11:d5:f0:bb:dc:fb:33:
b1:f2:47:49:93:35:73:f1:2a:41:9c:41:a2:35:75:
2d:f0:0f:d4:93:0d:93:76:55:b0:e7:a5:b1:65:be:
3d:0f:5d:f6:bf:81:ee:87:19:1e:a7:c4:18:a5:89:
cf:1f:f5:de:65:2d:9f:1b:a8:f2:8a:11:b1:8a:34:
6f:0f:af:9e:46:b3:0b:f8:30:6e:ea:19:16:fe:5a:
26:45:ad:da:07:0c:56:92:c7:14:31:2e:ad:ff:d9:
d5:d2:b0:37:ee:7a:c9:80:2c:fe:6e:de:8c:34:98:
a9:40:13:25:2b:09:a4:90:d5:3c:c1:d1:07:d8:de:
86:e7:8f:70:41:b7:79:1d:ec:d1:86:47:d2:c9:d3:
15:0d:e5:4d:b1:ff:ed:43:b1:fb:bb:2a:4b:d1:8c:
f4:b8:57:1c:63:d0:62:d4:3f:09:58:57:9e:7e:1f:
e5:c0:05:df:32:74:dd:48:7c:56:af:8d:18:d3:cd:
79:ac:68:d3:c0:15:57:6c:b1:59:52:66:92:21:df:
d3:55:cf:59:8a:cb:cc:b1:18:e8:b5:48:79:cc:ec:
2c:9f:9a:77:4b:14:27:06:b0:d9:40:a4:40:08:e5:
69:8b:75:7d:ff:da:4c:74:19:a3:70:00:c1:e1:d9:
e4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:25:E5:84:DE:D3:DC:06:54:EF:A5:EC:74:AA:23:82:7D:CF:F4:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cdecd28b-3502-3e7e-8d9e-b838cee49236.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
50.81.220.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:ba:e5:5f:29:4f:35:42:b8:f8:ef:ae:cd:f4:5c:ed:1a:36:
26:2d:7d:4a:d4:55:d7:bd:14:6e:55:f4:21:11:30:af:e8:c7:
48:3b:41:cd:e4:8f:a4:38:cd:94:21:4d:e5:79:03:72:3d:9c:
95:bf:79:98:28:cf:1b:2c:8b:fd:37:29:d1:27:f5:d8:dc:d6:
63:fe:15:ec:f2:63:2e:9d:ac:6f:08:15:30:c0:b9:08:6e:7f:
1f:2c:3b:08:ee:5f:ce:8e:3f:6d:e4:9f:a8:be:b3:54:ad:28:
34:68:12:b1:17:1b:00:c2:ff:6c:5f:89:42:c9:87:67:ae:18:
e1:b5:a5:17:eb:08:a5:34:48:24:86:cd:46:84:b1:ec:8f:ea:
ba:3f:36:76:fb:95:2d:e9:ab:4a:bb:cd:95:74:1e:a7:0a:6a:
a2:f6:43:40:cc:4d:23:c3:0a:3b:4d:14:a1:52:f1:b8:e5:d7:
27:93:59:ef:33:f3:05:76:cd:0b:4d:8a:aa:d1:c9:2d:4f:c7:
78:0f:f5:8e:45:ed:f1:2f:11:26:47:4d:5b:2e:b2:82:46:30:
65:93:cf:a7:89:e1:c3:56:c4:1f:dc:ec:f4:66:e8:06:af:7d:
e2:13:89:db:4e:c5:61:79:ff:35:43:79:e7:5b:72:de:5b:1f:
6a:6c:36:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:15:51 2026 by rpki-client