
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/33cf24bd-40d4-324a-baf1-f5492e9fc710.roa
File: 33cf24bd-40d4-324a-baf1-f5492e9fc710.roa (raw, json)
Hash identifier: ufgaH5MDNNpuoGq9GkJ2bdYv6Eqy2kTLFnDPsR+t3yo=
Subject key identifier: 81:F1:E6:7B:AE:75:2C:C4:35:81:95:31:7B:CB:D6:1D:86:FA:4F:F0
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584B64CCB2333AC610B626A74D80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/33cf24bd-40d4-324a-baf1-f5492e9fc710.roa
Signing time: Fri 03 Oct 2025 01:00:32 +0000
ROA not before: Fri 03 Oct 2025 01:00:32 +0000
ROA not after: Thu 01 Jan 2026 02:00:32 +0000
asID: 30036
IP address blocks: 173.30.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:64:cc:b2:33:3a:c6:10:b6:26:a7:4d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Oct 3 01:00:32 2025 GMT
Not After : Jan 1 02:00:32 2026 GMT
Subject: CN=307c04f7-a439-4a0c-98dc-c30a8590dd9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:23:d5:db:22:10:8d:0c:ce:89:7c:ce:2c:3f:
71:71:e1:69:60:b2:a9:70:ac:58:9b:4f:26:1d:e3:
ad:90:4b:3c:ba:cd:62:ec:07:46:f6:32:de:32:13:
86:cc:f2:b0:a0:13:00:12:7a:68:ea:df:ec:2c:ac:
b1:37:16:e3:d7:2f:8a:52:38:c2:d5:9b:a2:8d:e0:
b2:9b:e9:89:f2:fb:b7:89:a7:b6:15:80:cc:1c:b3:
65:8b:8f:4a:1c:0e:89:ea:a6:83:a3:b2:da:8f:39:
59:70:47:3d:b0:48:fc:38:5f:2f:54:78:64:cd:ae:
67:e4:47:ab:ad:65:9c:5e:94:b0:e4:71:87:e1:93:
71:9b:61:91:83:5b:ed:06:a5:c9:e0:89:4b:72:4e:
26:ff:16:4e:90:ec:f0:87:8c:0f:ce:05:82:8a:ef:
e1:c3:5e:b8:71:18:68:32:7f:2e:9f:c1:8b:f9:63:
73:e2:2d:13:b8:dd:c9:d6:2e:ec:ec:73:27:fb:88:
52:4d:b5:40:a7:41:4c:a6:11:0d:27:05:34:73:30:
a4:4f:ff:76:74:c0:a9:1d:16:36:bd:59:1e:98:b8:
28:ad:66:a8:95:f8:c7:a0:44:93:53:1d:84:38:f6:
9a:ba:65:a4:17:9a:b3:08:78:9f:b0:2a:4d:27:38:
0d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F1:E6:7B:AE:75:2C:C4:35:81:95:31:7B:CB:D6:1D:86:FA:4F:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/33cf24bd-40d4-324a-baf1-f5492e9fc710.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.30.195.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:7e:0f:6f:7e:37:bb:0a:98:2e:1c:5a:bb:6a:90:c5:20:45:
b8:4a:f0:2a:1c:45:4c:e3:23:a0:90:69:60:4e:e0:0d:ec:a2:
b4:3b:60:97:b4:35:22:c5:d0:65:06:e7:3a:b3:53:6d:da:48:
0c:32:9e:14:58:28:f9:0f:ee:40:d0:f5:34:dd:02:58:3d:1e:
c0:5b:ae:06:d7:44:ad:15:09:17:fe:8b:92:43:8f:3d:8f:a4:
32:17:3c:56:13:8e:ef:82:51:0e:42:24:82:b8:18:77:96:a0:
e4:f1:db:9f:cb:4e:0e:64:03:ea:bc:b2:05:cd:da:16:28:9b:
bc:f3:2d:c5:40:72:5f:18:30:d3:9a:18:91:f3:3b:29:23:b2:
c1:5d:76:c5:98:e4:58:6a:ce:f3:dd:d6:c9:e1:5a:c0:9f:f7:
47:7a:55:c2:cf:dc:f2:26:7a:44:04:f6:30:75:48:09:11:87:
a3:2e:56:8f:a8:0c:f5:23:fb:89:13:c7:2a:1d:f2:5e:9a:97:
bf:10:95:0a:0e:6a:c0:0c:a0:e8:4a:4c:7b:f6:11:8b:9e:e0:
2c:bf:95:7a:8a:7a:4c:1c:a8:24:53:10:f6:69:d1:77:43:8d:
1f:e9:76:6a:bc:45:4b:cc:98:6b:c7:0b:9f:33:cb:25:d4:19:
9d:fd:95:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:57:52 2025 by rpki-client