
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/4689ed48-7376-3a8a-892f-5bc4880d4d87.roa
File: 4689ed48-7376-3a8a-892f-5bc4880d4d87.roa (raw, json)
Hash identifier: oOejkiUDfScI/yIrmfrWtqA7JK5GqEI8RzhRHKx8T60=
Subject key identifier: C9:86:17:4F:E2:C1:E1:12:F6:DC:C5:B2:19:6F:E5:EE:AD:11:37:38
Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial: 010D0C9F4328584E9A7FE86EAED9052F8E35AC80
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/4689ed48-7376-3a8a-892f-5bc4880d4d87.roa
Signing time: Fri 24 Jul 2026 09:00:12 +0000
ROA not before: Fri 24 Jul 2026 09:00:12 +0000
ROA not after: Thu 22 Oct 2026 09:00:12 +0000
asID: 22516
IP address blocks: 198.1.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:9a:7f:e8:6e:ae:d9:05:2f:8e:35:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Validity
Not Before: Jul 24 09:00:12 2026 GMT
Not After : Oct 22 09:00:12 2026 GMT
Subject: CN=4455afc6-22e6-4d83-8fe1-2e6a18b68d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7d:4c:49:e2:6f:b4:b6:2e:7f:8f:f6:d3:08:
34:02:25:eb:e2:3a:73:41:1a:a8:b3:b9:7f:8c:5c:
68:24:34:d4:bf:55:75:c9:55:1b:58:b5:fe:37:d8:
0c:5e:9e:55:9f:43:a5:ef:c1:51:7d:d6:82:29:fe:
69:63:21:36:73:a8:3d:19:54:6e:93:33:91:fc:17:
b8:7a:1a:d1:ea:81:9e:38:81:cb:81:a8:f3:1b:c5:
ed:16:9b:20:51:92:ef:f5:ad:4b:65:59:89:f9:01:
1c:7b:5d:00:c3:bf:d6:4c:2c:32:c7:e8:4f:e2:b2:
60:4e:d9:68:aa:48:d0:1a:ea:dd:fb:2d:ce:bb:e4:
bf:ad:4d:7a:b9:af:3a:24:f6:01:f2:35:c0:cf:26:
20:1d:e0:18:c7:8c:de:e3:ed:4e:36:e4:f5:e9:d6:
68:df:e6:0e:08:2c:f5:62:00:d9:8c:26:46:5a:f9:
20:23:9e:25:26:2b:e4:3a:00:73:08:7d:90:a3:39:
86:07:49:02:5c:66:42:73:e5:16:4d:80:b1:ab:3c:
9e:89:a6:74:3f:38:14:a9:1d:70:35:62:21:cf:d9:
8b:50:cd:6e:36:83:c5:85:48:ab:70:da:0e:72:5b:
a4:3d:67:b6:b1:23:1a:4e:6b:f0:c8:8d:d6:2e:e7:
9f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:86:17:4F:E2:C1:E1:12:F6:DC:C5:B2:19:6F:E5:EE:AD:11:37:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/4689ed48-7376-3a8a-892f-5bc4880d4d87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
X509v3 Authority Key Identifier:
keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
sbgp-ipAddrBlock: critical
IPv4:
198.1.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:fa:d3:40:8c:3c:84:b4:b2:0a:ee:6a:cf:1c:21:82:81:dc:
fa:dd:c5:5b:0a:34:31:a7:c9:8f:71:41:f5:58:77:e8:6e:d2:
35:03:7d:91:27:aa:3d:77:b8:c9:7f:0e:d0:95:92:0b:d4:48:
1f:3e:01:7c:ae:42:f7:b2:1d:3d:8d:dc:1b:76:a7:59:7f:c3:
e7:c4:7b:c8:54:5f:f5:95:c1:27:0e:52:d3:9a:b1:f3:0f:ee:
ca:5c:25:29:1a:dc:28:ae:ea:da:f0:41:02:3d:14:5e:06:87:
c2:a8:06:b6:11:7b:2b:25:74:cc:3e:e5:d0:bf:8c:db:5f:4c:
c3:a1:da:99:a9:99:ad:30:43:31:cf:b5:9d:f4:02:f8:fb:b3:
03:d8:1b:5d:57:c6:ab:cd:ed:cf:05:8d:37:15:ac:86:f5:8e:
5f:99:01:3b:eb:6a:1f:97:f9:b5:2f:0c:db:15:63:6d:1c:66:
3a:70:3f:8c:39:b8:5f:6b:cc:03:5d:af:5e:a3:5b:ad:88:7a:
93:4c:58:35:9f:92:4d:a7:39:7b:f3:5e:75:f3:4f:5c:2f:32:
39:f4:04:6f:fe:d9:74:81:e6:91:fe:b4:e2:3f:5a:fd:9a:ec:
dd:f5:ea:bc:6b:1a:47:6e:23:6e:4b:86:7c:1e:65:8b:61:93:
ec:b5:19:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:37:37 2026 by rpki-client