
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b0298673-91ad-3783-807b-50e203722d8e.roa
File: b0298673-91ad-3783-807b-50e203722d8e.roa (raw, json)
Hash identifier: OB87q/l2yjji0+7OdsoSrEuDRk7jXRzB5kdbDSHjQNY=
Subject key identifier: 92:96:DC:AC:01:C2:AF:8C:78:50:56:95:03:E8:0B:0D:43:E0:88:6A
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584EE329CE4BC139E21C1D005F00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b0298673-91ad-3783-807b-50e203722d8e.roa
Signing time: Wed 19 Aug 2026 09:41:14 +0000
ROA not before: Wed 19 Aug 2026 09:41:14 +0000
ROA not after: Tue 17 Nov 2026 10:41:14 +0000
asID: 152179
IP address blocks: 69.33.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 27 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e3:29:ce:4b:c1:39:e2:1c:1d:00:5f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Aug 19 09:41:14 2026 GMT
Not After : Nov 17 10:41:14 2026 GMT
Subject: CN=1b9c4fdd-cf08-44a0-a4f0-ff279a269c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:14:08:71:aa:c1:f4:e0:d7:52:23:6b:61:59:
34:15:15:96:53:30:11:79:fe:59:00:96:e5:7d:2f:
5a:a3:05:c3:45:af:a0:df:17:a2:98:0a:41:15:a1:
ca:20:67:5a:b5:a7:39:0c:32:92:23:1a:c5:b3:28:
83:24:28:72:88:c6:de:fd:25:b8:cc:9f:4b:7a:2a:
e8:78:e2:3a:bd:d0:fc:af:88:c1:06:97:c1:34:00:
51:fb:46:87:44:ef:7c:0b:4a:56:12:07:69:17:68:
ba:a8:7c:a7:5e:db:59:c6:6a:fb:4b:84:e0:01:6c:
38:a7:60:41:05:8c:f1:e5:b0:d5:a5:fc:ba:15:bc:
9c:71:ed:43:7e:8e:93:21:e6:eb:51:59:e8:d1:00:
2a:21:59:49:08:d0:1c:97:04:3a:6e:d0:57:c0:0f:
3c:e2:3b:41:70:6c:60:95:ba:93:92:28:9f:25:7c:
0d:4f:dd:92:c7:1a:51:1b:17:0a:82:a8:14:d9:02:
76:84:ab:1e:42:cf:09:5e:f2:29:11:b9:4c:f7:d0:
7e:11:05:3e:db:dd:76:54:e5:04:28:d7:f1:a5:ad:
2c:b9:a1:8c:31:e7:2e:ff:01:fa:4e:c6:6c:e2:b6:
3c:3b:91:ae:12:fd:e2:63:a6:fe:0d:8b:77:6d:a9:
0b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:96:DC:AC:01:C2:AF:8C:78:50:56:95:03:E8:0B:0D:43:E0:88:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b0298673-91ad-3783-807b-50e203722d8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
69.33.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:38:85:7b:c7:25:f8:31:ec:b8:52:ce:71:05:9d:19:ac:17:
86:c1:17:19:18:2b:62:4f:99:bd:54:8c:6d:38:e2:5f:81:1b:
cf:ff:20:2b:dd:75:29:27:66:51:5e:e6:86:a2:77:da:bd:75:
4c:6e:cc:a5:1b:1f:16:0f:c7:c4:d8:53:a1:c8:e3:50:1a:cf:
ee:e7:f1:a2:2b:98:02:0c:bf:e8:d4:1a:47:28:02:e6:e6:99:
45:30:05:8a:66:47:d4:70:91:f9:5b:fe:ef:18:27:44:a8:58:
d6:ec:e8:90:e9:19:cc:24:6e:f2:b7:39:35:9b:d1:c1:54:e1:
f3:a4:ff:5b:84:35:2c:ad:be:3b:61:3d:53:60:f4:7c:8d:b4:
4c:18:85:45:9c:5e:57:64:21:f7:a2:63:27:38:a5:fe:52:cf:
4e:f0:f2:ef:78:ab:7d:95:d2:2d:4d:3f:a2:c6:f3:68:01:e3:
5d:cc:bf:e3:0b:04:b9:45:ba:05:bf:32:9a:c3:67:88:41:93:
98:8a:49:ff:97:f7:31:9a:1b:2e:2e:c5:b5:cd:6f:eb:15:b6:
8d:fc:7a:af:b8:bb:7c:76:38:be:40:89:47:0f:a2:38:31:5f:
99:42:ad:22:96:56:9d:82:cf:e2:ea:ff:ae:0a:01:f0:55:0f:
39:f5:ca:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 08:06:00 2026 by rpki-client