
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e1286f83-b066-3ef9-aa8b-3557d8930371.roa
File: e1286f83-b066-3ef9-aa8b-3557d8930371.roa (raw, json)
Hash identifier: 3EsP/l1PXD1PN2O9CZoKhtc+7oe6honaz+jsEJhEZss=
Subject key identifier: 55:AA:5D:25:F5:6D:3C:84:68:DE:AE:7F:26:6D:F1:D7:FB:FE:A5:8B
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584F4C3DE8F4EE054AFC35D1A180
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e1286f83-b066-3ef9-aa8b-3557d8930371.roa
Signing time: Sat 26 Sep 2026 01:00:13 +0000
ROA not before: Sat 26 Sep 2026 01:00:13 +0000
ROA not after: Fri 25 Dec 2026 02:00:13 +0000
asID: 30036
IP address blocks: 173.21.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4c:3d:e8:f4:ee:05:4a:fc:35:d1:a1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Sep 26 01:00:13 2026 GMT
Not After : Dec 25 02:00:13 2026 GMT
Subject: CN=5718ca64-72de-4e53-9247-07e23644e704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9d:0b:61:ff:a3:85:b8:ff:75:91:ee:88:41:
9a:1f:b1:94:66:5f:0a:d2:4d:4c:41:39:3e:14:a1:
67:c0:74:9f:fd:85:df:45:7d:e1:94:b9:d2:0e:4b:
76:69:37:d9:7a:e9:2c:c6:49:f4:bf:4a:1c:7b:ba:
cc:65:79:af:8d:40:74:4b:d4:77:83:df:2b:7c:64:
ac:d3:d8:eb:de:91:15:07:48:d5:36:a5:27:b6:cb:
c6:19:a7:d5:63:3f:a4:e7:85:62:eb:9b:c9:ca:8a:
61:50:fb:9c:1c:69:ff:23:66:5e:73:f2:66:0e:ae:
58:8f:2f:2a:04:84:23:8a:fe:06:9b:23:42:c0:25:
07:3a:c1:d8:ae:29:c2:8f:8e:b9:2f:1f:a5:13:9b:
87:d9:1e:2d:7a:b3:4d:89:0d:49:25:a5:f5:b8:2f:
62:3c:15:fd:f4:18:4a:ba:c6:d7:2a:92:9a:be:c2:
6a:49:38:ad:69:68:84:41:29:de:3d:9d:6f:d7:1a:
a3:7b:90:24:d8:46:c8:63:cb:76:87:66:1b:f6:a3:
dd:28:5b:af:eb:94:7f:e5:2d:ca:ad:e7:01:98:44:
ed:7a:72:53:4a:a2:5f:84:da:78:e8:1b:b3:82:eb:
ba:3e:60:5a:a6:43:97:89:38:5b:04:73:71:b2:81:
c0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AA:5D:25:F5:6D:3C:84:68:DE:AE:7F:26:6D:F1:D7:FB:FE:A5:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e1286f83-b066-3ef9-aa8b-3557d8930371.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.21.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:7b:11:a8:29:ca:b8:f5:30:1e:6b:2e:ce:c3:6b:3b:a2:22:
0d:16:4d:b6:a3:a4:78:36:1f:cf:d7:e2:b5:af:43:ba:39:69:
d0:5f:6b:8d:7e:4d:51:b2:01:e1:6b:0d:dd:9d:e0:84:03:39:
d4:b0:79:74:1c:cb:a4:cf:a5:fc:d8:e8:fc:e8:23:10:e8:30:
db:80:91:31:52:06:d8:8a:82:e8:9d:f5:25:6e:14:99:aa:e9:
85:b6:ea:16:c6:12:e0:e6:c2:70:80:65:c2:c8:74:0c:8f:ea:
12:d1:1e:50:f7:df:9f:1b:98:1a:5a:53:2a:c4:f2:ad:21:fa:
0d:96:e8:79:70:c1:a9:63:a1:83:90:4d:49:dd:4b:c9:25:ea:
04:59:cd:f4:4d:27:3a:3c:b0:11:db:87:60:10:9a:a2:7c:8f:
37:82:2c:37:6d:cb:40:3a:59:a1:f6:7a:04:e7:9f:d8:21:06:
c6:36:19:70:5d:e1:ff:a4:1f:98:b9:62:11:ec:25:80:15:f8:
54:c7:9d:e6:ef:d8:72:0a:fd:ed:d5:ab:a3:d2:6b:11:5b:c2:
1f:ba:b8:f0:b3:21:d5:00:ed:69:2b:0e:ac:3b:c0:aa:42:be:
f3:49:f1:cb:7b:f9:df:ee:89:75:eb:e6:1b:08:78:2a:a3:34:
18:88:85:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:53:42 2026 by rpki-client