
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/98d4dcd1-7048-351e-8685-4eb20dda3967.roa
File: 98d4dcd1-7048-351e-8685-4eb20dda3967.roa (raw, json)
Hash identifier: g4if/et3/eBhrGzE1frb3jiQt4arS/ION2Ofs8ndwfU=
Subject key identifier: E0:5C:23:01:60:83:EC:A7:52:47:3E:07:97:17:B5:0F:BE:6C:D9:2F
Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
Certificate serial: 010D0C9F4328584CCBA75E705C33AA59D613CCC0
Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/98d4dcd1-7048-351e-8685-4eb20dda3967.roa
Signing time: Sun 08 Feb 2026 14:00:41 +0000
ROA not before: Sun 08 Feb 2026 14:00:41 +0000
ROA not after: Sat 09 May 2026 13:00:41 +0000
asID: 16509
IP address blocks: 170.225.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:cb:a7:5e:70:5c:33:aa:59:d6:13:cc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
Validity
Not Before: Feb 8 14:00:41 2026 GMT
Not After : May 9 13:00:41 2026 GMT
Subject: CN=55850725-d9a1-4d3a-956e-d62477653673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:22:ae:d9:41:1f:ce:72:0c:6f:08:7b:2f:d2:
b3:db:76:59:8f:ea:fd:47:1e:fd:82:8e:c9:e0:b8:
d2:f7:b6:fb:3d:19:92:71:82:48:b6:13:db:af:dd:
12:3b:48:dc:7b:17:38:ef:18:a1:d9:76:ea:40:5e:
ab:49:be:80:22:73:b2:0e:1d:b9:9d:1c:ce:7c:89:
28:e4:cb:ad:5b:af:dd:15:59:5f:6a:cf:2a:b4:f0:
11:de:ab:bf:62:d1:35:32:d2:d8:69:b0:ff:b1:28:
15:ce:2f:89:95:8e:2e:dc:de:c4:49:f6:91:b8:e3:
c6:f6:70:6f:31:21:bf:a6:54:7a:04:90:58:b4:e4:
c1:4e:77:34:d3:b5:89:17:c7:13:c4:34:c6:5c:fb:
36:4c:71:bc:6d:c3:92:2e:20:6e:6a:92:e6:95:33:
98:77:ef:d1:54:f1:4e:3f:18:68:03:3e:12:a2:a9:
2f:4b:45:50:8d:f4:a0:5f:4d:ad:34:10:a6:ab:36:
54:73:cf:7b:37:d5:3d:be:29:fd:d3:76:f0:c8:6b:
63:36:0c:1a:6f:f4:99:ef:98:51:51:5a:1f:7e:67:
81:d5:81:32:2c:99:6f:05:6f:23:0b:ad:c6:50:db:
c7:54:8c:21:f6:3f:0c:a1:54:e8:df:0b:31:a1:1a:
dd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5C:23:01:60:83:EC:A7:52:47:3E:07:97:17:B5:0F:BE:6C:D9:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/98d4dcd1-7048-351e-8685-4eb20dda3967.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl
X509v3 Authority Key Identifier:
keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
sbgp-ipAddrBlock: critical
IPv4:
170.225.215.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:a8:7f:4d:0a:c7:29:a4:a1:8c:89:89:f6:cc:33:1b:b5:1a:
bc:80:3e:fa:f7:fd:29:c9:a7:59:67:8c:32:4c:df:b0:8e:67:
09:6c:8a:fb:57:03:18:b6:f0:7f:c8:a1:f7:93:18:29:bd:95:
32:9b:8b:53:b6:21:a7:41:a1:e7:23:bb:dc:9b:0d:31:88:79:
a0:e6:11:86:a8:af:31:43:c3:a5:5d:1a:e3:dc:55:2c:a7:11:
76:cd:b9:f8:55:98:6b:9f:a7:73:fc:30:80:7f:95:91:37:8d:
a4:e1:39:ce:b3:78:2f:cc:89:09:36:59:c8:14:a3:15:24:7c:
3c:f7:79:4d:43:8d:44:f8:6d:17:d7:2d:02:c4:7c:39:f6:ff:
33:09:f0:38:59:28:da:42:49:3a:7f:34:62:40:80:3d:cc:c9:
19:c3:7f:c2:9d:55:f8:55:a9:e5:d7:ad:d9:ed:bf:2e:a4:f3:
b9:71:d9:24:c2:9f:09:e8:66:a5:a9:2b:0c:a5:39:09:25:de:
bd:d6:46:3e:a8:d9:1a:e9:17:09:80:74:6b:c7:a3:b5:8e:2b:
85:7e:4d:38:16:3b:0d:3e:a9:fc:da:72:f8:a2:10:a3:cf:93:
d7:9c:51:81:f8:f9:dc:6b:f3:91:3a:82:39:4d:6a:14:86:1a:
d1:e5:5e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:54:56 2026 by rpki-client