
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bede7035-2fec-370a-adae-c827dc3b0d51.roa
File: bede7035-2fec-370a-adae-c827dc3b0d51.roa (raw, json)
Hash identifier: i4gMY6gJreoyDqo6IcXfIRpVI9G85Rcz3cxbn3+1r8Q=
Subject key identifier: B7:4B:08:B3:EC:66:FB:42:B5:2E:4C:48:D3:7F:00:15:F3:E2:D4:FC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F4977C96C11EFFB9C8CC69380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bede7035-2fec-370a-adae-c827dc3b0d51.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 22909
IP address blocks: 98.40.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:77:c9:6c:11:ef:fb:9c:8c:c6:93:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=a0f7b99a-b3ea-4448-95b0-e5d3b9dae56f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6f:b5:26:49:2b:5d:c5:ee:60:f3:b6:30:88:
c4:be:43:74:9a:46:08:e3:da:9c:21:02:2c:8f:fc:
08:ce:d9:13:20:f8:60:84:1f:b1:af:72:4d:40:98:
6f:93:b6:8b:6e:c2:65:75:18:fa:b7:66:e5:9f:b9:
c6:44:b1:73:01:25:4e:6c:af:19:8f:1b:f4:4c:6c:
92:a6:e2:8a:c8:05:b5:c6:1f:36:d9:22:de:8f:a8:
4d:f3:29:7e:34:85:b3:54:8e:58:b0:e1:f3:e4:3e:
cd:fc:45:0d:b5:14:ac:94:a0:46:d0:2e:d7:7a:8a:
c0:19:34:3a:73:fb:a9:88:d2:e2:21:93:6a:5b:fe:
58:29:f1:63:c6:4c:6e:8a:36:1c:43:c1:6e:bb:f4:
51:03:25:8a:d0:52:88:dc:38:7a:65:28:ff:25:52:
cb:2e:d8:28:da:12:6e:5d:90:a0:83:5a:fd:2e:0b:
c0:5b:9e:f2:92:0a:99:3f:09:9c:93:1b:ad:e9:18:
50:a0:e7:44:bb:2c:82:c1:85:57:e3:4e:83:ae:d3:
77:65:ed:65:af:c2:8d:41:34:62:fd:c3:30:c4:e4:
fd:15:a8:54:09:12:f3:d3:7b:da:f0:62:47:d1:05:
d3:de:89:e0:e3:60:56:b4:8e:29:fd:5b:97:74:86:
e4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4B:08:B3:EC:66:FB:42:B5:2E:4C:48:D3:7F:00:15:F3:E2:D4:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bede7035-2fec-370a-adae-c827dc3b0d51.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.40.58.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:bc:25:aa:ae:6e:5f:71:6d:96:57:10:c2:d0:b0:d0:24:fc:
02:ad:2a:41:66:56:2c:e5:6c:57:a9:24:42:aa:23:d7:dd:ed:
a7:11:75:f3:1a:65:b7:78:2e:09:6a:e4:04:90:27:be:98:7a:
1a:83:c9:ee:c1:34:fe:66:6b:8b:81:43:78:4a:2a:48:d1:44:
7d:41:58:98:12:2f:37:ed:4a:60:84:29:a5:72:a1:35:76:5e:
cf:0c:42:87:61:af:c3:cc:2a:64:3a:05:0a:a6:cf:5e:76:5e:
9e:ed:c1:24:51:ba:84:09:35:0e:1f:ac:87:5f:ed:1a:f7:a3:
c4:4f:97:4f:7e:75:90:80:56:2d:94:a1:e1:f9:e7:f9:2d:9f:
73:c6:bd:cc:c6:fb:2e:04:a9:e8:83:e0:9e:72:19:41:dd:b8:
5e:4f:64:c9:d1:af:de:a3:57:a7:0f:28:76:0f:58:0b:07:1c:
56:2e:96:c1:9a:22:e0:c7:1c:22:70:1e:c7:25:a9:43:95:fb:
72:d5:a0:85:7b:d8:10:05:36:09:e7:3e:54:72:14:88:30:34:
9a:41:d7:f3:22:30:58:a1:e4:0b:a5:ce:b9:7b:1e:10:f5:56:
8b:7c:67:a7:0b:56:b4:7a:4b:6c:fd:5c:a0:5c:00:c4:6d:96:
31:77:2e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:00:36 2026 by rpki-client