
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/872a6044-08ed-3add-beae-2974f9de2b65.roa
File: 872a6044-08ed-3add-beae-2974f9de2b65.roa (raw, json)
Hash identifier: RphEHqJtCeLpWfDmdK6Dp0QlJTwVNa3os/YCK1lpEF8=
Subject key identifier: A3:47:11:F7:FB:13:F6:41:76:7C:85:FE:0A:B7:07:C3:32:52:C9:BF
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D037D14D160760775EDF24440
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/872a6044-08ed-3add-beae-2974f9de2b65.roa
Signing time: Sat 28 Feb 2026 14:00:40 +0000
ROA not before: Sat 28 Feb 2026 14:00:40 +0000
ROA not after: Fri 29 May 2026 13:00:40 +0000
asID: 30036
IP address blocks: 173.16.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:03:7d:14:d1:60:76:07:75:ed:f2:44:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 28 14:00:40 2026 GMT
Not After : May 29 13:00:40 2026 GMT
Subject: CN=4f3d496a-e180-4f23-a787-133df81672ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f0:cd:f8:cb:df:41:c3:b3:20:11:51:4d:1f:
55:5c:91:75:84:b0:d0:47:c6:38:f6:c5:a0:3b:bd:
42:4f:a0:5a:e7:73:af:33:69:d5:fe:08:df:d8:1f:
0d:ec:b5:b4:bd:2d:76:24:f6:01:23:22:ab:0f:24:
2f:8c:b8:54:bb:18:4f:35:31:0c:63:47:77:25:f1:
fa:ec:2a:22:b5:0e:33:5a:67:63:b9:8b:34:df:d6:
ab:ef:99:1a:f4:7d:e2:32:41:9e:f7:2e:8d:c8:cf:
c8:86:88:c0:da:12:5f:1b:46:08:a0:b1:45:1a:71:
82:c7:68:3e:7f:99:a1:b2:70:be:13:ea:14:31:7d:
9e:58:b0:a3:a0:97:53:8d:d9:c6:a0:b4:d5:25:7c:
d2:ea:e9:cd:30:3b:f5:1d:83:32:13:76:0b:ba:47:
3b:50:6a:cc:76:70:5b:44:b9:6d:cf:ed:5a:82:a5:
91:ee:43:f0:f2:06:8e:a5:dd:0a:e2:77:cc:58:14:
52:38:41:8b:89:ab:05:48:8b:98:38:5f:62:6b:9d:
08:70:75:0b:0b:20:5a:de:4e:22:4a:b8:06:67:48:
b3:3e:98:b2:45:6c:6f:97:8e:46:4b:e5:e9:ee:c5:
2c:bd:d7:94:91:5d:0f:2e:9b:e6:6a:b3:18:97:91:
0c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:47:11:F7:FB:13:F6:41:76:7C:85:FE:0A:B7:07:C3:32:52:C9:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/872a6044-08ed-3add-beae-2974f9de2b65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.16.17.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:5a:cf:7a:4f:2d:51:98:18:6a:e5:a2:a0:22:8c:9e:68:df:
26:68:6b:7b:0f:c5:e4:90:eb:1c:c5:bb:05:dd:99:4c:49:ea:
1e:83:7b:24:a5:8d:bd:af:6f:a5:43:14:14:32:35:66:ba:1d:
24:f7:3a:df:c2:c1:c3:73:fc:fb:0e:f6:1f:55:85:62:ec:a9:
a0:4c:ee:8e:8c:27:dc:45:ed:5a:23:0e:70:6e:35:bf:97:5d:
e5:64:bf:a8:c9:b5:3c:6f:ff:cc:11:22:0b:d5:4d:aa:f5:18:
7b:d1:81:14:bb:2b:23:bd:96:19:2b:3c:23:2f:75:68:26:38:
fb:fd:2a:15:a9:ae:9e:a1:68:66:5f:2c:a7:01:e8:a8:be:24:
83:dd:ff:a2:f9:e5:ab:ec:a9:f8:fc:56:44:f9:b9:af:61:3f:
48:88:af:3d:25:ae:6e:b0:08:ce:52:89:8b:fd:66:f6:d1:1b:
63:32:52:d1:75:26:89:b2:41:22:19:06:11:3f:12:85:54:4b:
57:34:71:be:c7:21:9f:c0:cf:0c:c1:2b:16:50:ff:dc:ef:a5:
a4:e5:7f:73:4f:0b:e1:fd:4f:7e:aa:41:f9:e7:b1:e7:a6:38:
7e:b0:00:77:28:5e:cf:c9:b2:2b:5b:b6:d9:1c:54:bc:3d:a0:
4a:50:4d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:29:54 2026 by rpki-client