
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ff3d5767-a51a-3626-90b3-0f378ba3adaf.roa
File: ff3d5767-a51a-3626-90b3-0f378ba3adaf.roa (raw, json)
Hash identifier: ANXIzs5antDiS3W6ND+yU/Hy0kWZ6SkznUDm2FWQk04=
Subject key identifier: F7:22:F7:AE:16:6C:4D:C8:8C:1D:B2:94:B3:37:13:E2:A8:1E:EF:11
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584F4974D219F7C4997C96C2FB00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ff3d5767-a51a-3626-90b3-0f378ba3adaf.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 30036
IP address blocks: 173.21.224.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:74:d2:19:f7:c4:99:7c:96:c2:fb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=d4732154-5bf7-4f92-a784-684b91dfa17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:23:db:76:96:ad:f1:3c:82:46:b0:19:cd:dc:
3f:8c:86:a6:29:8a:74:df:51:c9:28:00:86:45:af:
65:0a:f1:a2:86:05:1d:99:b3:8f:87:a6:5d:46:0c:
05:e8:44:bc:fd:86:26:f9:25:fb:79:49:4f:db:79:
50:2f:29:12:bd:ec:86:65:c8:c1:d2:f0:56:df:91:
a6:86:a3:55:ed:2b:7e:ae:22:e3:98:c5:80:8a:c4:
4a:12:63:30:5b:60:a3:71:26:20:32:fc:ae:8b:ce:
6b:aa:46:54:d4:c7:c5:77:9c:3e:2e:43:c3:16:53:
8c:7a:f2:95:3f:b8:5d:16:c7:bf:dd:ed:a6:f5:8f:
90:8d:23:f7:26:d9:4c:5e:f1:b2:68:b7:48:5a:3e:
02:6a:d1:e6:55:d4:0a:82:dc:67:90:5b:d2:1b:84:
da:55:73:14:89:3f:44:ca:3b:76:25:3e:05:67:5f:
c4:2e:2c:95:ad:eb:b2:b7:bf:06:a3:b3:b9:b9:c9:
8c:24:5b:6d:46:a7:39:9d:36:6b:99:3d:18:27:d4:
a1:a0:36:a0:63:f2:07:67:f3:04:75:40:f4:73:5c:
77:55:b9:bd:a5:9c:dc:79:cf:ed:48:f9:fa:65:82:
c6:14:b7:58:a2:ca:95:8e:4a:16:68:d4:dc:32:3b:
c1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:22:F7:AE:16:6C:4D:C8:8C:1D:B2:94:B3:37:13:E2:A8:1E:EF:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ff3d5767-a51a-3626-90b3-0f378ba3adaf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.21.224.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:d1:c6:1f:e2:6a:a8:7c:09:89:7b:a1:d5:1b:f9:d6:9b:35:
55:50:01:a2:0e:97:6a:b6:86:22:80:27:24:e5:eb:c1:40:c6:
1c:a9:0e:2b:91:36:b7:f1:bf:72:1b:27:43:06:ee:89:d1:21:
a0:76:8b:c8:2f:ea:ce:6a:66:f3:c5:a9:3d:d7:8b:3e:78:b2:
08:9b:17:fd:0f:f7:c0:88:32:af:cb:bd:67:2b:21:62:ed:29:
6c:66:d6:89:75:2d:4c:31:bd:52:f1:f7:d4:0d:a1:85:f9:86:
72:24:c0:0c:f9:fd:84:c1:3d:19:c4:04:4e:0a:ab:d6:be:0b:
e4:19:05:ad:41:e8:c7:f0:24:ea:10:a2:df:44:5d:ff:37:fa:
3c:2b:eb:b3:45:5b:fb:19:be:01:bf:df:b7:0e:77:2f:b6:e4:
fc:3f:8a:32:ab:29:e5:de:0b:9c:16:c1:ea:4c:67:8d:5b:c2:
30:d5:b7:76:dd:97:27:9f:bc:8c:af:3e:f7:1d:74:50:06:f9:
be:00:cc:c1:94:c9:25:68:52:ef:c8:73:ed:9d:2e:9f:02:e4:
e0:e2:8c:fa:98:4e:44:24:38:99:ee:62:97:18:c7:7f:96:b9:
56:07:c1:70:52:9d:ba:f7:a0:94:d9:a7:a6:00:66:ae:8b:47:
2c:ba:5b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:25:21 2026 by rpki-client