
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f8942720-130a-31b6-8fc0-d586e4dff4a1.roa
File: f8942720-130a-31b6-8fc0-d586e4dff4a1.roa (raw, json)
Hash identifier: GlYdIOxd5jihLCX1MyU1E7JfdThBX6Qlz5QKL2Nn2ec=
Subject key identifier: D6:66:88:E3:BD:8D:AB:79:D8:78:82:D9:9E:E8:86:FE:21:14:F3:22
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584F497F0BB21ED968B4141CA3E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f8942720-130a-31b6-8fc0-d586e4dff4a1.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 6167
IP address blocks: 174.220.0.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 07 Oct 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7f:0b:b2:1e:d9:68:b4:14:1c:a3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=efc394e7-56d2-44c8-a4e2-3ad0bb7218f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e2:26:36:93:02:eb:8f:43:36:6e:98:65:9b:
8a:09:bb:a6:1d:c0:a6:83:90:5e:15:84:41:6d:ca:
f6:b6:0d:cf:12:41:38:67:cf:52:a8:fa:81:94:61:
0d:ef:7d:95:07:e7:b3:34:a5:66:4f:73:5b:f9:81:
fa:6b:fd:9d:5b:8e:1e:f3:6a:80:c5:b1:f2:b6:1d:
6e:16:1e:06:e4:34:12:f7:d2:4d:9a:23:4b:d5:9e:
ce:f3:3d:94:b5:15:c3:97:00:5c:27:28:6c:7d:53:
15:ff:f6:bb:43:c4:6d:35:d5:65:80:3f:52:a6:3d:
77:95:cd:79:92:1b:28:2d:1e:ea:58:06:9a:0c:e0:
e4:f7:e9:b7:3f:12:87:a4:50:1a:91:5b:3f:b6:f3:
54:32:36:6e:6b:56:6b:9d:9b:a9:fd:82:07:c3:76:
05:b6:f0:b8:b4:28:69:66:aa:fa:b2:0c:38:a9:58:
ec:fd:94:83:08:f6:e6:f9:ee:30:ad:c8:7c:d9:35:
11:f9:af:4a:ba:59:3c:22:20:e7:42:8f:8a:09:51:
18:5c:12:d8:14:20:a9:05:34:5c:c1:49:4e:4b:be:
ae:2b:8b:bb:98:bf:07:34:3e:d8:79:46:59:59:b2:
31:07:e3:fa:28:1c:18:82:b0:19:67:53:ba:1c:b8:
aa:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:66:88:E3:BD:8D:AB:79:D8:78:82:D9:9E:E8:86:FE:21:14:F3:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f8942720-130a-31b6-8fc0-d586e4dff4a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.220.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:41:5f:e3:1f:ba:ac:19:59:83:3a:8a:f8:30:5e:db:5a:fb:
82:43:45:95:c7:90:22:06:d7:89:fc:93:aa:ee:da:16:98:6d:
a3:23:d6:40:69:ae:9e:63:4a:4b:2b:4b:42:a4:81:80:33:2f:
68:af:ae:f8:52:11:7f:93:bd:85:70:e8:49:43:67:cc:71:ca:
c4:ab:cc:c7:ae:7d:ea:1a:1f:68:81:ec:56:05:c9:f5:eb:29:
a4:0e:27:4a:fa:37:2f:33:5d:fb:4a:6a:6b:45:34:44:bf:7b:
65:cb:01:cd:6f:4f:c9:07:71:07:2d:59:1f:e6:52:8d:0e:50:
64:12:1e:6a:8f:e9:17:cd:8f:c7:86:68:e3:9b:ea:90:24:53:
45:06:ce:5e:39:c6:f9:ee:5d:c9:8d:71:0c:7f:e5:e8:9c:16:
ae:2d:e1:af:4d:07:62:f4:aa:31:d5:ef:98:23:ea:01:35:18:
58:4a:ed:fc:1d:86:8e:52:81:ee:da:0d:91:7b:ac:18:7a:94:
31:7a:47:30:77:d4:be:f4:e2:94:4e:98:15:80:d4:de:c4:4d:
e1:c1:7e:73:5d:b0:f1:f5:4c:0c:0e:ab:46:59:2f:88:b8:8c:
61:e9:71:da:71:26:cf:d1:d9:1a:f0:31:af:e2:ce:4e:ff:48:
56:6c:96:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:34:43 2026 by rpki-client