
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ebbf65a2-8896-3ddb-9d3f-c9b50f2604e1.roa
File: ebbf65a2-8896-3ddb-9d3f-c9b50f2604e1.roa (raw, json)
Hash identifier: 00yomg31JJ7EyeiJ3fbk2WeL/UY8gR8HuoKiGku+poQ=
Subject key identifier: 77:E3:3C:B6:26:B6:F4:0D:7D:9E:46:42:21:7A:7E:21:0D:F7:01:A3
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F4977D120C6B75A70D0C54B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ebbf65a2-8896-3ddb-9d3f-c9b50f2604e1.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 22909
IP address blocks: 98.240.2.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:77:d1:20:c6:b7:5a:70:d0:c5:4b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=d38eb487-50f1-4c72-90fe-4c3df7fd5bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:54:37:02:42:de:b2:96:e1:4c:79:5f:ae:08:
56:6a:9a:7d:dc:42:69:38:c5:c2:b1:be:9a:96:ed:
a4:4a:19:b4:52:8c:ab:13:20:e9:c0:31:c5:98:4c:
b3:93:51:5e:c3:dc:e8:c8:59:a5:a6:2b:ba:9e:58:
a2:19:0b:0d:c9:ff:9d:91:0a:8c:0b:ee:6f:dd:bd:
67:10:3c:53:2e:3f:21:6e:91:88:1f:17:71:1e:02:
74:28:86:4e:39:cb:23:37:0f:6e:e4:30:1f:11:2a:
e1:4d:86:26:f7:f4:dd:b0:05:92:22:bf:03:e3:ba:
f6:22:23:14:e1:76:ec:c3:ed:b0:2e:7a:0d:00:17:
92:3a:ef:f0:9d:b5:a6:5e:06:ce:de:a0:c1:2b:30:
a8:c9:33:63:7c:dd:f6:ef:f9:ef:dd:63:f7:a5:87:
6c:84:c9:33:49:e4:c7:7d:88:2e:d1:93:b5:7b:e9:
57:d4:b7:94:81:01:ec:50:5d:c2:bf:0e:a1:00:96:
f6:e9:6e:ba:83:73:4f:96:26:b0:09:a0:eb:b5:03:
02:9d:b9:da:ce:3b:2e:03:71:df:e9:88:23:d1:a9:
fd:3a:d6:2f:44:b5:82:36:30:a5:6c:03:f8:d9:10:
95:dd:82:2a:6d:cf:24:ee:ff:42:c1:db:cb:79:b3:
d7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E3:3C:B6:26:B6:F4:0D:7D:9E:46:42:21:7A:7E:21:0D:F7:01:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ebbf65a2-8896-3ddb-9d3f-c9b50f2604e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.240.2.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:fc:0d:03:65:8a:fc:a9:e6:41:cc:b5:14:22:59:81:8c:e3:
b1:a4:67:35:42:2e:40:4f:46:10:2a:25:0a:1a:30:20:6a:45:
2f:89:13:f2:d5:66:df:bd:72:24:4a:3a:c2:7a:43:c6:66:de:
a9:e5:99:0e:48:c7:63:c5:d2:32:bd:1c:1f:af:0f:cc:28:51:
7a:14:6a:d3:39:a8:58:18:46:0f:f3:75:f8:b2:1c:27:5a:5e:
82:01:4d:55:e0:30:12:3b:ba:1b:70:50:72:e8:95:ea:07:51:
1e:9b:56:58:68:dc:e6:22:68:ca:07:83:a3:85:4b:2e:82:7f:
ce:9f:48:f7:74:d5:8d:1a:4e:07:a0:c1:ef:45:ea:72:78:be:
22:da:42:33:e1:04:f7:5b:32:4b:31:e9:f9:fe:84:e1:52:ca:
ad:e1:0f:d3:bc:23:8c:7a:77:d3:33:9b:5d:db:65:a3:17:5c:
79:7c:4d:ae:64:04:bb:25:84:90:79:d3:de:07:cd:9c:98:2f:
5e:f3:7a:a3:bd:f9:44:85:c1:3d:49:0b:b5:3e:66:20:63:1b:
45:d1:c4:18:75:94:64:8c:4d:13:a8:76:5c:cf:d3:fd:70:5c:
7e:2e:d9:fb:d3:a0:57:c8:b5:ff:54:66:f3:a5:48:85:a4:4e:
9e:dc:2a:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jd9EgxrdacNDFS4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZDM4ZWI0ODctNTBmMS00YzcyLTkwZmUtNGMzZGY3ZmQ1YmMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVQ3AkLespbhTHlfrghWapp93EJpOMXCsb6a
lu2kShm0UoyrEyDpwDHFmEyzk1Few9zoyFmlpiu6nliiGQsNyf+dkQqMC+5v3b1n
EDxTLj8hbpGIHxdxHgJ0KIZOOcsjNw9u5DAfESrhTYYm9/TdsAWSIr8D47r2IiMU
4Xbsw+2wLnoNABeSOu/wnbWmXgbO3qDBKzCoyTNjfN327/nv3WP3pYdshMkzSeTH
fYgu0ZO1e+lX1LeUgQHsUF3Cvw6hAJb26W66g3NPliawCaDrtQMCnbnazjsuA3Hf
6Ygj0an9OtYvRLWCNjClbAP42RCV3YIqbc8k7v9CwdvLebPX5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHfjPLYmtvQNfZ5GQiF6fiEN9wGjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWJiZjY1YTItODg5Ni0z
ZGRiLTlkM2YtYzliNTBmMjYwNGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvACMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIH8DQNlivyp5kHMtRQiWYGM47GkZzVCLkBPRhAqJQoaMCBqRS+JE/LV
Zt+9ciRKOsJ6Q8Zm3qnlmQ5Ix2PF0jK9HB+vD8woUXoUatM5qFgYRg/zdfiyHCda
XoIBTVXgMBI7uhtwUHLoleoHUR6bVlho3OYiaMoHg6OFSy6Cf86fSPd01Y0aTgeg
we9F6nJ4viLaQjPhBPdbMksx6fn+hOFSyq3hD9O8I4x6d9Mzm13bZaMXXHl8Ta5k
BLslhJB5094HzZyYL17zeqO9+USFwT1JC7U+ZiBjG0XRxBh1lGSMTROodlzP0/1w
XH4u2fvToFfItf9UZvOlSIWkTp7cKiU=
-----END CERTIFICATE-----
Generated at Sat Sep 26 11:03:35 2026 by rpki-client