
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d697bf8b-c12d-3bfd-a0f8-8f1b8304bfa8.roa
File: d697bf8b-c12d-3bfd-a0f8-8f1b8304bfa8.roa (raw, json)
Hash identifier: EC/t9FHowllX8DaRjvxp2hJiwh//uQQgIvKg2YpQ7dU=
Subject key identifier: 1F:E3:99:1C:41:A2:7F:C4:BA:A6:CD:1C:DA:67:55:33:0B:5F:FE:1E
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D83E140280CD4C2EFB412A144
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d697bf8b-c12d-3bfd-a0f8-8f1b8304bfa8.roa
Signing time: Wed 15 Apr 2026 13:46:19 +0000
ROA not before: Wed 15 Apr 2026 13:46:19 +0000
ROA not after: Tue 14 Jul 2026 13:46:19 +0000
asID: 19905
IP address blocks: 173.25.240.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:83:e1:40:28:0c:d4:c2:ef:b4:12:a1:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Apr 15 13:46:19 2026 GMT
Not After : Jul 14 13:46:19 2026 GMT
Subject: CN=6b17a9ec-8cb7-4127-86fc-a156b8da2f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:43:29:71:b4:16:db:fc:c5:32:06:bc:f7:d3:
91:9f:c4:7f:31:ba:2e:8f:be:3b:45:55:ba:a6:3a:
a7:f9:fe:e5:a7:18:3b:6f:37:45:a2:26:3f:99:bc:
5f:05:ac:77:b8:5d:3c:13:23:13:9b:7a:33:e9:70:
24:df:f1:42:78:45:97:ac:ac:1b:4b:b6:4c:32:50:
59:04:94:26:1a:bf:92:0f:c2:bc:34:87:d3:b1:b5:
b0:05:65:7c:1d:02:4e:80:65:2f:39:4d:7d:a4:0f:
0a:65:90:49:2e:de:65:43:73:75:a7:c7:ec:b0:59:
09:1e:5a:c3:d6:3b:0e:55:a9:81:3b:53:10:42:b0:
2e:3c:81:6d:67:51:19:98:cf:bb:28:e0:a1:d2:28:
f0:e5:0f:26:0f:03:e9:6d:2c:72:c2:ed:49:de:ec:
17:92:31:e6:b0:c8:0b:cc:78:3d:81:2b:55:d4:59:
e3:d3:98:42:cc:dc:ce:79:6d:9e:40:a4:25:8b:ae:
43:40:72:cb:fd:07:c2:ed:4d:d4:e7:6a:95:03:e4:
57:20:9b:02:fe:68:ff:0f:b5:60:29:6c:28:0f:43:
9d:06:66:28:de:cc:bf:e2:02:65:9c:94:0f:17:bf:
34:71:9b:c6:1b:9b:98:68:23:8f:9c:75:d2:09:4a:
82:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E3:99:1C:41:A2:7F:C4:BA:A6:CD:1C:DA:67:55:33:0B:5F:FE:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d697bf8b-c12d-3bfd-a0f8-8f1b8304bfa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.25.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:83:9f:c4:40:be:c4:a4:ed:a9:84:f3:84:e9:dd:52:66:9e:
00:7a:50:75:2d:23:ff:9d:f8:7e:52:21:03:6d:f2:32:56:c3:
e7:ea:2a:9e:43:4b:59:7d:34:45:df:03:5e:d7:8b:2d:9a:ed:
c7:f4:9c:b5:67:dc:22:1b:6b:56:bf:bb:d4:38:0a:33:45:95:
e7:47:df:50:5c:b9:00:4b:39:e4:03:ec:c5:ff:ad:fb:67:09:
c1:71:ba:f7:91:c8:94:dc:50:4c:ed:75:46:57:31:0b:3b:26:
4e:f1:82:76:aa:4f:1b:84:96:36:73:d5:ad:21:8e:b9:43:0f:
7d:9c:f0:09:2f:fb:b8:65:57:f0:d2:f0:82:b9:10:1c:6b:2e:
2e:1c:5f:52:88:04:16:3e:bb:a3:e1:ca:da:e5:36:40:5a:5e:
0b:2d:e4:c6:b2:5a:84:59:26:a0:f0:cd:1d:da:aa:23:83:19:
2a:67:a9:d4:1a:4d:96:8b:e6:ab:e0:68:93:95:8d:b0:25:9c:
bd:3d:7a:7a:20:8c:88:88:73:9b:65:f9:d0:ed:93:76:34:76:
71:07:84:bf:64:b5:4a:54:09:43:66:76:c8:25:9e:14:19:20:
cd:c5:4f:9d:11:3e:4e:b9:1f:2b:0b:f9:86:dd:bf:ec:49:61:
ca:23:27:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:28 2026 by rpki-client