
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/37a79c5b-0d91-3047-97be-167216f2c126.roa
File: 37a79c5b-0d91-3047-97be-167216f2c126.roa (raw, json)
Hash identifier: IHX82GXDIKatVkMYVSHjZxKocHOSQ3Yu7lbFyFyiVWE=
Subject key identifier: 3A:F6:84:F7:C3:6A:41:FD:BE:FE:33:5E:82:81:28:C7:23:63:3D:3E
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584E059C71CC40D0B4337A4394C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/37a79c5b-0d91-3047-97be-167216f2c126.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 30036
IP address blocks: 173.21.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9c:71:cc:40:d0:b4:33:7a:43:94:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=34e802a0-7156-4f0b-9973-c0aca1712a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ba:ba:71:d7:33:25:41:10:e6:c3:49:79:f5:
10:5a:40:26:aa:05:8c:97:e5:a5:fc:39:55:2c:12:
e8:19:f3:a3:24:aa:7a:90:73:fa:0f:8f:d7:e7:b1:
1f:62:2b:ab:a1:cd:7f:b8:e2:54:90:1e:2b:74:4d:
97:10:d8:ca:c5:c5:44:81:3c:d8:d1:92:6c:9a:95:
e3:dd:72:dc:63:dc:9b:3e:53:be:b1:1b:b9:78:47:
d2:c9:13:7a:dc:18:ae:55:2a:b7:b9:ac:40:37:93:
13:0d:a5:25:bb:16:41:89:31:22:e0:41:84:bb:f8:
0d:03:81:4f:bd:1e:14:0b:6e:8b:9c:fd:8f:c8:56:
ad:f9:0c:22:29:96:79:05:9a:bf:d1:42:ba:47:16:
c0:5a:f7:61:88:c0:3a:1a:17:d3:8d:73:90:a2:37:
97:c5:cb:ba:4f:9d:5d:f9:78:1f:ce:bb:50:61:d4:
b1:8b:77:1a:17:f3:ac:c8:c8:93:84:53:7b:cb:1f:
ea:ee:f3:11:81:99:f5:77:9f:3f:e3:ae:b4:34:ed:
7d:8f:13:01:81:91:2e:71:59:c7:cc:70:7b:dc:77:
57:fa:01:b6:77:45:67:c8:ad:73:2d:8b:62:de:ac:
5b:de:e0:49:31:a2:e2:90:a2:bf:2b:9f:ed:96:d7:
bd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F6:84:F7:C3:6A:41:FD:BE:FE:33:5E:82:81:28:C7:23:63:3D:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/37a79c5b-0d91-3047-97be-167216f2c126.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.21.253.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:ab:bc:27:2f:e2:47:a4:91:74:22:1c:3f:38:8c:19:21:9b:
25:84:57:5e:28:aa:cc:08:c8:9d:86:5d:89:44:d7:00:24:ee:
77:66:ee:2b:06:16:b5:47:c5:f8:28:74:2f:4c:7a:80:b0:78:
09:b2:4c:2b:7e:a3:42:ad:c2:75:17:c7:a3:ec:2d:e2:06:70:
44:78:7c:b5:c7:3f:d6:8b:99:52:c1:1a:01:37:f3:78:56:62:
4c:7e:20:24:dc:a7:7d:d2:bc:81:0c:19:60:67:e1:cd:d4:8f:
b9:79:ae:8f:1b:bb:84:14:9f:68:d1:68:f5:c6:44:5d:93:90:
3a:24:e1:17:cc:2a:64:71:cb:d7:bd:e9:2d:d8:59:a7:e1:dd:
aa:19:2b:55:77:67:1f:dc:6e:b1:30:ef:20:b7:f2:47:e6:1e:
48:e6:72:49:d6:4c:0a:40:89:b4:24:28:a3:1c:cb:c9:bd:46:
bb:36:b8:6e:b7:c9:c1:bf:67:5e:e6:b7:d9:28:2c:10:6b:7a:
64:7b:87:e1:4d:48:f4:5b:34:72:a9:70:40:ca:1e:5c:5e:34:
ce:5c:c7:6d:30:2a:d4:80:a8:a6:03:74:e6:d7:ad:c2:92:18:
61:7e:42:29:7c:72:cf:93:3b:2d:8f:f8:2c:2c:87:3f:3b:d7:
41:c1:bb:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnHHMQNC0M3pDlMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
MzRlODAyYTAtNzE1Ni00ZjBiLTk5NzMtYzBhY2ExNzEyYTkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybq6cdczJUEQ5sNJefUQWkAmqgWMl+Wl/DlV
LBLoGfOjJKp6kHP6D4/X57EfYiuroc1/uOJUkB4rdE2XENjKxcVEgTzY0ZJsmpXj
3XLcY9ybPlO+sRu5eEfSyRN63BiuVSq3uaxAN5MTDaUluxZBiTEi4EGEu/gNA4FP
vR4UC26LnP2PyFat+QwiKZZ5BZq/0UK6RxbAWvdhiMA6GhfTjXOQojeXxcu6T51d
+XgfzrtQYdSxi3caF/OsyMiThFN7yx/q7vMRgZn1d58/4660NO19jxMBgZEucVnH
zHB73HdX+gG2d0VnyK1zLYti3qxb3uBJMaLikKK/K5/tlte9aQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDr2hPfDakH9vv4zXoKBKMcjYz0+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzdhNzljNWItMGQ5MS0z
MDQ3LTk3YmUtMTY3MjE2ZjJjMTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRX9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGGrvCcv4kekkXQiHD84jBkhmyWEV14oqswIyJ2GXYlE1wAk7ndm7isG
FrVHxfgodC9MeoCweAmyTCt+o0KtwnUXx6PsLeIGcER4fLXHP9aLmVLBGgE383hW
Ykx+ICTcp33SvIEMGWBn4c3Uj7l5ro8bu4QUn2jRaPXGRF2TkDok4RfMKmRxy9e9
6S3YWafh3aoZK1V3Zx/cbrEw7yC38kfmHkjmcknWTApAibQkKKMcy8m9Rrs2uG63
ycG/Z17mt9koLBBremR7h+FNSPRbNHKpcEDKHlxeNM5cx20wKtSAqKYDdObXrcKS
GGF+Qil8cs+TOy2P+Cwshz8710HBuyg=
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:02:44 2026 by rpki-client