
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6aac013f-1398-3ea0-811a-33991cd19bcd.roa
File: 6aac013f-1398-3ea0-811a-33991cd19bcd.roa (raw, json)
Hash identifier: 1HBoY+z53Qz/Hqj1yBMQxNPD+LnFzP2NSUTYpehLJIo=
Subject key identifier: 98:70:99:6C:A7:28:28:44:D2:15:4E:B4:68:82:FB:EE:00:A2:39:16
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584ECBD1CC244F417DC958357A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6aac013f-1398-3ea0-811a-33991cd19bcd.roa
Signing time: Tue 11 Aug 2026 01:00:11 +0000
ROA not before: Tue 11 Aug 2026 01:00:11 +0000
ROA not after: Mon 09 Nov 2026 02:00:11 +0000
asID: 22547
IP address blocks: 198.17.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 21 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:cb:d1:cc:24:4f:41:7d:c9:58:35:7a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Aug 11 01:00:11 2026 GMT
Not After : Nov 9 02:00:11 2026 GMT
Subject: CN=a1554993-19d7-4e4a-9b7e-b1fd2180de9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ac:ac:0b:d6:4d:b1:42:7d:f2:48:9d:57:5b:
81:ba:8a:b3:62:c6:76:7c:c5:ab:1f:9a:93:10:c9:
dc:ec:64:64:0f:e4:c1:9a:78:52:07:b1:6e:82:93:
c3:60:69:54:a0:b9:28:bf:ee:3f:24:60:06:ec:a3:
11:e1:1d:be:42:65:d5:f4:f1:26:f7:c7:06:b9:33:
8f:d1:9f:90:cb:a7:15:1b:4f:0c:85:07:7a:33:22:
7f:a4:49:e5:e1:fa:e3:77:cc:67:16:6d:33:ea:59:
55:39:e8:d8:bb:c5:85:e7:3c:c6:19:82:4e:53:e2:
2f:48:dd:47:d8:c1:0d:f6:c3:a3:a5:f1:92:6a:8e:
3c:82:8c:5e:8e:ac:ad:a8:1e:9b:18:4e:35:a6:f9:
d6:01:46:a2:2e:f6:65:b4:f5:5a:2a:3d:aa:a2:ba:
d7:de:c9:7d:b0:55:fc:37:e3:42:4a:16:18:86:99:
af:63:a1:a3:f1:80:cb:8a:2e:fe:d6:b8:f7:d8:5e:
9c:ae:f0:de:92:c2:cd:3a:ea:ce:17:3b:fb:80:e2:
d7:5c:cd:bb:f2:48:e1:f3:94:89:82:a1:13:13:01:
f8:1c:77:73:50:61:b0:f7:c5:c4:cb:2b:e9:6d:9b:
24:6f:38:d8:fa:36:b5:29:fa:20:86:2f:df:36:94:
42:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:70:99:6C:A7:28:28:44:D2:15:4E:B4:68:82:FB:EE:00:A2:39:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6aac013f-1398-3ea0-811a-33991cd19bcd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:06:ea:d4:28:0a:9b:ef:52:99:d0:ae:4e:04:72:26:75:3d:
fc:5c:1e:78:52:39:9b:b8:74:35:cf:2f:bd:56:9f:21:13:1a:
75:44:a9:9d:3e:70:ec:71:69:a5:72:c2:b9:61:dc:66:e1:36:
fc:37:7f:52:1a:96:89:4c:07:b7:0f:14:00:9c:5e:d6:f3:de:
46:46:07:88:9b:56:80:58:3d:39:4f:82:26:06:93:07:23:e3:
a5:e6:50:da:23:9f:9e:65:23:e4:a5:52:c2:34:a9:01:81:4e:
73:e1:2b:cb:b4:ab:8d:c0:03:f8:4d:c2:c3:ae:d0:fe:74:cf:
10:29:3e:50:75:96:f4:7f:23:20:29:45:f4:c7:79:69:3c:ea:
47:a8:fb:86:ad:09:db:7f:a4:2e:ee:e8:a1:a5:62:9a:85:f4:
6d:a8:25:27:65:3d:62:58:43:33:1c:a2:a1:cc:ae:53:b3:ce:
33:a6:6b:fe:9d:09:c7:ff:43:1f:0a:58:a3:85:ea:bf:ca:ef:
61:df:56:be:9f:12:6d:cd:b4:4f:ed:7c:26:ef:40:a7:d3:c9:
40:b8:17:45:7a:1a:70:2f:09:1b:c4:73:79:2e:40:0b:66:aa:
e4:5e:c0:d5:fa:45:42:5b:cc:5a:53:3e:79:e6:35:a6:e3:6f:
89:a2:f8:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0cwkT0F9yVg1eoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk
YTE1NTQ5OTMtMTlkNy00ZTRhLTliN2UtYjFmZDIxODBkZTlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaysC9ZNsUJ98kidV1uBuoqzYsZ2fMWrH5qT
EMnc7GRkD+TBmnhSB7FugpPDYGlUoLkov+4/JGAG7KMR4R2+QmXV9PEm98cGuTOP
0Z+Qy6cVG08MhQd6MyJ/pEnl4frjd8xnFm0z6llVOejYu8WF5zzGGYJOU+IvSN1H
2MEN9sOjpfGSao48goxejqytqB6bGE41pvnWAUaiLvZltPVaKj2qorrX3sl9sFX8
N+NCShYYhpmvY6Gj8YDLii7+1rj32F6crvDeksLNOurOFzv7gOLXXM278kjh85SJ
gqETEwH4HHdzUGGw98XEyyvpbZskbzjY+ja1Kfoghi/fNpRCzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJhwmWynKChE0hVOtGiC++4AojkWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNmFhYzAxM2YtMTM5OC0z
ZWEwLTgxMWEtMzM5OTFjZDE5YmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhHQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACMG6tQoCpvvUpnQrk4EciZ1PfxcHnhSOZu4dDXPL71WnyETGnVEqZ0+
cOxxaaVywrlh3GbhNvw3f1IalolMB7cPFACcXtbz3kZGB4ibVoBYPTlPgiYGkwcj
46XmUNojn55lI+SlUsI0qQGBTnPhK8u0q43AA/hNwsOu0P50zxApPlB1lvR/IyAp
RfTHeWk86keo+4atCdt/pC7u6KGlYpqF9G2oJSdlPWJYQzMcoqHMrlOzzjOma/6d
Ccf/Qx8KWKOF6r/K72HfVr6fEm3NtE/tfCbvQKfTyUC4F0V6GnAvCRvEc3kuQAtm
quRewNX6RUJbzFpTPnnmNabjb4mi+Cg=
-----END CERTIFICATE-----
Generated at Wed Aug 19 20:26:06 2026 by rpki-client