
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/38185859-f372-3ab1-819f-28a12938243a.roa
File: 38185859-f372-3ab1-819f-28a12938243a.roa (raw, json)
Hash identifier: fag0hEJFUk7T2jZhmIZKhyTniToVf75RDCC4JDc5iI4=
Subject key identifier: C5:B5:3E:B4:84:74:A3:90:3E:A8:BF:10:F8:EB:0A:31:97:E1:E1:E2
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584E059B37C89EBE87BF89BE7290
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/38185859-f372-3ab1-819f-28a12938243a.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 30036
IP address blocks: 173.27.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9b:37:c8:9e:be:87:bf:89:be:72:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=329d349f-7489-46e3-aff8-d2cb0f6f6ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:57:c8:ab:00:c4:f1:02:52:8d:99:d2:1e:dd:
e6:1d:17:32:1c:43:81:2f:a0:66:0b:ba:27:4a:e7:
be:2b:be:bb:56:59:5d:ad:4d:19:e4:22:b6:29:66:
2f:e9:97:17:91:1d:1a:26:fa:3d:0e:85:ab:a2:ad:
61:2f:d5:59:1f:ac:98:08:29:0d:25:13:ee:de:ce:
80:96:1d:2f:d0:87:62:2e:62:0f:88:a7:80:a9:28:
2f:cc:4a:8f:96:a8:fa:3d:89:b7:63:11:af:7f:88:
02:37:57:34:3d:2a:9d:a9:e7:91:12:40:48:e2:c3:
b8:5b:6a:2e:59:9f:a1:d8:cb:e9:28:7a:cc:17:f1:
66:a3:71:0b:0a:d9:94:3d:87:5c:28:76:61:de:75:
72:06:30:36:48:b8:32:96:75:c8:ff:0e:7f:76:01:
73:ad:3f:5c:90:50:16:22:5b:81:eb:4d:02:e7:0d:
f9:1f:57:48:85:4d:a8:8b:00:77:05:fb:d4:c0:bf:
97:6a:f8:3c:d5:0e:dd:3d:b0:00:d9:17:07:8e:b7:
37:58:b5:f4:7c:f6:13:b8:56:16:e9:cf:cc:aa:a1:
9c:7d:53:5a:aa:11:72:0c:c8:5e:8c:aa:ba:ae:ec:
1b:80:c9:38:96:7f:2f:b1:e2:17:35:6a:ad:25:30:
18:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B5:3E:B4:84:74:A3:90:3E:A8:BF:10:F8:EB:0A:31:97:E1:E1:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/38185859-f372-3ab1-819f-28a12938243a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.27.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:5c:03:2a:77:6f:01:be:54:86:29:b1:25:b1:71:0e:7c:4a:
d1:a2:b2:a1:c0:4f:3b:8c:43:98:cf:58:6c:ae:aa:f1:95:4c:
b8:f2:3b:79:5a:25:a6:fa:37:74:11:9e:b6:07:72:5f:ca:9b:
3d:22:c8:3c:f6:01:ca:97:30:48:e3:7f:a3:ae:bc:87:82:f0:
2e:3f:9c:da:cc:0a:d2:48:3e:06:11:17:ba:fc:86:c3:2f:c3:
b6:ac:b2:70:61:63:e9:cf:e5:15:ce:3f:a4:3b:57:69:40:16:
eb:77:6f:ea:05:6f:f2:64:49:8d:02:57:60:be:8e:e9:ae:1b:
56:59:61:66:73:ea:cd:e6:d6:71:32:70:c3:38:9c:c5:bd:a8:
f8:59:b5:de:c6:47:ac:74:5f:79:73:91:f8:5a:77:f5:f3:7f:
71:2e:68:7d:bb:f4:15:89:38:1a:5a:41:09:4d:5d:f4:96:db:
4a:d0:05:36:0e:69:c1:16:05:e9:eb:81:65:f8:6d:ea:01:88:
6b:d0:19:0d:7e:98:0b:f2:61:9f:9a:03:b6:82:92:fa:61:20:
f1:e2:06:0d:85:e1:90:55:1f:1d:92:29:a5:5b:62:b6:ee:b6:
f2:17:b3:1c:8a:82:20:27:5c:15:50:a9:22:d1:82:a5:22:c2:
74:33:2d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:42:20 2026 by rpki-client