
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/84e3b569-c77e-369f-9d81-aa06c2742984.roa
File: 84e3b569-c77e-369f-9d81-aa06c2742984.roa (raw, json)
Hash identifier: N/ptU0kwpQvmijsjjtovx+Nv5VS/GqtwDcI1gI/1HHE=
Subject key identifier: B7:6D:03:12:E1:E9:6C:7A:1B:65:36:10:88:C7:0D:D4:60:E8:2D:D1
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584B62021AE7725E50A69265AF00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/84e3b569-c77e-369f-9d81-aa06c2742984.roa
Signing time: Thu 02 Oct 2025 01:00:31 +0000
ROA not before: Thu 02 Oct 2025 01:00:31 +0000
ROA not after: Wed 31 Dec 2025 02:00:31 +0000
asID: 30036
IP address blocks: 173.23.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:62:02:1a:e7:72:5e:50:a6:92:65:af:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Oct 2 01:00:31 2025 GMT
Not After : Dec 31 02:00:31 2025 GMT
Subject: CN=bc9f26dd-3d74-429c-9e2c-3e3032169f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:59:30:02:8c:ca:de:d1:6b:27:bd:2b:6a:9c:
fb:14:b8:91:71:e8:75:0f:c5:72:81:1e:03:c0:fc:
8e:f2:2d:a5:46:9a:ff:60:c7:da:f9:37:75:ae:f0:
2d:78:e2:33:93:15:af:71:d7:f9:99:d0:18:09:83:
eb:74:79:46:19:13:f5:73:ba:1c:3d:0a:c1:a3:5d:
33:0e:a7:e4:df:d7:ac:ce:ab:20:47:08:27:7f:16:
da:01:08:f4:e9:6f:8d:77:52:36:93:9e:b3:16:b6:
bd:24:79:2e:54:9a:47:75:4d:0c:69:2e:60:75:14:
62:5a:14:f1:8a:e0:b0:54:6e:18:18:1d:da:44:f5:
4a:25:29:6f:9e:4f:46:36:cd:8d:e4:c4:9a:03:3c:
a1:ac:4e:a1:46:bc:9e:ed:4e:79:e8:40:b6:75:94:
64:ac:94:b2:a7:34:f8:c5:12:8c:9e:aa:80:9a:a6:
9f:48:e2:57:9e:02:6e:be:70:57:e0:ec:1d:11:7d:
61:5a:ad:88:d4:8a:d8:b6:59:21:9a:3e:96:c2:4f:
93:10:35:e5:a8:93:78:58:6f:3c:37:58:71:1d:7a:
1d:a9:ae:da:13:fa:19:99:4f:cf:b9:19:30:e5:f2:
32:f4:de:e2:29:88:42:66:a4:7b:d5:03:13:d9:1d:
d5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6D:03:12:E1:E9:6C:7A:1B:65:36:10:88:C7:0D:D4:60:E8:2D:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/84e3b569-c77e-369f-9d81-aa06c2742984.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.23.196.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:ce:86:94:7d:fe:14:b8:63:da:7b:04:7c:0c:0d:c3:68:64:
6e:dd:82:dc:8e:3d:97:5f:fb:a6:2e:01:ed:b2:1a:60:bf:88:
db:e4:48:23:be:67:3b:6c:f1:f4:5a:cd:e4:37:5d:99:e7:78:
70:21:87:54:b4:80:90:2b:00:7c:34:a2:08:6c:57:1a:b5:71:
b7:6d:b4:d7:c1:41:cc:43:71:c5:4d:83:46:f3:20:2d:14:80:
6e:78:59:74:29:d7:e3:c4:8f:51:25:5a:dc:e5:36:42:d9:4e:
6b:a5:8a:10:ee:1f:c6:44:83:7f:19:fa:6d:33:be:92:da:ad:
af:87:ef:77:24:d7:f6:cf:dd:54:f5:2a:d5:30:9c:7a:1d:60:
94:8f:e0:e6:bf:8b:72:ff:f3:5e:48:37:e3:08:1f:b8:cb:8e:
92:fa:c1:e4:3d:0f:8b:67:96:1a:e7:c1:0f:0f:39:00:8f:2f:
82:5b:58:75:ea:8c:6c:74:96:8e:10:0c:7d:2b:d2:79:17:12:
7b:04:a7:eb:0a:87:9f:81:74:8d:f2:8c:e1:b9:42:77:6c:42:
fb:80:ca:e3:33:ee:2e:d4:c3:57:54:ba:29:2e:2b:4e:24:92:
61:61:1e:bf:c0:9c:22:9a:92:0d:5e:f1:73:78:df:6d:8e:65:
39:4f:8a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:40:56 2025 by rpki-client