
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a/991eca60-b420-37c2-92a4-3a053c9970bb.roa
File: 991eca60-b420-37c2-92a4-3a053c9970bb.roa (raw, json)
Hash identifier: zMwz5A2utZi1kn+2UHCDjIASNKsYofxiKq0DkmEx/50=
Subject key identifier: D9:8C:06:E5:FF:D2:BF:73:C6:06:0B:58:33:5F:42:D5:DC:DA:53:22
Certificate issuer: /CN=d06852c4-a6c0-43d5-ba94-22fab637697a
Certificate serial: 010D0C9F4328584EA8EC5002AF1C91DBD04B3900
Authority key identifier: 30:01:74:AA:E6:45:3E:F4:B4:CD:2F:99:D7:6A:DE:37:8D:43:11:D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a/991eca60-b420-37c2-92a4-3a053c9970bb.roa
Signing time: Wed 29 Jul 2026 13:00:12 +0000
ROA not before: Wed 29 Jul 2026 13:00:12 +0000
ROA not after: Tue 27 Oct 2026 13:00:12 +0000
asID: 7029
IP address blocks: 206.72.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a/d06852c4-a6c0-43d5-ba94-22fab637697a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a/d06852c4-a6c0-43d5-ba94-22fab637697a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 02 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a8:ec:50:02:af:1c:91:db:d0:4b:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d06852c4-a6c0-43d5-ba94-22fab637697a
Validity
Not Before: Jul 29 13:00:12 2026 GMT
Not After : Oct 27 13:00:12 2026 GMT
Subject: CN=4f4712d7-ef06-4bc7-809f-1a750506ec0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:48:57:bb:f3:68:fd:35:a7:ff:22:4f:bc:3a:
5a:e3:90:73:df:98:e3:81:06:34:26:17:9a:50:1b:
8b:90:76:b2:fa:89:43:2e:27:a2:f5:f0:76:2a:f4:
06:4b:1c:fa:54:7d:47:89:80:53:1a:fd:ec:61:bb:
42:17:94:99:68:b6:28:e0:8d:ec:58:10:36:63:b5:
1d:45:f9:21:fe:55:31:be:03:d4:37:85:2f:f8:7d:
08:f9:bf:58:3c:df:e2:96:0a:6b:84:10:cd:29:e4:
d3:c6:8d:d1:d9:9c:2c:a1:b4:ad:bf:6d:46:58:b1:
51:4a:34:ad:55:78:2e:8e:bd:4c:17:04:57:aa:d9:
bd:d8:02:33:a5:80:63:65:52:98:d2:5e:e4:35:b9:
26:db:09:cc:49:08:c1:34:51:98:e1:37:e6:7a:2d:
a7:cf:60:7d:68:70:2f:3a:c9:23:e6:55:7c:41:cb:
56:40:7d:62:48:73:4d:46:0a:c0:26:1e:ff:27:6b:
59:8b:c9:3a:b9:ba:63:68:5f:74:41:9f:98:3f:f1:
8c:c5:3d:26:9b:32:4a:d3:03:8b:e1:c9:9c:bd:c7:
c6:0c:65:eb:54:e4:ca:85:a7:c6:26:21:3d:5c:bf:
45:51:cc:15:25:8c:6a:46:4f:6b:20:72:bf:a6:68:
4c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8C:06:E5:FF:D2:BF:73:C6:06:0B:58:33:5F:42:D5:DC:DA:53:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a/991eca60-b420-37c2-92a4-3a053c9970bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a/d06852c4-a6c0-43d5-ba94-22fab637697a.crl
X509v3 Authority Key Identifier:
keyid:30:01:74:AA:E6:45:3E:F4:B4:CD:2F:99:D7:6A:DE:37:8D:43:11:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a.cer
sbgp-ipAddrBlock: critical
IPv4:
206.72.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cb:70:08:3a:10:01:88:ef:12:36:d0:2c:1f:b2:34:04:d5:34:
86:d4:a9:6c:01:c2:c6:6a:c4:7c:2c:df:0b:c6:15:ba:f2:35:
ee:29:22:11:24:75:d6:30:a2:fb:a2:3f:64:aa:75:01:eb:fc:
5b:73:60:b5:6a:36:3c:94:d3:7f:ca:43:f4:05:bc:b1:2f:09:
af:27:b3:9d:1c:9e:3b:e8:d5:27:11:99:15:48:be:72:ea:86:
00:ce:69:5a:11:e4:41:69:fe:cc:d5:7e:db:48:7d:70:b2:b6:
74:f4:43:fd:f0:50:89:5b:b3:64:96:de:91:ba:8b:34:12:9f:
f7:04:00:9a:5d:ae:2f:d7:0c:8f:3a:13:bd:98:35:25:e9:2f:
14:02:94:f3:e0:f7:f2:1f:5c:fc:de:3d:b0:59:5b:70:ec:6b:
1a:1c:7b:0f:c0:82:d9:da:8c:07:f5:3c:de:ff:0c:ba:95:3d:
15:d9:ec:25:6d:29:c3:52:26:f9:5b:e7:61:cd:24:16:20:a0:
46:5e:87:eb:10:ca:54:98:3d:9d:69:d6:27:bf:03:61:3d:94:
82:f9:b2:5e:23:74:2c:84:37:00:3b:45:78:4f:3a:41:3a:d9:
47:34:d9:ab:e1:1c:d1:84:3f:38:d3:2f:2e:ff:7b:b0:dc:28:
58:91:68:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:42:49 2026 by rpki-client