
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d459b9b8-1adb-320f-9bf2-ba30866194c7.roa
File: d459b9b8-1adb-320f-9bf2-ba30866194c7.roa (raw, json)
Hash identifier: 5mgG5qG3gOcbyl/kSwBVGUfYkSD8WB4D3nZd+QleB5U=
Subject key identifier: 23:C7:57:1A:E4:C8:85:A5:EA:F5:6D:33:AA:E6:F0:7A:BE:2C:39:D9
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D24E137C60FF92B36D13F0D80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d459b9b8-1adb-320f-9bf2-ba30866194c7.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 30036
IP address blocks: 173.16.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e1:37:c6:0f:f9:2b:36:d1:3f:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=3c1b856d-b11d-4897-8e4d-807429532735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:db:b0:6c:38:59:c4:2f:c3:55:3f:69:72:27:
f1:4f:8b:51:63:05:69:c4:44:84:0a:7e:7b:c0:f2:
24:79:56:cd:c9:1a:86:cc:d5:f2:14:7b:ae:e3:19:
af:62:3b:f3:b4:ac:0b:7b:ef:27:eb:df:02:09:5a:
6b:57:ce:5c:9f:24:da:e1:90:82:3f:06:a5:78:3c:
d0:45:ed:1c:35:0a:1c:c7:4b:b0:03:ad:87:6b:9d:
34:db:a1:c3:2a:c9:5d:72:f9:b8:6d:3c:6c:37:5c:
4e:88:65:84:7a:0f:d6:9b:8a:81:da:af:b3:21:7a:
e6:63:64:4d:dc:d6:6b:8a:30:8b:48:6f:12:a7:65:
fb:0e:6c:06:1a:e1:36:3f:65:aa:c2:3c:20:49:e0:
8c:55:8f:90:e7:2b:4e:21:d2:96:48:e4:b0:7d:64:
06:0f:0e:54:2e:a4:9d:79:69:8c:fa:fe:ff:36:9c:
a3:04:ec:c4:16:80:b2:4f:10:eb:c9:b6:d8:d1:87:
13:f8:59:98:a4:d9:e1:5b:87:66:eb:e8:bd:86:0d:
63:42:ed:86:f9:92:74:a4:c7:88:4a:93:5b:ec:e2:
30:dc:22:3d:29:b3:59:03:27:c5:73:00:a3:16:99:
47:a6:a5:43:71:42:0b:51:ef:ef:46:74:8e:41:3c:
ae:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C7:57:1A:E4:C8:85:A5:EA:F5:6D:33:AA:E6:F0:7A:BE:2C:39:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d459b9b8-1adb-320f-9bf2-ba30866194c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.16.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:a8:d5:05:d8:c5:40:d4:4a:93:4b:cf:b1:12:8c:08:d8:76:
b7:67:c0:ae:45:8d:65:c8:3d:ba:82:8d:15:1f:30:40:ea:50:
36:de:9d:bf:e3:9f:e2:eb:95:14:cd:c3:fd:a2:93:03:14:a3:
b8:36:f8:79:b4:ed:ff:e3:35:6a:2b:ef:71:bc:da:a7:b3:29:
8e:33:54:b2:09:18:8e:69:69:b2:0a:83:f1:12:1a:a2:1e:dd:
78:a7:ef:18:78:22:dd:aa:c5:a2:67:8a:0f:a3:e9:06:fa:19:
59:28:a3:d9:db:bc:64:81:d9:10:79:b7:ab:eb:df:c5:08:50:
d1:66:f5:b1:b0:07:61:7e:e6:30:a8:de:c8:19:e6:c2:6f:d9:
77:ba:65:d2:ab:a5:d8:0a:c1:38:07:b3:99:86:a7:d8:b6:80:
47:43:93:62:eb:3b:84:94:4d:4b:60:c1:0f:c4:2b:ac:e2:1d:
3d:26:2d:07:36:32:f4:3b:bd:fd:f0:69:24:b8:85:7e:b8:72:
41:e2:8e:d4:f6:88:d5:72:2e:cd:7e:38:83:de:3a:e9:7e:0e:
1b:7f:de:96:93:b6:52:a8:16:38:a8:79:f7:4b:5a:92:c2:17:
c7:14:5d:30:5b:d2:f7:de:21:06:fe:61:41:14:1b:c2:2c:47:
75:e6:3f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:16:59 2026 by rpki-client