
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8deab83c-0aab-3da5-a7bd-803ee3363601.roa
File: 8deab83c-0aab-3da5-a7bd-803ee3363601.roa (raw, json)
Hash identifier: aoGJCebU+jeQiFdyN4cwX6/fq1lK6NQmoGQjWsCLDwU=
Subject key identifier: C0:A8:0B:95:EA:54:45:5C:5D:69:61:49:0B:5E:74:0E:FE:F4:9D:F4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584B95A94FB520959FE2B1BB99C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8deab83c-0aab-3da5-a7bd-803ee3363601.roa
Signing time: Mon 20 Oct 2025 13:00:38 +0000
ROA not before: Mon 20 Oct 2025 13:00:38 +0000
ROA not after: Sun 18 Jan 2026 14:00:38 +0000
asID: 33662
IP address blocks: 98.44.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:95:a9:4f:b5:20:95:9f:e2:b1:bb:99:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Oct 20 13:00:38 2025 GMT
Not After : Jan 18 14:00:38 2026 GMT
Subject: CN=56d6af9f-48e7-4c18-ab51-e64de4d11152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:31:42:d1:85:f1:9a:fd:21:36:a0:33:3e:87:
b3:29:1a:eb:ca:2e:ce:59:88:68:3f:01:e8:b6:9b:
5f:3a:f4:02:a3:74:9b:69:be:b6:8f:72:c2:73:6f:
8e:1c:59:6e:1b:8f:d0:33:54:bd:98:8c:cf:17:33:
65:09:be:5b:65:51:8b:bc:f6:b2:1c:36:d7:20:3c:
78:c7:9d:83:0e:7d:8e:00:61:1a:a7:6b:0c:b3:ed:
3b:07:4a:00:a4:90:59:c0:5f:8a:20:db:ee:34:04:
55:16:7b:23:42:eb:5d:c1:ed:bc:06:d8:6e:66:ba:
bc:dd:28:16:bc:71:1c:e5:d6:d8:75:df:55:30:0a:
8f:b0:88:51:de:43:fa:82:c4:f1:54:b0:55:d1:e6:
63:a9:7a:d9:57:7a:2a:c9:b3:74:86:d4:ab:24:32:
42:4e:c1:30:71:bd:91:82:c3:3a:bc:98:25:35:b0:
13:60:3b:c9:d1:61:42:c7:07:c5:f9:f5:9f:2b:37:
03:cb:57:41:21:23:0c:af:1e:61:80:17:38:74:e6:
cb:e4:94:02:94:a6:fe:5e:3e:15:4e:33:26:b1:4f:
69:25:b4:48:88:8b:76:5d:4d:91:6d:ac:15:23:3d:
36:46:92:b3:47:2b:9b:a2:64:0f:4f:41:18:2c:64:
1a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A8:0B:95:EA:54:45:5C:5D:69:61:49:0B:5E:74:0E:FE:F4:9D:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8deab83c-0aab-3da5-a7bd-803ee3363601.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.44.22.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:bd:40:d0:ae:3a:1c:99:94:6e:d7:47:80:a4:79:d3:49:92:
1d:f5:c5:c4:50:98:0a:c6:d4:fb:ac:6b:56:11:4c:51:c0:0f:
2e:c9:67:8d:15:34:7d:1d:7c:1e:2f:f3:11:98:d7:35:dc:96:
a7:da:f4:03:27:97:5f:5b:67:8a:7a:b8:a4:4d:e7:3f:cf:06:
62:7c:1b:15:22:0d:ee:4c:99:14:33:5d:f8:0c:32:9b:d7:f3:
c6:29:d3:80:fc:f8:28:55:16:07:56:88:cc:d3:48:59:fe:76:
19:f3:9b:1d:88:ca:2c:1f:7c:23:25:11:e8:41:c1:87:e5:65:
f2:4e:4e:b6:d3:aa:b7:6b:53:5e:cc:72:de:f0:04:b8:80:76:
fd:87:11:01:8d:b6:cf:1a:bb:5c:88:66:49:76:04:57:40:25:
53:88:db:e9:13:c7:06:07:4e:e1:0c:aa:4d:fa:45:50:0a:6e:
a9:10:ea:2f:3c:f5:4c:cf:de:a6:b4:8d:e5:c1:a3:c7:df:1b:
2a:29:a6:54:3c:37:89:27:09:fb:96:db:85:c7:67:c9:2a:d7:
36:f0:55:38:c2:e3:c4:80:7a:ea:cf:0c:30:a4:19:59:b6:45:
c2:8f:b8:8d:b7:fc:94:74:36:c5:f1:66:93:29:05:99:9c:de:
08:cf:91:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:17:47 2025 by rpki-client