
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/24b4de99-48a6-3e76-8806-19c47972f97e.roa
File: 24b4de99-48a6-3e76-8806-19c47972f97e.roa (raw, json)
Hash identifier: tpbQXoOjJ1mp+ttmXRRb3zZQyNem0rPAsb7QcxTp3aw=
Subject key identifier: 3B:88:B1:69:3A:A7:51:7F:1B:6F:80:84:5C:16:13:4C:F7:BF:E9:DA
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584EAF23504227EEDE9B1683FAB0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/24b4de99-48a6-3e76-8806-19c47972f97e.roa
Signing time: Fri 31 Jul 2026 18:26:08 +0000
ROA not before: Fri 31 Jul 2026 18:26:08 +0000
ROA not after: Thu 29 Oct 2026 18:26:08 +0000
asID: 394165
IP address blocks: 198.85.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 24 Aug 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:af:23:50:42:27:ee:de:9b:16:83:fa:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Jul 31 18:26:08 2026 GMT
Not After : Oct 29 18:26:08 2026 GMT
Subject: CN=cba4a2ed-86fc-4882-b273-f98dbb032167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:50:a4:e8:e3:e0:9f:ca:03:9b:48:5a:4c:6b:
40:86:f3:b2:df:6f:70:5e:e8:9c:eb:c5:ae:e8:fb:
e5:9d:cf:d9:d9:6c:72:fc:a1:3c:a2:d2:0d:f4:f5:
0d:a1:ef:fd:6b:d9:bd:3b:0b:2a:a1:15:58:da:0e:
43:75:28:89:ab:ef:58:16:b2:b8:3f:ac:f4:da:a2:
5b:3f:4b:22:52:ee:c1:8f:1a:87:3f:e8:33:ea:9d:
01:9c:6d:cd:cd:6d:5f:d1:ae:08:70:b0:bc:f1:d7:
78:68:91:cf:90:0d:28:8c:26:09:89:ae:c0:33:9f:
5e:05:17:74:46:5e:dc:3a:48:15:2d:da:a4:39:0b:
0e:96:d3:b3:e8:d6:3b:d6:f3:d5:e9:38:a1:af:51:
ed:7e:5a:ec:2a:f8:93:d9:37:84:72:c0:f9:d3:aa:
c7:f7:f1:54:b8:d0:75:c3:54:7c:c7:5b:90:5d:30:
39:eb:14:21:62:bd:ac:5a:bf:65:0f:c4:80:8e:0a:
ee:f8:55:91:a0:a7:0c:e7:ac:a4:96:3d:94:e2:c9:
e3:c9:8c:54:70:39:46:0d:02:0b:73:e7:a4:91:87:
6d:8d:89:77:4d:64:27:3c:41:f4:0b:7b:5d:d4:9f:
56:9f:3e:13:b5:1b:b0:f7:eb:7e:32:eb:58:06:8c:
eb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:88:B1:69:3A:A7:51:7F:1B:6F:80:84:5C:16:13:4C:F7:BF:E9:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/24b4de99-48a6-3e76-8806-19c47972f97e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
198.85.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:e6:ee:71:33:9c:85:8a:f7:9a:d5:10:95:68:20:6d:cf:81:
08:1e:f6:47:9a:1a:75:58:2f:08:6b:92:76:6d:b8:96:5a:d3:
c6:dc:59:44:65:89:66:65:32:0a:14:1a:78:53:24:84:c8:b9:
bd:f2:99:70:13:da:df:78:b6:eb:6f:a6:95:2e:30:a1:9a:aa:
06:4d:8c:10:9a:38:8c:44:24:b5:91:f2:14:81:a9:e8:75:1f:
a1:31:7d:22:b6:cc:60:65:c6:b5:f6:8c:1f:8e:e8:a5:8b:40:
26:08:4c:13:47:16:1e:b1:5e:7f:a7:37:41:80:fa:a3:0a:55:
36:55:71:01:aa:22:b2:1d:c3:30:d2:77:75:99:da:d2:14:63:
8b:6a:53:81:9c:80:f3:08:34:12:4c:ea:6c:0e:b2:ec:78:3c:
42:3e:86:b6:56:3f:44:53:6e:cf:cc:62:d2:65:ed:f3:cc:20:
f0:c0:06:2f:5f:d8:bf:2b:c0:2c:a9:6b:d0:6f:93:56:0f:1c:
f0:75:ca:ce:90:37:3c:81:21:3c:45:da:29:e8:5a:7a:e6:73:
0b:f8:4d:35:3f:ea:cb:93:3d:d8:e2:9b:fe:b9:b6:79:3f:cd:
28:5f:c1:10:80:0b:39:fe:ee:40:ca:50:c8:98:e7:1c:be:a4:
25:b5:30:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:23:27 2026 by rpki-client