
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d78425cb-a2ae-3330-b7f1-293db195adf4.roa
File: d78425cb-a2ae-3330-b7f1-293db195adf4.roa (raw, json)
Hash identifier: uXTRpSeJrDqaCsCVmotCJBR61mesIDGzbfdcU41MZ7s=
Subject key identifier: AE:57:E4:76:B4:9C:E5:D5:09:E4:2D:6C:31:A6:31:85:F9:4A:F7:79
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584F4C3D3DC716BDB8BB4673F700
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d78425cb-a2ae-3330-b7f1-293db195adf4.roa
Signing time: Sat 26 Sep 2026 01:00:13 +0000
ROA not before: Sat 26 Sep 2026 01:00:13 +0000
ROA not after: Fri 25 Dec 2026 02:00:13 +0000
asID: 30036
IP address blocks: 173.16.224.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4c:3d:3d:c7:16:bd:b8:bb:46:73:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Sep 26 01:00:13 2026 GMT
Not After : Dec 25 02:00:13 2026 GMT
Subject: CN=90d63961-af17-4d0a-81c3-ff7df207216a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:59:88:33:70:f9:ec:6d:f1:44:b6:cc:ec:19:
88:1e:78:e8:eb:b7:aa:cd:e5:e1:9c:91:be:b4:c1:
05:25:e3:7d:b7:30:2a:a2:47:f4:da:7a:b6:fd:8f:
2c:09:52:11:66:b0:91:b7:c0:8f:b0:aa:2c:8e:22:
f6:80:f2:bf:c7:14:a5:5e:4d:d5:50:f1:2e:68:11:
ec:5f:83:b3:a8:a8:7d:da:75:0a:e9:4f:b6:a0:db:
34:60:90:67:3a:e8:d3:b6:48:81:42:cd:3c:67:f3:
2d:34:19:aa:ea:54:e9:57:d0:70:1d:07:e7:20:c7:
8e:93:5d:16:93:f1:f1:ee:13:b7:62:0e:84:ae:68:
89:2b:47:42:3c:6f:af:ed:ca:ce:16:fa:5d:e1:12:
b4:e1:2c:00:2e:0d:5e:1c:40:ca:c5:3f:b7:0f:0f:
ab:3b:7d:cf:b5:c5:50:e0:62:f6:97:50:22:39:70:
21:2c:f6:3a:16:cc:0d:44:29:b4:dc:78:ac:d4:4b:
cc:f9:14:d3:cb:54:2e:d0:4b:e7:54:96:f7:c0:16:
1c:6b:4c:fe:a7:39:9e:51:d6:23:49:59:c1:26:23:
4b:8b:7f:67:db:3e:84:86:b9:27:f9:2c:90:59:a0:
81:9e:90:f8:5d:a9:9c:11:b2:ad:be:b7:0a:37:dc:
a3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:57:E4:76:B4:9C:E5:D5:09:E4:2D:6C:31:A6:31:85:F9:4A:F7:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d78425cb-a2ae-3330-b7f1-293db195adf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.16.224.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:79:84:d9:9a:a6:cd:51:c3:e7:4f:ad:a1:77:b2:f6:d4:6b:
6d:32:6a:a1:79:ed:14:2f:3f:84:0d:ea:43:6f:23:20:1e:b3:
28:f0:b6:f8:f7:63:29:63:de:a9:e4:55:c0:56:85:e7:a6:91:
2b:bd:a5:34:56:0b:ce:08:5b:8d:eb:d3:5d:87:2a:3e:fb:a0:
dd:dd:2e:0f:a6:59:ee:c4:75:cb:ca:25:db:f7:75:69:55:56:
c3:1c:aa:db:eb:e5:e8:e5:c0:d3:c8:f8:44:6b:27:42:da:92:
4f:78:e3:b1:78:b2:88:5b:5e:56:d3:8b:fe:6b:48:66:08:db:
a4:ff:cb:22:d7:06:32:3d:c1:67:a4:77:49:3d:1c:47:b2:35:
6f:58:2f:8b:fd:ba:7b:f4:06:b2:c8:8c:9a:6b:b8:99:78:e8:
69:29:f3:cd:64:0b:bd:a8:2e:26:3d:8d:80:76:92:47:a0:6a:
16:7d:45:05:fb:d1:f1:71:d9:0e:60:a4:bb:0c:38:f1:a9:10:
e0:cc:cd:2f:61:cb:cc:fe:bb:ed:04:59:e7:aa:80:75:98:2a:
f4:77:87:2f:65:27:f1:b5:de:98:32:f5:8e:e2:2f:03:f3:04:
a1:d6:d9:68:dc:44:4c:31:01:5c:38:f7:c1:b4:df:1b:89:68:
66:92:9c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:00:01 2026 by rpki-client