
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6ed35d93-819a-3ee3-b2a9-5ad2a7a2c800.roa
File: 6ed35d93-819a-3ee3-b2a9-5ad2a7a2c800.roa (raw, json)
Hash identifier: qzDXjkBrJde3crPly2dsoZK9X2xKEomNA0k/iwz6k1M=
Subject key identifier: 56:F3:F2:9F:FA:6F:FF:4A:0F:FA:FE:DB:71:F2:BA:67:78:9A:28:57
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D55BCBC5AB6D73DA187898480
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6ed35d93-819a-3ee3-b2a9-5ad2a7a2c800.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 30036
IP address blocks: 173.29.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bc:bc:5a:b6:d7:3d:a1:87:89:84:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=8578afbf-8fdc-4e0c-8f7e-e1fe35eed7c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4e:86:bb:e0:06:1d:0f:cf:a8:af:c1:f1:a8:
78:a9:21:b6:8e:43:6d:a7:c2:a1:98:ec:44:fb:d5:
4d:7c:0b:9a:00:b2:44:bf:62:bf:8c:fd:14:36:85:
9f:ed:25:2f:d1:0d:13:4b:5e:05:f4:93:70:13:b9:
75:2e:b6:37:49:4a:84:fe:40:97:65:5d:97:42:d9:
a5:3a:b5:e5:29:89:62:ab:5a:58:e6:5f:e8:f7:8d:
6f:97:29:8a:c7:8f:e3:fd:82:95:59:f1:16:63:f5:
e1:1b:2a:72:99:69:d1:98:bd:c2:b9:38:1b:e3:17:
b9:e7:14:b3:ba:cf:ab:92:87:89:e5:5a:3e:75:a1:
dd:6a:a6:c7:ab:e7:36:47:85:13:e5:1f:65:6e:45:
d8:1d:af:0d:10:ff:e2:ec:32:e9:0c:40:72:dc:ba:
fc:64:d9:3d:d0:0e:3a:95:47:88:d1:da:f4:36:d8:
4a:73:7e:c0:03:99:71:f1:64:ed:74:94:11:25:f4:
61:f6:97:fd:9e:50:34:d3:b5:3f:ed:63:2e:2d:34:
83:38:9d:ea:49:b5:3e:b6:99:09:f6:ae:98:fc:4b:
01:5b:1b:58:af:11:83:13:7a:30:e1:d1:78:d3:c1:
6d:02:50:10:c1:aa:0d:15:c4:82:14:fd:f0:b1:98:
0a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F3:F2:9F:FA:6F:FF:4A:0F:FA:FE:DB:71:F2:BA:67:78:9A:28:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6ed35d93-819a-3ee3-b2a9-5ad2a7a2c800.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.29.245.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:23:87:c1:e0:b8:c5:d6:d5:ec:55:68:4d:83:7f:43:65:fc:
8e:e1:fe:ce:49:db:26:53:51:3a:68:ce:5c:5e:84:1e:31:b4:
8d:bf:37:8b:a4:a3:14:ab:af:ee:83:a0:c4:87:59:0c:8e:82:
8d:c7:dc:c3:57:43:06:56:d1:c9:85:b9:b6:1e:17:65:ae:76:
3b:20:e5:c2:cf:61:86:d1:2e:d8:b6:75:2e:e2:59:82:6b:21:
39:bb:81:08:95:bd:fd:b6:6f:41:c1:ab:94:3e:28:c3:98:ca:
fa:2d:05:68:ff:eb:75:8e:2a:c2:34:40:65:df:60:98:f9:74:
c2:af:a1:cd:3b:15:c9:d4:e4:5f:bd:20:3f:11:49:10:29:db:
71:2d:fe:df:60:8f:d4:03:23:81:2a:e7:7d:5a:54:dc:70:2f:
4c:2c:70:45:cd:8c:63:70:60:1f:4f:72:56:f2:ae:a8:ae:01:
ab:43:5f:57:b0:f0:3e:08:7b:ff:51:1c:2c:0b:17:cc:c4:5a:
63:f4:7b:d9:ad:fa:a3:a6:74:23:c8:3e:c6:7a:ca:fc:e9:5b:
8f:af:0e:ab:cc:96:31:c8:bf:f8:e5:17:26:dd:a9:93:42:3a:
fd:97:2b:46:ed:03:10:bd:a2:3a:f3:dd:8c:d8:32:6d:db:64:
78:de:03:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:15:46 2026 by rpki-client