
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/a443ea4f-8cef-3073-9475-553c34701acb.roa
File: a443ea4f-8cef-3073-9475-553c34701acb.roa (raw, json)
Hash identifier: qU4wCPNcxTX0P5iL+5Z3wW7iuPwla07BGJwT/rbdR28=
Subject key identifier: 1C:39:47:27:6C:E8:76:43:EB:E5:83:5F:C2:50:13:00:38:56:D8:73
Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial: 010D0C9F4328584E9A7FD64370207243BBFB810C
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/a443ea4f-8cef-3073-9475-553c34701acb.roa
Signing time: Fri 24 Jul 2026 09:00:12 +0000
ROA not before: Fri 24 Jul 2026 09:00:12 +0000
ROA not after: Thu 22 Oct 2026 09:00:12 +0000
asID: 64286
IP address blocks: 98.159.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:9a:7f:d6:43:70:20:72:43:bb:fb:81:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Validity
Not Before: Jul 24 09:00:12 2026 GMT
Not After : Oct 22 09:00:12 2026 GMT
Subject: CN=1a7c82ec-a333-4cc3-b37b-f64afd317a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:fa:d2:c9:1a:17:8f:b3:44:ac:a2:64:c7:23:
1e:c4:ea:04:7d:d4:1e:d2:8c:b3:4e:9e:9e:e2:86:
46:8c:ba:1e:32:9b:f2:1d:aa:15:f8:e6:3c:a5:c7:
18:16:12:23:36:5d:03:51:ed:57:02:d8:49:bd:72:
fe:d9:9b:68:26:f5:0d:20:b0:e5:b9:50:27:35:cc:
7e:b0:af:d9:49:c0:23:da:07:13:14:ca:e1:54:da:
8d:e9:27:ac:6a:9b:df:5f:f2:1a:b9:48:e6:b6:f0:
86:72:53:3e:7d:de:44:a7:7e:c0:27:65:f2:2c:c2:
cf:a6:73:31:af:b2:4c:96:1d:32:ac:90:b0:b5:90:
5c:f3:0e:75:97:7f:c6:50:16:fe:9c:af:77:d5:27:
9c:63:51:6d:3f:d3:a8:66:21:ac:d8:a8:d3:6b:bb:
d7:22:fc:4b:6a:b4:f5:39:cd:45:04:26:dc:2a:6f:
35:ad:64:9e:68:99:03:4c:4f:e2:5a:55:37:55:a4:
aa:69:b3:14:6d:bb:76:3a:2c:05:0b:4b:c7:76:c7:
88:2a:8d:19:7f:17:36:8a:97:ba:22:5f:89:e7:7d:
9b:b4:a4:80:f4:e9:35:b3:64:4a:9f:b1:24:31:16:
61:22:02:74:65:5e:43:37:6f:1f:b1:91:0f:3f:cf:
ed:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:39:47:27:6C:E8:76:43:EB:E5:83:5F:C2:50:13:00:38:56:D8:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/a443ea4f-8cef-3073-9475-553c34701acb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
X509v3 Authority Key Identifier:
keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
sbgp-ipAddrBlock: critical
IPv4:
98.159.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d0:d2:1b:48:9e:47:f0:a4:51:3d:93:0f:05:a4:a1:30:4c:5a:
68:39:27:4b:bb:b1:d9:10:36:25:6d:4b:87:e5:26:4b:74:76:
79:18:f3:5e:2b:35:13:33:f8:1e:79:da:77:a9:97:a3:e3:b0:
e6:2e:71:24:d3:4d:37:79:b4:b2:33:4b:ad:9e:38:09:01:55:
fa:96:7c:3e:73:c4:e5:40:f6:1c:d3:bb:45:4e:9c:21:9c:cc:
28:03:7d:f3:8f:33:5a:5a:3e:e8:00:de:92:56:40:55:83:38:
af:36:0c:27:2b:02:fe:0d:bb:f3:f9:0f:48:bf:1e:ba:3a:33:
6b:07:7e:0a:66:30:fb:1d:a5:d0:39:1c:b1:7d:b8:4e:b7:71:
62:bf:75:13:19:14:3e:8d:d5:b8:da:27:de:d3:83:10:a7:f6:
5e:ef:1a:c5:6a:2e:ac:e5:06:7b:0d:3f:56:d1:83:9a:da:35:
bc:ea:57:28:97:3b:e4:3e:87:05:eb:56:22:a7:0a:d1:49:6c:
65:dd:5e:b3:0d:99:89:c1:58:61:7f:2e:0c:c6:9e:db:4e:46:
b6:fe:95:38:39:08:81:ca:6a:7d:a4:87:8d:ab:36:8f:3c:c1:
01:bc:3a:10:01:e9:4c:84:28:b2:69:c9:14:69:f4:60:90:bf:
b3:06:60:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:48:13 2026 by rpki-client