
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8d1b386c-2435-3547-a5f0-a22c80e99478.roa
File: 8d1b386c-2435-3547-a5f0-a22c80e99478.roa (raw, json)
Hash identifier: Ez+XRQnDH8jkRuN/4I4YbR+laThInotNo3x8otIUfEI=
Subject key identifier: B0:48:0E:DC:8D:82:0C:6F:C1:1C:4B:2F:00:D3:E3:B9:4D:58:A8:FB
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584E059B3D028583E7EBB1405678
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8d1b386c-2435-3547-a5f0-a22c80e99478.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 30036
IP address blocks: 173.17.28.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9b:3d:02:85:83:e7:eb:b1:40:56:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=98fea98b-259e-4c78-9dee-04e38c10aa69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b2:bb:f4:71:ed:a8:51:e1:3e:00:c4:66:20:
39:6b:09:b4:fe:32:61:e2:b7:23:9d:08:02:4a:6b:
e5:05:97:05:46:6a:53:db:e9:24:c7:e1:1f:ce:87:
3c:39:6e:d0:61:a8:64:66:4a:ad:24:ec:08:f7:89:
ed:99:36:a2:ca:2f:87:40:fe:8e:8c:57:ba:a4:d7:
2c:6f:e3:a7:7a:1f:b6:a0:52:b2:dc:21:af:52:b2:
eb:05:02:46:b7:d5:95:22:de:f7:69:dc:ca:d6:7f:
28:60:b3:88:0e:90:a5:a9:cb:92:71:c4:33:7a:74:
3a:84:db:ae:60:9c:e9:7a:03:83:ab:f3:5c:b2:b7:
fd:fd:f1:04:7a:a0:c1:f2:1c:d4:3f:67:31:9d:e5:
27:f9:89:fa:45:ff:d3:71:d9:d8:39:c5:db:7f:9f:
6b:70:3a:45:7c:53:98:bf:05:4a:e3:7d:ea:8c:cb:
d7:d3:1c:c6:3a:2e:13:27:e5:aa:22:a2:26:84:2b:
41:ac:0c:2d:9b:1e:a2:1b:cd:f1:f1:8c:11:66:35:
e9:41:a2:35:0f:bb:68:5a:f9:56:07:cd:9e:39:03:
d3:18:a6:93:ce:31:76:6e:23:6c:a7:43:1c:f5:d2:
e8:7e:fb:28:80:f4:dc:c1:cb:35:92:9d:df:6d:0b:
dc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:48:0E:DC:8D:82:0C:6F:C1:1C:4B:2F:00:D3:E3:B9:4D:58:A8:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8d1b386c-2435-3547-a5f0-a22c80e99478.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.17.28.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:f0:fd:53:39:ab:46:89:aa:b0:5e:3b:40:86:73:47:00:b6:
b0:eb:4d:71:bd:8d:d4:32:a8:c8:a6:81:30:ea:48:e4:02:2a:
98:75:ad:df:11:57:64:57:23:54:ca:ce:91:6a:58:ab:d7:53:
3d:6f:71:7e:57:ef:52:02:18:f5:5b:ed:aa:a9:17:2a:41:b9:
1e:ec:c4:d7:97:3e:eb:28:d2:94:ff:cf:97:7f:9e:5b:af:4e:
d5:c5:72:4e:00:2a:6c:26:46:f1:50:12:67:f8:96:5e:d0:cb:
4c:26:f3:7d:54:f1:3b:32:64:63:cd:5e:ff:01:1c:6f:45:e4:
87:ff:58:a1:96:dc:46:d0:94:59:e8:ac:b1:92:49:25:d9:bd:
d5:f6:fb:6b:76:10:75:22:2b:ce:7a:fb:4f:2d:12:4a:0f:de:
e4:b2:ee:ec:b2:b8:c4:9d:6f:e3:ab:a7:12:c9:d5:73:db:71:
88:fd:cf:fb:1a:a2:e2:f8:f0:0a:a6:47:59:5b:f8:51:c4:5d:
d9:de:23:37:83:50:63:2e:b0:98:87:28:39:c5:17:d4:b6:72:
31:74:e6:06:ff:e0:80:85:e0:0c:34:2f:d5:f9:fa:ec:99:7c:
8a:44:6f:24:fd:a3:a3:09:65:d3:98:69:98:3d:44:35:0a:00:
a1:af:fe:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:22:43 2026 by rpki-client