
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4215a995-444c-37ec-bc2e-76323daf0002.roa
File: 4215a995-444c-37ec-bc2e-76323daf0002.roa (raw, json)
Hash identifier: rgrIRhaxRZ7ksvo43yt17Q/MZJecaE90c4AWmy2BE90=
Subject key identifier: 21:CE:89:79:67:75:07:E1:E5:08:A4:E5:5B:EB:77:FF:69:9C:38:2C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584B95AA939A37B23AAD5BC0B580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4215a995-444c-37ec-bc2e-76323daf0002.roa
Signing time: Mon 20 Oct 2025 13:00:38 +0000
ROA not before: Mon 20 Oct 2025 13:00:38 +0000
ROA not after: Sun 18 Jan 2026 14:00:38 +0000
asID: 33668
IP address blocks: 98.243.36.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:95:aa:93:9a:37:b2:3a:ad:5b:c0:b5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Oct 20 13:00:38 2025 GMT
Not After : Jan 18 14:00:38 2026 GMT
Subject: CN=84bdd358-7bf6-4003-a1a9-d1c806556c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f2:01:c3:9e:74:5b:de:be:59:22:f0:b2:be:
a3:5d:37:34:e0:5f:88:f2:a2:fe:6f:43:a0:b4:3c:
14:91:58:b4:7e:34:45:d8:83:ea:6f:72:c9:fd:5a:
21:6f:33:94:51:26:fa:5b:d6:b4:1f:4f:82:2a:26:
0d:9e:57:87:74:95:bb:c4:70:d4:dc:0d:bd:79:98:
42:84:d5:a4:38:ee:09:11:b6:92:30:a6:ec:a7:e2:
25:09:d3:9e:b3:0d:91:d0:6e:e6:9f:a1:68:64:e9:
27:b6:2b:d1:e1:54:8e:05:36:c8:63:23:9d:49:b6:
91:00:ca:38:ee:ed:3b:13:39:a7:0e:69:1d:f8:fb:
0f:c3:80:82:72:ef:27:8b:27:6b:40:37:4d:39:91:
34:6a:4c:bc:f9:3d:e7:9f:16:1f:6c:7b:04:71:60:
30:ac:ba:b2:55:e2:bf:ae:97:ab:09:ea:65:0c:9c:
25:68:17:52:40:48:a1:ed:e9:4b:19:40:f2:06:b4:
c7:17:b9:11:88:3b:05:f2:5e:ce:fa:97:fd:a4:fe:
ce:b4:31:d8:01:70:66:0f:86:88:ad:71:b8:a8:4b:
b3:0b:26:f3:05:3f:ea:d3:d2:59:05:0c:94:bf:80:
65:01:cc:69:75:17:d8:17:e8:78:96:5d:1e:c1:b9:
99:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CE:89:79:67:75:07:E1:E5:08:A4:E5:5B:EB:77:FF:69:9C:38:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4215a995-444c-37ec-bc2e-76323daf0002.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.243.36.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
dd:97:9b:23:1e:59:d4:66:fb:83:c1:38:59:44:3f:ec:92:ae:
8c:4f:bf:dd:7c:41:42:f3:91:e2:b6:54:01:82:51:ce:6e:1c:
42:84:3c:a5:4d:39:f5:1b:d5:76:77:16:93:6a:f1:55:fb:bd:
36:66:89:2a:3d:14:22:82:d7:18:a2:a8:3d:97:da:a0:0c:1f:
19:9a:7d:f2:ad:ac:6d:ae:35:fb:27:d2:1e:5e:d5:13:20:1b:
2f:e8:26:fd:a7:e7:48:e7:41:e1:02:bd:0b:79:5f:80:3f:88:
d9:db:eb:80:aa:59:4d:3a:fd:c2:3e:1f:64:e8:14:80:40:7f:
1f:8b:ee:f3:e4:99:c7:4b:4f:aa:76:c2:29:2d:e0:57:aa:c3:
27:9a:d3:e3:e8:4e:73:f6:f7:c7:7e:20:c9:00:cc:14:d8:58:
79:f8:bf:f3:2c:29:04:e7:b3:0a:28:25:83:b8:a0:54:4c:08:
2c:59:cc:99:bb:83:40:f9:da:05:b8:f2:d0:df:62:ef:e8:bd:
1e:8a:7c:43:9f:d8:7e:dd:05:82:7d:1b:ff:41:bb:2c:47:4d:
1b:7d:62:07:77:33:1f:ab:1c:6c:19:ec:59:a5:4c:50:ce:41:
b7:bb:1c:80:c6:2e:85:e1:27:a4:06:65:8e:57:02:fa:01:ee:
98:3a:4b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:51:19 2025 by rpki-client