
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a43f83c-7d38-3906-8cc3-280c41dc96ec.roa
File: 8a43f83c-7d38-3906-8cc3-280c41dc96ec.roa (raw, json)
Hash identifier: lj1FuQk/oIMFd3mRTKkJuAfBFBw7WXO86LoRCLTUcco=
Subject key identifier: E7:2F:34:D5:4A:B7:CE:2B:0B:F4:C5:9C:0A:59:3C:A7:DF:28:8A:C8
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584ED863FFA9C4DF0C19C70C8880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a43f83c-7d38-3906-8cc3-280c41dc96ec.roa
Signing time: Sat 15 Aug 2026 13:00:11 +0000
ROA not before: Sat 15 Aug 2026 13:00:11 +0000
ROA not after: Fri 13 Nov 2026 14:00:11 +0000
asID: 33668
IP address blocks: 98.224.152.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d8:63:ff:a9:c4:df:0c:19:c7:0c:88:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Aug 15 13:00:11 2026 GMT
Not After : Nov 13 14:00:11 2026 GMT
Subject: CN=c207af99-da3f-4249-96ff-9f3ee8b9fd22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fa:47:ee:03:fb:00:92:19:e8:44:cf:26:ab:
82:47:25:c1:de:a3:45:ea:e2:ce:5c:50:64:e7:78:
72:b4:04:0b:41:82:a0:88:f6:b4:a4:42:a7:c9:b3:
ef:20:c2:e4:81:b6:77:6a:a4:dd:e6:08:99:3f:58:
29:3c:a3:56:74:f6:2e:1d:08:8a:e3:42:cf:2a:af:
cd:03:a9:16:48:2c:48:ad:a4:c3:5e:2d:48:c8:ec:
c8:53:9b:eb:a0:ec:8a:c2:d8:40:ac:a2:fc:1a:fa:
d8:c2:da:ba:29:ab:ff:e2:89:38:01:36:c6:30:51:
76:e3:86:0d:09:85:36:dd:3a:62:ba:2c:5b:c3:9f:
32:7c:a5:02:00:75:44:4d:1e:52:cb:f4:58:12:5f:
33:f3:40:6e:bc:e7:d7:8f:27:1d:d0:e9:3e:52:2e:
4e:77:92:ae:59:e9:eb:7a:d9:d1:5e:52:66:44:52:
46:74:48:ad:b9:3f:55:82:c3:d5:ce:6f:ae:24:83:
1d:14:1f:78:fd:31:f6:ab:90:85:15:6d:f4:7d:74:
6a:49:7c:61:aa:5a:d4:8f:d9:bb:c7:3f:06:2c:4d:
38:1c:be:4d:9c:74:6c:2c:76:ea:2c:6d:b1:ef:0d:
47:6b:c2:07:da:c8:99:0a:be:70:a3:96:19:da:17:
61:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:2F:34:D5:4A:B7:CE:2B:0B:F4:C5:9C:0A:59:3C:A7:DF:28:8A:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a43f83c-7d38-3906-8cc3-280c41dc96ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.224.152.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:c9:3a:39:43:b4:0a:37:6e:f0:ed:3a:56:71:d9:03:cd:55:
c1:8c:0e:dc:21:53:ac:c9:53:73:db:be:c3:6b:9d:c8:58:cb:
08:e7:30:50:77:b2:ee:46:ac:9f:65:38:1f:0d:6a:d5:f7:96:
84:d9:d5:24:23:e2:79:5a:b4:df:ce:35:9a:76:fd:46:64:82:
57:d1:39:fa:8b:67:22:7d:16:e1:c5:5a:55:5a:0c:74:a7:20:
61:9b:19:5b:9c:2a:76:60:81:50:7f:cf:b9:e1:fe:80:3a:75:
1b:85:f8:c4:57:65:1b:3f:a4:4e:a8:a7:64:42:c8:e7:5d:b3:
88:70:3e:f6:3e:5b:53:9c:9a:8c:e1:4b:72:f1:4f:d0:cb:40:
17:bf:8a:de:51:8b:ce:88:78:b0:2a:2d:95:b7:3c:53:7c:a7:
8e:54:eb:64:fa:49:6b:5d:3c:53:8c:7a:aa:7a:ee:62:3c:4f:
f0:2d:3b:ff:6f:54:d3:31:f8:8a:fe:c0:e5:73:12:ad:71:1d:
7f:8a:a4:45:6b:7f:99:6d:ff:97:bc:97:92:c1:8d:fe:95:98:
45:fb:83:cb:58:19:2e:87:92:5a:82:8d:15:2a:07:21:e7:92:
27:de:e5:84:20:9b:97:a2:66:97:f9:98:ec:79:f1:87:cf:ef:
d6:ec:24:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:07:32 2026 by rpki-client