
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f7a5102-746c-3671-b7e7-dc953a36ce4a.roa
File: 0f7a5102-746c-3671-b7e7-dc953a36ce4a.roa (raw, json)
Hash identifier: 5ZlbPmcfmE0ma7dk5YXihYT7IFjA7Y2dZINgT5ESMuM=
Subject key identifier: 1E:52:15:4A:23:81:59:3F:C0:7A:CB:22:82:57:CD:B4:A6:61:2B:2A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F03A7E906D24E8EB4ABD35B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f7a5102-746c-3671-b7e7-dc953a36ce4a.roa
Signing time: Mon 31 Aug 2026 01:00:12 +0000
ROA not before: Mon 31 Aug 2026 01:00:12 +0000
ROA not after: Sun 29 Nov 2026 02:00:12 +0000
asID: 33659
IP address blocks: 98.221.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:03:a7:e9:06:d2:4e:8e:b4:ab:d3:5b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Aug 31 01:00:12 2026 GMT
Not After : Nov 29 02:00:12 2026 GMT
Subject: CN=8e0b17c0-1d9f-4cba-b87a-a2d3b1203a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8f:30:f3:14:d4:ce:ee:70:0c:2f:e2:fd:54:
fa:b5:bc:e4:92:0d:eb:03:a8:60:79:63:0d:79:e4:
aa:a8:b5:f3:4c:61:d7:64:76:82:3d:25:e8:41:2e:
fe:d0:5a:4f:a7:17:0e:f4:e6:0a:e2:a0:d6:ee:33:
ff:1a:fe:fe:b6:4d:67:cb:4e:1e:05:9c:11:42:65:
d1:c0:78:c9:b0:20:3e:4a:e6:f0:4e:51:40:66:d6:
da:1d:91:d2:d1:aa:9c:f7:5d:57:e3:ae:1f:9b:af:
66:fe:5d:ce:fa:d1:5e:91:54:92:5e:cc:66:32:27:
0f:58:60:0f:78:c0:3b:0d:e3:ce:c5:dd:4f:72:39:
90:a9:06:bc:06:47:77:e8:b4:4c:6a:7b:4a:8c:27:
7b:b6:a3:54:d7:9c:a6:b9:87:15:04:90:66:43:8e:
74:95:01:f3:5b:13:93:d8:de:27:f6:82:7f:d3:54:
5b:d3:1e:cc:de:89:27:e9:6e:9e:32:7d:92:3a:da:
d1:63:e2:a6:31:bc:c9:eb:c5:a2:b9:60:04:fa:92:
49:27:d0:fb:fa:eb:25:69:e5:fd:1e:06:74:7b:fb:
1c:c5:3d:9e:dc:60:da:4f:61:09:91:06:5f:54:9d:
a4:20:df:94:e2:e5:18:80:08:4a:16:80:62:f0:f0:
a0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:52:15:4A:23:81:59:3F:C0:7A:CB:22:82:57:CD:B4:A6:61:2B:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f7a5102-746c-3671-b7e7-dc953a36ce4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.221.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:66:d3:e2:dc:3d:b9:eb:88:6c:a9:da:e8:30:9f:d0:87:29:
bf:36:fa:0c:c3:3f:50:22:07:7d:6c:7f:9b:b3:da:3c:21:fd:
c7:a2:40:33:a5:92:cc:3f:7a:8f:f0:d6:bb:c9:d1:8a:8a:7f:
ad:61:49:55:70:6c:96:f5:0e:98:29:8d:f9:43:73:fe:65:82:
94:57:a1:ab:c1:ea:7b:f3:01:c3:bb:d9:c7:3e:59:b8:9f:7b:
00:d0:c7:5f:0e:ce:0c:9a:6c:a9:5d:90:a5:39:95:ca:f8:1c:
97:18:3d:0e:89:7b:25:18:cd:bc:9f:0f:63:c4:b5:4b:14:17:
d5:45:a1:12:dc:b5:0f:c8:6b:8a:77:eb:22:f7:2f:b6:15:4d:
79:b0:9e:e1:6b:8f:22:7e:36:8a:9a:ea:21:c4:10:5b:d8:df:
7b:41:ec:dc:3d:85:c6:e1:17:36:23:8c:09:d4:db:b4:58:ce:
49:77:6a:b6:23:8d:b7:4a:f8:73:4e:2d:5c:e7:4b:69:5e:c1:
82:d2:e1:2d:4c:73:03:d1:d7:62:60:da:92:f3:43:39:07:b5:
0d:b3:b8:59:ad:86:19:ce:60:45:e5:f4:22:02:10:6b:78:c8:
13:53:c8:9f:43:3b:24:25:3a:f7:04:bd:05:0d:0a:b4:77:0d:
b5:0b:63:03
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Dp+kG0k6OtKvTWwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk
OGUwYjE3YzAtMWQ5Zi00Y2JhLWI4N2EtYTJkM2IxMjAzYTM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxo8w8xTUzu5wDC/i/VT6tbzkkg3rA6hgeWMN
eeSqqLXzTGHXZHaCPSXoQS7+0FpPpxcO9OYK4qDW7jP/Gv7+tk1ny04eBZwRQmXR
wHjJsCA+SubwTlFAZtbaHZHS0aqc911X464fm69m/l3O+tFekVSSXsxmMicPWGAP
eMA7DePOxd1PcjmQqQa8Bkd36LRMantKjCd7tqNU15ymuYcVBJBmQ450lQHzWxOT
2N4n9oJ/01Rb0x7M3okn6W6eMn2SOtrRY+KmMbzJ68WiuWAE+pJJJ9D7+uslaeX9
HgZ0e/scxT2e3GDaT2EJkQZfVJ2kIN+U4uUYgAhKFoBi8PCgwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB5SFUojgVk/wHrLIoJXzbSmYSsqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGY3YTUxMDItNzQ2Yy0z
NjcxLWI3ZTctZGM5NTNhMzZjZTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYt3/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJVm0+LcPbnriGyp2ugwn9CHKb82+gzDP1AiB31sf5uz2jwh/ceiQDOl
ksw/eo/w1rvJ0YqKf61hSVVwbJb1DpgpjflDc/5lgpRXoavB6nvzAcO72cc+Wbif
ewDQx18OzgyabKldkKU5lcr4HJcYPQ6JeyUYzbyfD2PEtUsUF9VFoRLctQ/Ia4p3
6yL3L7YVTXmwnuFrjyJ+Noqa6iHEEFvY33tB7Nw9hcbhFzYjjAnU27RYzkl3arYj
jbdK+HNOLVznS2lewYLS4S1McwPR12Jg2pLzQzkHtQ2zuFmthhnOYEXl9CICEGt4
yBNTyJ9DOyQlOvcEvQUNCrR3DbULYwM=
-----END CERTIFICATE-----
Generated at Tue Sep 22 13:22:03 2026 by rpki-client