
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfdbab5b-2832-3bbc-9bf3-e1ed3cecc5fe.roa
File: dfdbab5b-2832-3bbc-9bf3-e1ed3cecc5fe.roa (raw, json)
Hash identifier: 4GNU+o+DFChHJq2297Q9Xtcj38RpqFvDIw7KqRleB4k=
Subject key identifier: F4:6E:5F:CD:BD:A9:88:18:60:CC:9A:94:59:AD:E0:E9:88:FB:E2:77
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584AECC34C523994DCBF602CD4C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfdbab5b-2832-3bbc-9bf3-e1ed3cecc5fe.roa
Signing time: Thu 21 Aug 2025 01:00:33 +0000
ROA not before: Thu 21 Aug 2025 01:00:33 +0000
ROA not after: Wed 19 Nov 2025 02:00:33 +0000
asID: 33651
IP address blocks: 98.42.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:ec:c3:4c:52:39:94:dc:bf:60:2c:d4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Aug 21 01:00:33 2025 GMT
Not After : Nov 19 02:00:33 2025 GMT
Subject: CN=6d9c83a4-74f4-4707-ba76-dab6866fb1c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8f:f4:03:d1:42:04:8c:37:66:e6:0b:62:bb:
5c:d5:f8:06:68:eb:9c:83:7a:7d:27:88:c9:70:d0:
c4:21:c2:d2:19:5f:00:9c:fe:41:c2:ff:2b:9b:b3:
24:41:da:4f:68:00:31:c8:f4:3d:dd:d7:3a:a2:68:
fb:43:ef:55:18:2c:04:99:49:c5:04:9a:9d:df:fb:
b4:ba:a2:ca:c6:8d:c8:0e:c1:bc:83:84:4f:4f:30:
db:01:95:70:69:98:d6:89:08:8b:0e:6a:fa:2a:95:
a4:43:e6:39:8d:e6:d4:67:b3:29:66:e4:69:e7:e1:
3b:eb:43:57:40:e2:36:eb:2c:02:b9:f5:9c:88:53:
65:08:55:2e:a1:ad:7f:16:20:f6:32:0f:c2:66:69:
cc:e6:b8:25:73:cd:f2:43:ee:f8:ae:de:51:99:47:
0d:48:de:2d:34:b3:72:ab:c1:38:5e:fb:9a:7a:94:
0f:1f:90:bb:c6:75:c6:c5:05:d7:b2:42:00:b8:84:
ba:0e:74:1b:b7:fd:d7:9c:78:d8:53:97:ec:dd:d4:
a9:01:14:cf:70:91:48:b4:dd:8c:8d:35:e1:cb:45:
88:b7:13:86:a7:ae:f6:72:64:78:a8:5f:a8:ad:1b:
52:85:9b:55:ff:ae:c1:09:ad:d2:52:48:44:5e:2e:
69:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:6E:5F:CD:BD:A9:88:18:60:CC:9A:94:59:AD:E0:E9:88:FB:E2:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfdbab5b-2832-3bbc-9bf3-e1ed3cecc5fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.42.124.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:a3:f3:f4:7f:b2:0b:c1:d7:ec:72:dd:fa:5b:ae:8c:a7:90:
aa:24:d5:00:80:b2:7f:81:39:5c:c2:bf:d3:4a:89:36:2e:ce:
c5:34:90:d2:7a:b2:8d:0c:31:fe:ef:99:5c:5c:36:31:dd:5b:
66:1a:20:19:e3:26:74:0f:83:5f:12:1e:96:65:b3:d0:ed:11:
93:c8:bd:3e:79:50:72:b4:dd:32:ed:c0:06:cc:8f:52:05:d8:
33:f6:f3:98:6e:8d:c3:83:5b:23:ab:d8:d2:7f:fe:42:bd:63:
35:ff:68:4d:99:2d:25:d0:bc:5a:74:ed:07:ce:b3:39:74:a4:
04:58:a5:67:56:2e:19:38:7b:60:a9:87:a2:8f:0c:61:81:cd:
df:81:a0:f1:cc:bd:81:f1:11:bb:49:53:44:43:26:39:40:bc:
81:79:54:c0:a1:ad:c0:1e:c7:45:b2:6d:75:5e:6c:8d:0d:47:
03:0e:a2:cd:67:94:b9:0c:ad:52:22:41:18:e4:ce:37:7e:3c:
9b:bf:5c:0e:0e:f4:5b:cf:cb:f0:00:85:11:0d:2e:a5:ae:7c:
59:e3:18:4f:d4:b4:e3:6e:6b:83:d8:64:b3:24:0d:a6:8c:98:
73:ef:14:cd:ed:a3:bf:47:21:7f:c8:d6:1b:1d:3c:69:35:8d:
f8:86:09:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:16:10 2025 by rpki-client