
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e524d76-fae5-3ce0-bebf-8621945ec0c0.roa
File: 8e524d76-fae5-3ce0-bebf-8621945ec0c0.roa (raw, json)
Hash identifier: PJtq5DrfuCYn5nQQ3tzt/+H9/Afw5zbLpMlTpHPq2fw=
Subject key identifier: 9F:57:34:E4:95:7E:83:D8:59:4D:58:C3:D6:F3:B7:42:7F:C7:1F:D6
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584CAE5E86620129E5C9CF482580
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e524d76-fae5-3ce0-bebf-8621945ec0c0.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 30036
IP address blocks: 173.17.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5e:86:62:01:29:e5:c9:cf:48:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=15b7490d-e36b-4a28-b15a-c42c81f70aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1a:b6:ca:49:f3:d6:49:fd:bd:76:a0:7f:7d:
72:bf:74:9d:85:61:4a:37:55:3c:04:d2:61:97:de:
51:ca:d4:3c:92:99:96:db:ef:33:45:bb:1e:39:66:
d3:b2:d1:ad:ff:6b:70:44:11:99:47:16:59:8d:eb:
82:50:74:b1:aa:a3:26:f9:34:5e:7c:22:9f:bf:d2:
33:22:ae:d7:38:34:ed:24:bc:85:cb:18:60:47:63:
44:77:4d:97:4a:b6:9f:de:23:f3:a1:09:be:56:b6:
ab:8f:4e:3b:e4:5d:04:3f:7c:33:74:bb:74:96:af:
ba:af:43:77:fa:67:3b:bf:a4:30:1c:47:32:a2:2a:
b5:b2:9c:36:27:20:94:35:45:2b:84:9c:8e:02:e1:
2a:70:41:98:e7:97:2e:43:3b:77:24:ad:21:6d:4b:
28:d8:5e:26:68:8b:ce:75:87:fc:17:66:48:ac:c7:
d8:a2:c0:a4:82:e7:f8:f6:e9:21:7f:6b:32:ac:6a:
46:9f:a5:08:bd:bc:0f:0a:15:92:4d:95:e3:74:23:
62:52:84:af:e7:7d:f4:cb:99:c9:55:9d:c0:84:e0:
be:d7:6f:15:07:67:25:6a:b9:de:35:27:c2:51:eb:
80:4b:67:a0:a3:eb:34:ee:21:ce:58:da:43:4f:4f:
15:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:57:34:E4:95:7E:83:D8:59:4D:58:C3:D6:F3:B7:42:7F:C7:1F:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e524d76-fae5-3ce0-bebf-8621945ec0c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.17.51.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:2c:c2:26:83:27:6d:5f:80:80:3d:1f:44:95:b4:26:61:16:
bf:cd:97:dc:3f:49:5e:79:0e:5e:56:81:9e:6a:2d:6f:15:65:
01:37:0d:9e:7a:80:6b:b7:72:5e:df:ad:e9:8b:c5:24:ca:fb:
07:41:9f:5d:09:d2:20:13:98:ad:dd:61:16:a8:21:37:c5:cc:
6d:79:43:3d:14:69:8e:a3:08:2f:40:f5:2c:61:bf:27:ce:b2:
f8:49:8c:c3:28:44:e5:77:a2:8e:d1:dc:1a:5f:2e:f9:0b:5d:
d1:f5:a3:65:17:4d:af:5d:61:a9:3a:12:86:62:c8:b2:22:80:
8d:28:bb:31:4d:48:e3:50:76:5b:d4:a8:d2:b8:6c:8b:08:25:
dc:40:54:18:92:68:55:23:91:e7:3c:63:0a:6e:4b:b8:8c:04:
e0:69:88:8d:43:15:9f:d0:79:66:ea:a8:25:24:03:77:6b:4a:
ab:5a:2c:a5:80:bb:1c:7c:ca:e3:5e:0a:4b:3d:11:7f:5b:66:
b3:f2:aa:b9:f4:bc:af:38:43:5e:fc:2c:80:51:bf:89:4e:25:
d3:05:4f:72:f1:e0:7f:fe:27:26:f6:0e:3f:8b:d7:22:88:05:
53:62:3a:ef:d7:52:6e:02:14:0c:e0:c8:2b:2f:33:1d:7d:13:
6e:f4:21:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:18:49 2026 by rpki-client