
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be8153b9-bf61-3d7b-88ab-38b8172351c7.roa
File: be8153b9-bf61-3d7b-88ab-38b8172351c7.roa (raw, json)
Hash identifier: 1eky4aGqPcAClAYMVHk17ajyCf5e8d33oqhsV/QKnf8=
Subject key identifier: 29:72:1C:58:06:33:75:C3:A2:79:FF:0C:0B:75:5A:F2:4E:B1:52:1C
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584EA5AA9740D1759D68DD255E00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be8153b9-bf61-3d7b-88ab-38b8172351c7.roa
Signing time: Tue 28 Jul 2026 09:00:11 +0000
ROA not before: Tue 28 Jul 2026 09:00:11 +0000
ROA not after: Mon 26 Oct 2026 09:00:11 +0000
asID: 19905
IP address blocks: 173.23.172.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a5:aa:97:40:d1:75:9d:68:dd:25:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jul 28 09:00:11 2026 GMT
Not After : Oct 26 09:00:11 2026 GMT
Subject: CN=46064ab4-f491-4ec0-ac86-c2042d41de32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c9:fa:14:51:7b:bc:74:d2:52:3e:b3:c4:43:
d1:f3:fb:77:70:98:c0:0a:bb:e3:07:38:19:3f:52:
ca:ed:c0:a3:59:c4:cb:11:03:e6:d0:ab:0f:fd:aa:
35:65:39:8a:a0:49:cd:e7:a7:e2:08:00:0d:2e:2b:
4a:a1:25:ad:a0:30:7e:d1:59:23:9d:7b:b3:10:4f:
3f:d2:cd:ce:92:2f:7c:c3:38:d8:c5:ef:3e:cf:ef:
88:5e:83:88:1a:10:2d:50:52:4d:5f:71:a9:8a:21:
ff:46:36:96:30:cf:cf:f0:28:43:72:3f:2f:d9:45:
48:b7:8e:5b:26:c7:84:58:8b:09:fe:4f:d2:06:57:
58:3b:11:53:98:1f:c0:cb:1d:96:e0:a3:97:3f:c7:
15:bb:16:0e:9d:12:e7:39:2f:17:59:37:0d:24:15:
e3:79:28:d8:80:5d:1e:d0:62:e4:27:c3:1a:26:c6:
07:5e:f9:e1:b4:2f:9f:e7:b8:90:ac:39:be:51:ea:
24:c2:59:97:77:b4:85:62:f9:6a:ca:67:70:3d:ab:
a9:84:27:c2:e6:b2:4b:db:3d:6b:54:1d:75:d9:ec:
5f:00:57:7f:83:e4:12:04:66:95:4a:6d:60:37:c2:
0b:0e:f7:ce:0b:77:a1:ac:a3:42:5b:18:92:5e:53:
f0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:72:1C:58:06:33:75:C3:A2:79:FF:0C:0B:75:5A:F2:4E:B1:52:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be8153b9-bf61-3d7b-88ab-38b8172351c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.23.172.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:6b:6a:cb:56:2d:1e:30:c9:e9:9a:7d:c2:c3:85:09:b5:89:
53:ac:3f:32:b9:09:57:88:bc:c8:69:f2:05:53:7b:55:0b:4f:
a1:29:8a:d9:af:c1:cd:2e:c3:63:ff:d1:45:cd:a1:fb:bd:2a:
1f:5a:0d:18:a3:a6:1d:a6:65:ec:e6:2a:87:db:23:44:80:56:
56:2c:f0:4c:13:c4:f1:da:7e:59:63:ee:80:b1:45:dd:cd:80:
94:f7:d5:81:f5:62:28:cc:52:16:a1:cf:46:8d:ba:3e:5c:ed:
c2:31:0d:54:0a:93:46:8b:4a:06:eb:46:1f:2c:7b:ec:cc:63:
a4:30:b0:58:76:71:89:3a:12:86:fa:47:38:12:00:25:b3:69:
08:91:bd:00:4b:6d:9f:b6:1a:fe:13:44:b2:6b:89:f4:b8:98:
3f:c4:f4:60:6e:90:b4:1f:89:98:02:08:9a:41:d2:61:e0:cc:
b6:da:da:33:55:16:61:54:40:fa:f9:79:fe:34:d8:65:bd:ba:
96:da:b2:c5:35:2f:e7:d2:48:6a:a9:60:7d:00:c0:c3:21:eb:
15:cf:58:ae:55:f0:58:ef:80:ba:0c:22:a5:05:82:1c:84:5d:
db:05:dd:b4:37:6e:11:33:be:6b:86:33:aa:2d:96:0e:d3:e3:
2e:ca:89:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:58:40 2026 by rpki-client