
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/21bf5113-e55b-37f7-adc9-8cd87af0160b.roa
File: 21bf5113-e55b-37f7-adc9-8cd87af0160b.roa (raw, json)
Hash identifier: zyKrJlbWM30RhfYWUdVG1M7MFSmB5B37THwBN5AYfOo=
Subject key identifier: 0D:6D:F7:36:12:44:12:E8:12:1B:36:54:50:79:B5:82:A0:14:24:72
Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial: 010D0C9F4328584E6B0A1957840DC5A4DF490900
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/21bf5113-e55b-37f7-adc9-8cd87af0160b.roa
Signing time: Tue 07 Jul 2026 09:00:12 +0000
ROA not before: Tue 07 Jul 2026 09:00:12 +0000
ROA not after: Mon 05 Oct 2026 09:00:12 +0000
asID: 197537
IP address blocks: 198.1.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Jul 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:6b:0a:19:57:84:0d:c5:a4:df:49:09:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Validity
Not Before: Jul 7 09:00:12 2026 GMT
Not After : Oct 5 09:00:12 2026 GMT
Subject: CN=20820ab1-9236-4144-a572-26d0d758f3d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e9:02:76:47:6c:17:e1:70:5b:3d:a7:56:39:
92:19:f1:bc:7d:d6:ee:67:66:25:03:be:0a:93:69:
3f:79:47:7e:9f:54:86:62:f7:13:65:67:e0:af:73:
8e:b8:38:ca:73:a8:a4:cc:a7:10:51:f8:b1:a0:31:
ec:a4:8c:54:a0:52:67:1d:b0:d4:28:a6:00:27:a1:
a5:bb:bc:eb:1a:59:52:98:e5:90:f6:85:9f:38:6e:
49:81:6b:cc:f6:da:0d:93:f4:cb:e4:12:2d:73:e9:
cf:60:76:07:e3:dd:63:cc:3c:42:30:39:70:e4:ad:
66:09:6c:2e:52:de:4a:66:30:1b:8c:6e:73:f6:f1:
37:ce:eb:63:ba:e1:69:8d:8d:ef:9f:45:f3:dc:cc:
f9:32:c2:ea:46:21:d4:3d:1e:aa:c0:73:d8:1e:ea:
fd:72:2c:b9:6f:dc:48:dc:af:0c:f9:40:89:a6:7a:
1c:82:cb:6f:b3:96:ba:24:63:3c:6e:bf:e0:83:c7:
5d:e7:c5:24:cf:ca:4e:2a:33:be:a9:44:ae:8c:3f:
e5:f1:f1:34:45:e3:d0:c3:a6:0c:df:61:84:a6:a2:
df:16:7f:da:25:42:19:91:bb:c5:e1:ba:aa:96:85:
47:5e:f0:49:71:b6:0e:b8:f3:13:4d:11:82:4a:a2:
aa:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6D:F7:36:12:44:12:E8:12:1B:36:54:50:79:B5:82:A0:14:24:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/21bf5113-e55b-37f7-adc9-8cd87af0160b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
X509v3 Authority Key Identifier:
keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
sbgp-ipAddrBlock: critical
IPv4:
198.1.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:2c:22:f5:52:d1:bc:1d:15:15:79:79:b0:ed:bb:da:7d:3f:
88:e5:6b:7f:2f:74:7b:ca:0f:66:7d:bb:21:dc:ba:24:48:2c:
b2:4b:ad:27:5f:dd:fc:fa:2a:9e:75:fd:03:c0:87:31:db:06:
37:d7:ed:9d:74:e0:29:87:b9:89:a2:ce:7c:73:28:25:68:7b:
25:0e:c9:46:30:f3:af:d3:8d:4c:77:f2:ef:b0:ab:cd:40:39:
1a:13:cc:9b:cd:31:1e:3d:e9:1c:60:0e:aa:95:be:bf:3d:67:
17:70:04:30:7f:df:8b:44:4a:a8:11:52:88:48:91:3b:84:23:
52:4c:cb:6c:be:80:c8:85:a5:50:ba:6d:b5:26:3d:aa:95:5b:
e6:55:3a:da:8c:6e:db:31:93:dc:bf:62:e3:8c:e3:36:91:5d:
46:c3:53:28:5f:c3:ae:0e:32:e0:ab:6a:89:70:ab:b9:38:f2:
b1:cd:71:01:a4:a8:88:07:58:e9:67:e3:0d:ce:f9:34:17:8f:
ee:e0:df:b6:7b:a6:7b:85:95:b4:67:61:ad:a9:a0:f9:b0:72:
43:4e:bf:2b:1f:2e:49:dc:a6:c9:93:a3:1a:f6:85:ad:91:88:
48:38:e5:23:c2:18:1f:98:dd:13:20:81:0f:a9:3d:3e:2e:e0:
ca:56:e5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:16:24 2026 by rpki-client