
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d077159d-e0c4-3045-acf7-be507b1c2a2e.roa
File: d077159d-e0c4-3045-acf7-be507b1c2a2e.roa (raw, json)
Hash identifier: K+vBb26PglQsx4sKe8avGIv4FlB67bL5a2zUwVgJgUY=
Subject key identifier: 2D:FF:8B:D5:84:76:CE:2D:60:2A:0B:C0:43:9A:21:C8:D3:4A:C5:21
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119E76DE69250BFB49F32680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d077159d-e0c4-3045-acf7-be507b1c2a2e.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33651
IP address blocks: 98.47.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9e:76:de:69:25:0b:fb:49:f3:26:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=64bbe204-bfec-4a4a-9a0c-a76249891446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:66:5f:07:16:0b:4e:50:26:79:6c:c4:ea:53:
56:2c:14:9a:8a:d6:2d:5f:a7:7c:d4:3a:68:4d:03:
a4:8a:a3:0c:b7:32:6f:59:60:9b:40:f5:c0:ae:66:
9c:96:d5:a3:75:98:ad:e5:ae:34:69:3b:b4:25:b5:
85:e1:e7:f3:b2:1b:77:4a:37:d9:93:1d:b7:f0:08:
90:3c:0f:12:a2:6d:46:07:67:f7:f8:f2:f7:4a:85:
ad:f0:9f:b5:e1:c9:63:23:10:7d:b9:ca:3a:b3:cd:
8f:d9:1d:74:44:50:52:3d:aa:91:c2:5f:db:fe:9f:
41:b6:16:6f:c3:82:ca:b7:60:fe:cc:07:d0:34:78:
98:e2:93:53:fb:0d:43:cd:8c:38:2c:df:37:d5:2d:
1d:70:56:21:0a:7f:b1:29:5e:43:02:80:83:44:6b:
df:24:4f:25:3d:5b:9d:d1:82:6a:e4:6e:40:5c:ce:
cb:f2:ca:e6:d1:84:f5:6a:c3:0f:2b:9b:82:9b:62:
b2:c3:32:f0:de:8c:53:12:09:26:da:7a:fc:51:9d:
ab:26:9e:24:55:08:56:ef:ee:9d:44:c3:10:b7:17:
1d:ad:7f:95:e7:85:06:55:4a:a0:ef:3a:be:ac:3d:
a4:b1:cf:c7:64:1c:87:6a:94:dc:24:88:7c:33:da:
a3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:FF:8B:D5:84:76:CE:2D:60:2A:0B:C0:43:9A:21:C8:D3:4A:C5:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d077159d-e0c4-3045-acf7-be507b1c2a2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.47.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:84:07:ef:ce:14:2e:48:5c:c7:ec:e6:3d:0e:74:f4:59:58:
8e:7f:b9:77:90:30:c5:63:74:2e:5f:06:69:a0:42:5c:a5:23:
03:4b:45:b4:25:77:ca:72:3e:fc:3d:99:4b:02:10:00:77:15:
69:64:ed:7a:84:b9:41:6e:80:27:27:03:d8:78:9f:82:93:16:
f5:5a:cf:40:bd:03:f3:98:c0:35:f7:1a:dd:6e:78:07:54:70:
2a:bd:4d:89:e5:6e:f9:38:af:80:14:06:f2:b6:f8:23:89:82:
92:7b:7f:3f:ca:a3:c2:58:10:39:f8:bc:de:30:95:66:87:22:
df:5d:16:d5:b2:c9:3e:83:68:22:1f:39:04:94:e3:9e:67:9a:
2b:87:e2:f2:29:53:0e:cf:9d:44:f3:e4:65:82:6e:29:10:d0:
1f:b3:a7:57:b2:0c:9b:ae:6c:16:f4:71:d0:20:c6:4b:55:ae:
47:b3:aa:40:e1:09:c2:65:4c:f7:8f:a6:75:02:0c:40:0c:16:
26:7a:56:96:6d:8c:a1:ca:38:fe:ad:b8:9e:0e:87:05:09:1b:
94:3c:e6:8e:0a:84:b0:be:ee:c7:be:ec:75:24:fc:22:a5:b1:
f3:40:2d:bf:48:59:45:fc:dd:7f:c0:e6:37:cb:76:9e:bb:2d:
4f:1b:ee:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:13:15 2026 by rpki-client