
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/d6e2d374-2982-35ab-9281-5193fb690ae9.roa
File: d6e2d374-2982-35ab-9281-5193fb690ae9.roa (raw, json)
Hash identifier: xyMs0o2qMWo7q7joo/YcvFaMAlAwmT2UC2gJa7BmI5E=
Subject key identifier: 76:22:C9:85:59:48:D9:5E:72:39:D2:6B:73:8F:06:A7:81:EE:D6:83
Certificate issuer: /CN=bb49c202-f644-4fa6-8a36-084312761f72
Certificate serial: 010D0C9F4328584F5767F7B1487068C9FB905E00
Authority key identifier: CF:B3:27:7C:51:09:97:90:36:B3:FB:CF:B2:8C:86:C0:AB:F0:6B:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/d6e2d374-2982-35ab-9281-5193fb690ae9.roa
Signing time: Wed 30 Sep 2026 01:00:12 +0000
ROA not before: Wed 30 Sep 2026 01:00:12 +0000
ROA not after: Tue 29 Dec 2026 02:00:12 +0000
asID: 63023
IP address blocks: 172.98.208.0/24 maxlen: 24
172.98.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/bb49c202-f644-4fa6-8a36-084312761f72.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/bb49c202-f644-4fa6-8a36-084312761f72.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 14 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:57:67:f7:b1:48:70:68:c9:fb:90:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb49c202-f644-4fa6-8a36-084312761f72
Validity
Not Before: Sep 30 01:00:12 2026 GMT
Not After : Dec 29 02:00:12 2026 GMT
Subject: CN=a3a94bb3-3b9a-4e6a-bcc2-afc03a2f9f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7e:68:fe:7d:84:89:88:d9:ec:83:60:87:8a:
5c:98:33:0e:45:a2:81:14:01:6d:d8:d2:fd:d1:b4:
a5:92:f0:66:1f:04:f7:01:e4:67:3c:ab:f9:56:75:
5c:c4:a8:48:fd:46:9c:33:83:db:47:1e:c5:9a:30:
a2:89:88:9f:04:d0:05:95:08:0d:2d:d3:0b:16:92:
e8:b2:ba:9e:cd:2f:21:0c:e6:2d:10:fd:95:8a:ac:
7b:bd:0b:88:6d:83:8e:14:d4:19:9c:f9:90:a9:60:
32:32:07:50:39:d3:ec:d4:a3:7d:04:03:ec:54:cd:
f2:14:d0:14:d0:b4:fc:e1:a4:9d:cf:71:d3:be:53:
d2:1c:c7:da:52:ba:32:d5:9e:4c:74:72:11:1d:26:
1f:b6:a8:ce:b8:6f:11:b4:06:da:60:a5:45:bf:2e:
ac:f3:b1:ee:9d:36:37:cc:01:77:2f:55:76:39:d8:
49:68:8e:1c:95:a3:a3:88:68:a9:e6:10:00:4a:4f:
06:76:e6:f0:db:12:e4:44:99:d6:86:49:af:1d:48:
6c:7f:a9:ca:6e:38:73:dc:e5:a0:45:ef:39:00:4f:
58:18:c2:47:7d:83:78:13:8e:b7:a6:a8:4a:f0:c8:
b6:b3:6a:86:80:d7:71:ac:04:33:68:ae:59:4c:9c:
51:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:22:C9:85:59:48:D9:5E:72:39:D2:6B:73:8F:06:A7:81:EE:D6:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/d6e2d374-2982-35ab-9281-5193fb690ae9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/bb49c202-f644-4fa6-8a36-084312761f72.crl
X509v3 Authority Key Identifier:
keyid:CF:B3:27:7C:51:09:97:90:36:B3:FB:CF:B2:8C:86:C0:AB:F0:6B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72.cer
sbgp-ipAddrBlock: critical
IPv4:
172.98.208.0/24
172.98.214.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:f9:de:9c:e9:13:1a:df:3a:ee:df:76:8b:0f:b5:c6:45:34:
2c:b2:70:52:cb:5d:fa:13:05:85:93:42:f7:65:fb:5a:c7:ab:
45:91:5d:2c:d9:53:1a:87:be:47:38:49:78:ee:35:d4:06:d8:
1e:9b:d1:8e:f3:fe:30:8d:f7:b3:92:4c:6f:3d:f5:83:a2:6c:
1a:89:8b:6b:47:a2:04:2e:6f:be:75:7f:7e:d1:47:7d:54:4f:
79:ec:fd:dc:85:b4:40:da:a3:4e:7f:ad:82:2d:7b:a2:5a:0f:
16:c6:ff:13:eb:d0:f7:79:06:4c:5b:2c:38:26:65:aa:6f:86:
56:f7:b0:38:e2:49:3d:b9:5b:bd:2d:64:51:39:e7:26:0a:2f:
81:c1:dc:cf:d4:d7:c4:74:f7:c3:27:d7:52:07:f1:5a:6c:70:
89:71:f4:6b:02:8f:db:9b:af:28:1d:e3:71:3d:da:5b:2d:a1:
c9:51:b8:14:03:46:9a:59:c7:6a:8b:d2:7a:73:c0:3e:56:4b:
5a:2d:ba:9e:ba:1d:aa:4e:6c:b3:c7:b6:e4:c0:84:8a:ed:34:
05:11:e0:10:5e:cc:69:ab:92:f1:87:db:ce:aa:29:13:b3:a9:
2c:52:05:92:00:f7:79:ed:5d:cd:4d:36:be:25:04:1a:5b:c2:
5e:a3:bb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:09:35 2026 by rpki-client