
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/0298a5b7-1e77-370e-a31d-ab0ef5f8b02b.roa
File: 0298a5b7-1e77-370e-a31d-ab0ef5f8b02b.roa (raw, json)
Hash identifier: OYfBBbs2zFu+Sj0ZIKXmDXYJUaD8LKJoqA8hDC+bR4A=
Subject key identifier: 82:FE:C3:5B:50:2C:91:EA:7E:E6:28:2E:1C:84:EC:7D:C3:92:27:59
Certificate issuer: /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial: 010D0C9F4328584F46A7E050B325DA96138F07C0
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/0298a5b7-1e77-370e-a31d-ab0ef5f8b02b.roa
Signing time: Thu 24 Sep 2026 01:00:12 +0000
ROA not before: Thu 24 Sep 2026 01:00:12 +0000
ROA not after: Wed 23 Dec 2026 02:00:12 +0000
asID: 6922
IP address blocks: 204.158.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:46:a7:e0:50:b3:25:da:96:13:8f:07:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Validity
Not Before: Sep 24 01:00:12 2026 GMT
Not After : Dec 23 02:00:12 2026 GMT
Subject: CN=b2b72471-2944-47ca-a783-6d18d012f40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6e:52:92:c6:f5:0f:19:8a:99:11:6c:ab:dc:
72:6d:dc:7b:cb:fe:d6:b1:d0:c5:89:50:4a:e6:71:
f9:f6:ee:41:36:f4:93:b9:02:af:21:93:be:aa:54:
73:9e:57:12:ef:2a:3d:04:68:92:f0:ce:8a:36:ea:
69:cf:9f:b2:17:68:65:79:26:e9:37:6f:56:98:52:
dc:ad:3f:45:12:68:3d:84:c8:40:e7:15:78:7c:40:
93:77:54:15:43:5d:9b:5c:49:63:90:f4:fd:9d:ff:
8d:b4:05:3c:3e:8a:90:a8:d6:ad:b9:e4:66:c0:47:
00:6e:7c:5a:40:da:c1:25:c0:15:e3:57:72:04:17:
9f:0c:cc:82:df:21:18:96:73:68:4f:4a:0d:fa:f4:
f4:0e:f5:30:0e:9e:1b:c9:1e:77:d7:e9:02:63:fb:
b4:17:0a:9e:4d:8d:c7:e2:f8:bc:42:25:55:c2:ca:
d0:e4:92:23:bc:d4:29:95:52:a6:7e:6e:4c:aa:ef:
be:19:51:37:dc:74:25:2f:50:c9:5e:d8:fa:7f:6b:
01:7f:cc:5c:97:40:8d:6a:f8:ca:91:40:41:6d:d5:
82:25:96:43:70:63:68:12:49:cc:be:8d:f5:3e:ca:
41:c1:ba:af:f6:28:68:e2:82:2e:6a:56:e6:5b:c9:
90:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:FE:C3:5B:50:2C:91:EA:7E:E6:28:2E:1C:84:EC:7D:C3:92:27:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/0298a5b7-1e77-370e-a31d-ab0ef5f8b02b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
X509v3 Authority Key Identifier:
keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
sbgp-ipAddrBlock: critical
IPv4:
204.158.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:61:3a:8f:0c:b2:99:28:4c:d9:f7:be:30:72:20:73:33:e3:
b7:83:20:c4:73:69:8e:b9:2b:d8:17:5a:1f:f0:88:3c:ac:43:
9c:ff:e8:12:12:6b:1a:c6:b1:05:c8:34:b7:ba:12:db:51:9a:
2a:cf:51:3e:12:ee:e3:68:6c:c2:e8:15:d3:47:a4:34:a5:f9:
bd:43:c3:fe:bb:ec:1d:6f:1a:42:3e:8c:e9:66:42:35:9d:50:
e5:ec:8b:06:24:c3:00:9c:13:b0:79:2a:ef:5c:a7:75:2e:99:
09:ad:32:90:8f:fb:06:7d:47:8c:63:f7:d2:cd:7d:0d:3c:cb:
a7:90:ca:e6:73:e8:08:33:92:e5:d8:77:b4:03:4c:18:1e:6a:
3c:e9:f4:13:b8:fa:b4:ab:d8:b6:4a:df:0a:27:19:44:52:7c:
27:36:b7:23:dc:3d:49:a8:9a:6c:9a:c4:9c:0d:c0:2d:dc:30:
20:1d:cb:3a:3f:d9:61:44:66:57:cb:61:1d:d5:62:40:51:34:
8a:41:9f:92:ef:2b:02:e4:aa:10:fb:a8:5b:e3:0f:34:a1:db:
f6:b6:77:ad:30:cf:b7:f6:03:ea:f8:b6:fd:37:60:8f:1e:30:
3e:67:c4:ba:35:ef:ee:63:be:60:78:dd:a3:f5:f6:6e:d3:7c:
d0:cd:53:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:58:56 2026 by rpki-client