
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aee8159c-e0be-320b-b571-b1a8a8da48da.roa
File: aee8159c-e0be-320b-b571-b1a8a8da48da.roa (raw, json)
Hash identifier: qwSgVQ5tLORL2YptmL8Iv4JXJpnD+M+xwkUENwPLKJk=
Subject key identifier: FD:1A:FC:EA:CE:F9:6F:85:93:54:B8:8F:85:E8:7E:06:14:AF:5B:8F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119E8D84B069758AC9238120
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aee8159c-e0be-320b-b571-b1a8a8da48da.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33660
IP address blocks: 98.202.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9e:8d:84:b0:69:75:8a:c9:23:81:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=3663b8ab-e28a-48d0-9db6-6f4e9fd3bdd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ff:43:65:2a:0a:32:3e:d4:86:3c:1a:32:49:
97:bf:72:22:53:dc:b0:1a:92:e6:80:23:40:47:eb:
23:d9:65:f1:f5:cb:04:c0:3d:51:e9:cb:c3:0b:af:
f6:5e:eb:2e:1a:e8:5a:62:a5:40:9d:ae:86:6a:18:
0a:94:ca:f7:21:3f:30:f4:35:1d:1e:d9:a0:ac:82:
02:30:a9:47:75:68:59:e9:d0:c2:e6:c7:40:b5:24:
c8:df:c0:ea:a1:46:fe:c9:04:36:d2:8c:a7:a0:72:
c1:e9:ae:6c:ef:6f:29:45:bd:b1:72:5e:dc:17:6b:
26:87:ff:ac:d5:20:af:b6:54:cf:5b:5f:9b:8a:b3:
be:4b:63:71:54:c1:5d:96:12:71:b4:ae:13:1b:ea:
df:c3:57:75:d3:53:80:14:53:af:d4:32:09:39:76:
09:d1:1a:93:c5:31:f2:b8:26:37:be:8a:8f:b5:61:
cd:e6:d0:66:9d:55:cc:6c:d5:a9:78:a0:d3:1a:aa:
9f:f5:de:35:12:47:3f:91:3a:4c:7f:59:dd:d1:e0:
24:87:bb:cf:d9:b9:e2:a2:a3:60:2e:fe:8f:d8:7d:
48:8a:19:a3:fc:ad:9d:59:ba:49:37:f4:b4:6b:66:
ad:36:d2:15:63:88:03:8a:a6:c7:87:55:93:ba:2a:
05:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1A:FC:EA:CE:F9:6F:85:93:54:B8:8F:85:E8:7E:06:14:AF:5B:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aee8159c-e0be-320b-b571-b1a8a8da48da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.202.16.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:b5:5c:9f:60:94:b7:68:0d:6b:4b:c4:a3:b3:77:fe:d3:8d:
fc:78:56:b7:01:b2:0c:05:77:86:db:03:da:ab:46:09:64:c2:
6a:1b:ec:a5:53:0c:b8:f9:12:f3:6c:01:18:84:fa:1a:65:ab:
14:16:04:12:69:33:70:30:33:99:cc:9e:c2:22:4e:47:43:21:
86:30:44:03:15:b8:f1:4b:e9:1e:16:fc:5d:54:e9:ce:c1:cf:
ac:38:e0:24:3c:e3:ea:af:33:b4:4d:d7:1a:c4:d6:e3:69:a8:
4d:62:7f:6f:e0:86:c9:f8:ac:b4:b6:e2:ee:3c:c1:06:31:72:
54:25:92:da:b0:29:3b:b5:38:1b:f5:00:8b:f5:80:9c:05:01:
00:a1:58:ee:b5:6c:a9:99:02:da:a2:69:4c:73:a5:64:a5:ac:
76:93:9e:72:a4:ca:5f:4b:b6:d1:25:1d:9a:51:e1:ea:e0:d0:
cb:eb:8c:3d:e6:17:5d:52:ac:e6:f3:1a:99:37:c8:b7:71:22:
91:82:63:e0:c2:60:bc:25:9c:9b:bd:4a:72:54:c2:94:9c:2a:
b4:97:52:4b:8a:3a:cb:b8:ca:83:28:37:6f:08:3d:33:f6:54:
43:a6:6d:44:9e:39:e3:18:d4:f1:77:15:55:3e:59:fd:42:17:
5f:d8:a6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:38:50 2026 by rpki-client