
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/87767a54-9d30-3fa7-99a9-7de94f130f30.roa
File: 87767a54-9d30-3fa7-99a9-7de94f130f30.roa (raw, json)
Hash identifier: 1pSyxvM3VuZXzQ+HRTlHjoXlXKy/3ioWrotaLuT42ew=
Subject key identifier: 3D:D3:2A:C5:29:B0:29:1C:64:D1:64:39:66:4B:EC:B8:8B:7C:38:0C
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584DE6E5D41558313922238E8180
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/87767a54-9d30-3fa7-99a9-7de94f130f30.roa
Signing time: Thu 21 May 2026 01:00:25 +0000
ROA not before: Thu 21 May 2026 01:00:25 +0000
ROA not after: Wed 19 Aug 2026 01:00:25 +0000
asID: 19905
IP address blocks: 173.17.84.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:e6:e5:d4:15:58:31:39:22:23:8e:81:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: May 21 01:00:25 2026 GMT
Not After : Aug 19 01:00:25 2026 GMT
Subject: CN=98533c0d-cf44-4b07-87c6-8c17f488dbc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4f:28:a6:14:8f:57:37:9f:a7:b0:06:f9:01:
b6:51:a0:32:05:22:5c:bf:d4:60:22:5b:3e:7d:c6:
e7:c3:f1:b6:ec:c8:75:59:05:ea:95:12:f2:66:37:
30:f6:8d:1b:2f:8f:e9:59:60:b9:5a:c9:9e:e4:6b:
0e:94:3e:92:24:f0:d8:d9:21:2e:3d:08:47:86:79:
6a:de:83:ee:f7:84:a3:ca:a6:65:c8:8a:d5:5c:4d:
54:4c:d5:fd:af:2c:d6:35:25:fe:d4:0b:10:d7:be:
5e:14:39:d7:0a:1e:ec:7d:28:be:a5:bc:b7:e9:ed:
ca:c7:9a:12:96:29:91:0d:f3:02:67:77:11:0a:53:
51:61:04:d5:76:94:54:f7:e1:7d:0e:9a:81:00:6c:
13:46:04:5b:a4:f0:91:c8:51:05:81:13:bf:db:57:
88:9b:f8:88:bb:21:f6:5c:2a:bf:54:95:0e:ca:13:
69:60:bd:ef:51:2a:68:54:91:f5:09:8c:80:de:11:
0e:11:f3:4a:46:e9:a5:48:49:29:9c:05:69:96:a5:
09:ef:9b:49:97:57:a1:5f:24:07:eb:59:3a:49:5a:
5c:fb:bc:f1:0b:bc:fc:c1:f5:11:8a:0b:1e:cf:b3:
56:c1:1d:27:cf:bd:3e:89:e5:07:7e:44:34:d3:10:
14:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D3:2A:C5:29:B0:29:1C:64:D1:64:39:66:4B:EC:B8:8B:7C:38:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/87767a54-9d30-3fa7-99a9-7de94f130f30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.17.84.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:03:7e:81:d9:2f:b5:96:bf:b9:f4:02:9d:f8:de:00:a1:1f:
85:a2:4c:6f:cf:9d:4f:ad:08:eb:ef:ef:97:20:df:83:07:16:
8d:96:35:db:0a:d2:b1:eb:3a:99:a7:96:6d:00:17:b9:d4:2f:
78:29:81:d1:13:65:c0:a7:17:cd:f8:02:39:eb:7d:cf:ee:bf:
e2:d4:41:c8:1c:0d:97:49:e8:59:89:47:bc:f2:55:65:a6:41:
62:4d:77:16:18:10:01:58:09:2d:a2:35:82:1f:11:0c:35:5f:
54:ff:32:ed:1a:bb:2c:50:39:c1:01:da:cf:8e:7f:3e:8c:94:
b3:a3:49:c5:d1:d3:b2:07:2e:76:59:b9:a8:bc:a9:b4:c2:8a:
3e:a3:37:f2:25:dd:0f:9f:a2:1c:a8:ff:2b:bf:d9:fa:90:81:
50:3a:ab:df:f4:4f:14:fb:ba:d3:fd:65:40:2d:7b:b8:cc:53:
f1:14:78:55:3f:48:16:a9:c3:bb:fe:7c:48:1d:21:48:d0:55:
21:0c:71:82:33:ca:d3:8a:f0:88:fb:b4:e7:77:8f:39:50:e8:
97:5d:6b:22:4a:52:f6:05:51:9e:88:2f:cb:0b:66:a8:93:2b:
8c:d7:fa:c6:2a:96:c5:1e:43:d6:7e:d0:0b:e0:c6:59:3d:e9:
78:b7:03:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:12:58 2026 by rpki-client