
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0f94486-421e-32f2-a2df-ea9a3ac77f3f.roa
File: a0f94486-421e-32f2-a2df-ea9a3ac77f3f.roa (raw, json)
Hash identifier: hDBdCPO0Z11JlEitS3WohBdn+9aI1BP9/Aa8ZIQey0I=
Subject key identifier: 06:E5:49:D7:14:BD:4C:B6:B2:12:5C:35:67:40:C5:CD:91:60:3F:0D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119D8FF8CE6419E7B87A0D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0f94486-421e-32f2-a2df-ea9a3ac77f3f.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33287
IP address blocks: 98.221.80.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9d:8f:f8:ce:64:19:e7:b8:7a:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=6d63bf3c-1303-4cb6-b761-69ab01d6f7cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:da:9e:53:9c:7f:68:64:d8:c7:d2:3a:e5:bd:
38:0e:21:6a:fc:dd:23:ef:0e:7b:25:26:d5:62:27:
b0:38:d9:fa:1b:07:52:cc:7a:d4:5b:52:e8:d2:49:
8a:5a:4e:ba:c4:99:5e:f5:3f:d0:f8:45:9f:03:b8:
77:22:b0:a0:94:b9:b4:10:17:f4:7c:ed:d0:15:49:
24:6e:92:47:11:3a:50:e4:45:89:85:a9:c7:39:45:
1d:f7:25:ed:9b:b2:aa:30:29:9b:80:4d:c0:c6:82:
e1:cf:80:f1:98:67:6c:70:00:3b:07:42:bf:44:6c:
1b:a4:be:54:b3:2f:4a:9d:f9:de:30:56:7c:66:8c:
6d:7e:3d:03:3a:cc:03:84:67:83:d1:9f:f7:11:12:
09:a5:54:5a:5f:9e:7d:cd:bd:d1:90:78:4f:d9:57:
51:4c:8d:3c:04:85:26:b4:62:e2:d4:01:c6:b0:72:
fb:7f:7a:8e:c9:c2:bc:74:1e:3f:21:a4:0d:41:2a:
9f:a9:a6:99:b7:99:07:b3:ca:e3:7c:77:29:ae:08:
77:38:43:60:a5:8f:3e:7a:39:02:27:bf:11:fe:14:
2b:b7:4a:15:e6:1b:13:f0:bc:4c:e2:d3:98:02:e4:
68:36:90:11:5d:80:9c:b9:5d:dc:b5:a5:76:28:49:
b6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E5:49:D7:14:BD:4C:B6:B2:12:5C:35:67:40:C5:CD:91:60:3F:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0f94486-421e-32f2-a2df-ea9a3ac77f3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.221.80.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:92:1d:16:7d:b5:8a:c6:1e:80:35:28:6a:21:05:46:d1:4c:
a1:28:dc:6d:a7:ff:9f:7e:51:20:01:b1:71:3e:bd:c4:e1:a7:
b1:ee:b1:56:78:38:3a:5b:21:8e:27:f4:16:8a:a7:47:1a:cd:
df:cc:14:df:be:de:a8:a8:00:a3:da:df:0a:55:be:35:13:72:
ac:e9:b3:77:ef:95:95:05:0a:96:e6:49:31:8f:fe:c8:12:18:
e0:01:de:7e:2f:07:03:a6:88:24:53:8f:af:6b:0e:19:d8:61:
53:a0:a9:75:05:9a:f6:36:33:dd:3d:2b:3e:09:c4:7e:bc:b6:
24:c2:3a:e8:23:b8:63:49:29:64:a8:61:c2:56:3f:44:d8:ff:
44:e4:4d:dd:13:74:38:fb:b9:a9:48:99:b2:15:9e:2d:da:61:
9e:f3:3c:87:ca:b3:08:3b:27:8e:a2:fe:83:da:e4:f8:9c:0b:
ce:4f:ae:bd:fa:8b:64:bb:16:9f:1a:9a:96:83:db:84:20:e6:
38:ee:a3:ac:0b:26:e5:ed:17:a4:c3:94:f7:e6:34:89:3a:42:
68:31:5d:f1:e4:e4:e6:9d:ce:54:55:20:7a:a4:38:a0:a6:bc:
a0:8b:9e:c7:f6:8f:53:29:0b:d7:c6:28:e6:73:a0:3d:ab:5e:
43:53:c5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:30:32 2026 by rpki-client