
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/967f720f-5e94-318c-bedf-d2b5a2038177.roa
File: 967f720f-5e94-318c-bedf-d2b5a2038177.roa (raw, json)
Hash identifier: f3Saz02s/SJBiq2/Gko2fs+DtLp2mzDTofJAIHzRCNg=
Subject key identifier: 3E:FE:65:D8:38:00:67:C4:01:EF:94:21:64:5B:5A:A8:25:2B:0B:AF
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D7B6A9B1BE96B12BF6B2DAEC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/967f720f-5e94-318c-bedf-d2b5a2038177.roa
Signing time: Sun 12 Apr 2026 13:00:30 +0000
ROA not before: Sun 12 Apr 2026 13:00:30 +0000
ROA not after: Sat 11 Jul 2026 13:00:30 +0000
asID: 30036
IP address blocks: 216.108.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7b:6a:9b:1b:e9:6b:12:bf:6b:2d:ae:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Apr 12 13:00:30 2026 GMT
Not After : Jul 11 13:00:30 2026 GMT
Subject: CN=273cec10-66e6-4e5a-bc92-8550117120cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a7:a1:06:83:11:d2:79:ca:6a:3f:55:c3:d3:
86:e7:b1:f1:dd:3f:b9:15:87:3d:6b:6e:fc:37:16:
0e:04:02:82:6f:02:a1:c0:e5:59:de:02:4c:42:14:
0f:44:e3:12:8f:e2:29:2f:7d:69:c8:1e:ee:91:6d:
2f:c2:a8:d0:69:ce:d3:7a:d2:16:21:9b:8b:c8:57:
e4:9a:f9:51:b1:96:74:a6:08:08:93:b4:1b:73:c7:
21:ca:dc:88:72:36:98:2f:24:a6:e0:70:bd:a7:ac:
ca:95:e2:50:50:2c:dd:95:15:87:c7:8c:f8:1b:2c:
91:08:c6:7e:16:e2:c9:44:2d:b2:9d:61:85:83:e6:
0e:a0:22:14:5c:f7:48:db:db:c6:37:4c:dd:eb:ca:
f8:33:6a:27:f3:5c:5b:bb:c1:56:a7:11:59:31:1c:
bb:3f:ea:fd:e3:b0:69:82:46:17:8a:01:97:b6:19:
3c:ee:d7:d7:a4:81:81:e4:88:0f:f3:81:89:09:42:
49:00:49:24:83:88:56:c4:56:85:11:75:6b:88:7a:
cc:dc:05:c3:a0:06:56:25:4f:0a:36:3b:5a:d7:38:
c9:77:11:34:61:ed:50:a7:2c:f4:a5:0d:77:4b:71:
6e:22:dd:e7:2e:8b:8b:4e:25:98:92:48:8d:43:f2:
0e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FE:65:D8:38:00:67:C4:01:EF:94:21:64:5B:5A:A8:25:2B:0B:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/967f720f-5e94-318c-bedf-d2b5a2038177.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
216.108.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:7b:2f:64:5d:21:71:1c:ce:87:b2:b7:19:ff:4d:ea:5a:99:
d3:2c:cb:25:62:52:ab:b5:67:88:50:a0:5b:1d:99:00:ea:e5:
84:84:33:96:b4:60:bc:53:d5:64:e4:14:0f:cf:0a:db:ed:4b:
bf:07:e9:d4:36:a7:db:b3:a1:fc:d4:6c:b2:31:ef:83:b0:b8:
99:dd:3f:f8:dc:ab:8f:ba:6a:d5:0f:cb:d1:4f:c9:ec:88:8e:
ae:b6:c4:8b:20:b3:eb:c7:e9:c5:4f:43:d9:69:78:f1:e1:45:
12:fb:b2:8a:64:67:60:72:36:f6:a3:6b:9b:1b:41:1c:a7:45:
ba:32:3e:e9:a0:b3:78:a0:e5:16:e1:17:c0:fd:e3:da:b1:38:
d3:aa:49:dd:54:69:7f:f0:75:22:4d:b1:ab:78:a2:93:f6:f9:
95:64:69:9a:9c:16:59:25:82:f3:16:6b:42:5f:fa:55:0e:05:
86:da:64:d6:bb:5a:83:be:9a:16:ac:66:3e:4e:2e:06:c4:17:
39:de:9f:81:08:57:a2:de:e5:5d:a4:9d:ee:86:01:75:c3:cd:
ae:43:5a:7c:dd:c0:f0:91:20:94:1e:3d:e7:db:3c:9c:46:3a:
40:0e:c2:8d:17:38:a0:b2:e2:24:31:d2:c0:62:5b:af:2d:ca:
30:71:f6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:02:52 2026 by rpki-client