
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3c98b7b4-6cda-3852-b836-1c90185d9db6.roa
File: 3c98b7b4-6cda-3852-b836-1c90185d9db6.roa (raw, json)
Hash identifier: tOW2iCKnx8+LBY1SEr4B29mSFW9uPXlMvvMxPGZug0E=
Subject key identifier: A1:3B:E1:73:62:F5:9E:F4:09:69:7A:D1:5F:4F:0B:73:8B:8F:AF:03
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584F0672976802280A8F7FFDAF80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3c98b7b4-6cda-3852-b836-1c90185d9db6.roa
Signing time: Tue 01 Sep 2026 01:00:12 +0000
ROA not before: Tue 01 Sep 2026 01:00:12 +0000
ROA not after: Mon 30 Nov 2026 02:00:12 +0000
asID: 36522
IP address blocks: 204.101.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 16 Oct 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:06:72:97:68:02:28:0a:8f:7f:fd:af:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Sep 1 01:00:12 2026 GMT
Not After : Nov 30 02:00:12 2026 GMT
Subject: CN=2afc1e88-c485-414f-bea5-3309e53a820b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:91:34:b3:9d:fb:f9:2f:c4:71:a4:27:b9:b5:
b2:0d:20:93:4c:8a:6e:24:3d:4b:18:29:6c:6a:6a:
f2:c8:ae:f5:9a:fe:e0:8c:74:d4:e9:eb:e2:f9:70:
69:35:47:a4:2d:9b:f3:c0:34:b0:45:c2:b4:aa:a3:
97:d8:e6:5a:12:73:0c:d4:84:c5:a0:dc:11:d7:ff:
a3:90:f1:b4:70:03:9d:1e:da:0e:61:83:22:6c:ba:
3a:14:8d:8d:6d:99:ed:57:81:9d:25:dc:4a:6b:15:
ee:44:5b:87:53:bf:f9:4c:13:b7:6e:5d:5d:7b:3e:
97:f6:96:f4:12:12:52:df:fd:50:a6:c8:eb:bd:bb:
6f:8c:f7:86:dd:0f:6a:ed:4e:b7:ca:a2:f7:c6:4f:
38:68:10:03:7e:f0:71:c4:f6:ce:b9:0b:9f:a3:31:
4f:3b:6e:27:dd:af:65:01:b5:62:01:da:c2:00:30:
07:c9:e0:de:f2:06:c0:4f:c8:c3:fc:c7:57:72:fb:
16:15:56:26:81:1f:e5:aa:d6:0c:d5:11:89:a8:ae:
26:51:11:f9:2c:c3:4a:fc:9c:55:a9:b4:90:bc:0d:
8d:66:7a:f0:03:7c:bd:b8:0e:08:95:4d:33:cd:99:
6d:7d:6e:8d:9d:97:d4:a9:a4:3d:60:9e:2b:5e:3b:
88:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3B:E1:73:62:F5:9E:F4:09:69:7A:D1:5F:4F:0B:73:8B:8F:AF:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3c98b7b4-6cda-3852-b836-1c90185d9db6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.213.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:ad:d8:9b:23:64:34:9a:9d:10:eb:e4:00:71:fe:b9:23:bd:
bf:d5:df:68:2c:90:2b:fd:00:49:c3:ee:36:ab:24:13:df:21:
3e:0f:9c:4c:85:42:ac:1d:9b:38:2d:5c:63:f8:43:18:c7:74:
c2:fe:af:c1:f2:68:a1:4c:b7:04:20:30:7e:bb:9d:f1:cd:99:
26:29:5c:9c:95:f0:03:22:5e:16:61:2b:73:23:05:1d:4c:97:
c7:fc:2e:61:f6:8d:06:dd:34:9b:a7:0c:88:57:e9:bf:47:df:
52:c1:96:55:5b:a7:d3:de:2a:da:04:4f:46:fc:9b:19:25:44:
db:2b:29:ad:7c:68:b3:e0:b4:b7:8d:5d:31:e5:92:58:a9:f3:
67:de:8a:91:b9:53:61:d8:f2:37:67:63:dd:2c:78:c8:23:a9:
36:d3:03:2b:78:cd:3f:86:e2:34:34:c3:a0:4f:05:2f:cc:e6:
e7:40:0f:2a:fc:d5:3b:bc:f0:4e:ae:cd:d5:86:6a:b2:71:4c:
ad:ba:20:d7:26:7d:39:25:5c:b2:af:be:74:92:32:71:dd:12:
2b:58:b3:d4:3b:b8:28:6f:ec:bc:25:e6:b0:9b:db:9b:45:2b:
7d:c9:69:cb:02:07:56:cb:22:a4:57:29:3e:41:bd:aa:94:bd:
2f:02:70:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:34:39 2026 by rpki-client