
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c28e281f-bdf7-3fb7-b6dd-c5899247707a.roa
File: c28e281f-bdf7-3fb7-b6dd-c5899247707a.roa (raw, json)
Hash identifier: Ag6Qt1oegnFKr2UqrlowfRZt0fo4OISB6IXCQAYQ5l4=
Subject key identifier: 22:05:53:53:BA:79:D9:F7:70:F8:AD:AF:82:B0:A9:B1:2A:8D:A5:05
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584F4C3D6C4E1CCEC881F5ECB600
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c28e281f-bdf7-3fb7-b6dd-c5899247707a.roa
Signing time: Sat 26 Sep 2026 01:00:13 +0000
ROA not before: Sat 26 Sep 2026 01:00:13 +0000
ROA not after: Fri 25 Dec 2026 02:00:13 +0000
asID: 30036
IP address blocks: 173.22.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4c:3d:6c:4e:1c:ce:c8:81:f5:ec:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Sep 26 01:00:13 2026 GMT
Not After : Dec 25 02:00:13 2026 GMT
Subject: CN=a9b7ec79-99fa-42cc-bbee-f11b903cf263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:10:9c:2f:be:44:66:78:86:83:96:ee:2d:30:
d4:6a:3b:4b:72:5f:4e:1d:85:de:c3:09:2d:b7:f0:
42:ad:98:6b:2b:de:c4:3c:aa:62:c7:8d:45:aa:44:
2b:60:d7:de:25:0a:60:81:3d:11:b9:1e:4d:b2:44:
1b:88:70:c3:78:9d:fc:4e:12:b5:da:07:e3:a3:c0:
c5:19:31:d8:e5:4d:61:8e:88:b0:ef:cf:ff:0f:a9:
57:94:9d:18:79:03:38:40:aa:e0:8f:3c:73:1f:61:
fd:d4:87:fe:2e:a5:46:f3:b9:d0:b7:65:11:aa:f6:
ee:b7:f9:62:2c:ef:89:5d:6a:7c:36:21:bd:84:84:
84:53:6f:d2:7e:1b:3f:a7:b1:6d:db:0e:29:24:15:
47:f4:44:fa:72:df:ce:f4:8d:1d:18:ec:43:ce:c6:
f3:af:0d:40:36:1d:63:b6:f0:69:52:fb:99:99:28:
64:0b:aa:77:06:73:f2:d5:49:8c:05:2c:c0:de:de:
87:ee:5c:b9:b3:63:aa:c0:39:62:e6:ba:81:bf:c0:
bd:02:59:4a:31:e0:52:9d:0f:3f:9f:3b:ab:96:fd:
be:62:5c:63:06:fd:68:74:3b:bf:04:3a:be:19:19:
8e:e7:86:0d:f7:51:30:24:c4:11:f8:cc:6e:f5:f9:
a1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:05:53:53:BA:79:D9:F7:70:F8:AD:AF:82:B0:A9:B1:2A:8D:A5:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c28e281f-bdf7-3fb7-b6dd-c5899247707a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.22.151.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:8e:61:33:fd:68:b6:ec:b2:88:7f:ab:f1:2e:60:d4:a7:34:
9c:d6:ee:1f:d0:2b:75:83:fb:08:63:35:e1:4f:19:f6:9d:af:
d3:1d:b9:32:00:c0:e7:c9:61:24:c4:c0:37:71:c7:d1:eb:8e:
36:81:29:be:57:52:8f:88:e1:4f:06:48:ba:e5:22:4d:33:2f:
cc:c2:36:a2:5a:6d:f7:3e:fe:41:53:5f:2c:52:4f:74:a1:34:
52:a2:11:1c:2e:53:34:cf:89:26:21:2f:7e:75:59:3f:f6:c3:
ba:c1:6c:a5:c8:ec:e8:e2:77:b1:f2:16:08:7c:b4:0d:c3:c6:
bd:78:29:11:57:0c:b5:8d:3d:7b:1b:81:2b:d2:e5:5e:0b:cc:
17:2a:86:4b:48:f7:b7:c1:e5:2a:66:6a:65:9a:ae:a8:c4:82:
84:c4:81:d5:f1:fc:6a:5b:94:40:cf:d4:33:44:2b:b6:fd:f4:
7f:1c:c0:fc:b0:c7:bf:15:00:a7:a9:c6:34:78:b4:97:ad:7c:
a8:dd:17:a7:1d:a9:c9:e8:e7:39:70:82:b6:a2:7f:8e:13:fd:
f5:a7:9a:39:3f:61:f6:11:7b:91:fc:4e:a0:31:27:5c:a5:76:
6d:84:6c:e2:d4:d2:3a:5f:1f:17:5f:0b:69:2b:9c:5b:44:52:
2e:e8:f0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:59:05 2026 by rpki-client