
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af/aa1f874e-095d-34c7-82c1-8c864143547d.roa
File: aa1f874e-095d-34c7-82c1-8c864143547d.roa (raw, json)
Hash identifier: FBEmZ0ohbzZxxeSEosGZcgH+5jzDqKYuLkT/NP9IFi0=
Subject key identifier: 1F:59:73:44:01:BE:10:B9:09:00:DC:E1:CE:34:D3:95:FB:64:2F:4A
Certificate issuer: /CN=80a5a637-2442-4c3f-b791-5a2e260822af
Certificate serial: 010D0C9F4328584CB28729A66ABC85F36150A780
Authority key identifier: 8A:39:90:B1:69:98:EF:64:F0:DF:06:55:9A:81:14:F5:E3:79:72:F3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af/aa1f874e-095d-34c7-82c1-8c864143547d.roa
Signing time: Fri 30 Jan 2026 14:00:40 +0000
ROA not before: Fri 30 Jan 2026 14:00:40 +0000
ROA not after: Thu 30 Apr 2026 13:00:40 +0000
asID: 394688
IP address blocks: 98.142.188.0/22 maxlen: 22
98.142.188.0/24 maxlen: 24
98.142.189.0/24 maxlen: 24
98.142.190.0/24 maxlen: 24
98.142.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af/80a5a637-2442-4c3f-b791-5a2e260822af.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af/80a5a637-2442-4c3f-b791-5a2e260822af.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b2:87:29:a6:6a:bc:85:f3:61:50:a7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80a5a637-2442-4c3f-b791-5a2e260822af
Validity
Not Before: Jan 30 14:00:40 2026 GMT
Not After : Apr 30 13:00:40 2026 GMT
Subject: CN=5fa50251-3f0a-4c69-9611-b5aab1b6ab6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:05:25:e3:28:47:51:37:fc:ef:97:8c:06:3b:
6b:05:de:99:a0:b7:e2:de:4d:0f:66:7b:51:54:e1:
50:bb:a4:9b:30:f8:6e:2a:2e:85:ef:d5:a7:0d:b7:
a4:77:ad:91:ff:20:fe:7f:3c:3d:01:ec:ae:ba:9d:
8c:af:5c:6e:8a:b7:00:b7:f2:76:13:38:1e:6f:ad:
0f:57:31:d6:b4:96:18:fd:c0:f8:96:b1:19:fb:99:
df:fa:bc:69:39:1c:5e:47:42:dc:59:92:ea:f4:c3:
62:d4:38:77:14:04:e6:19:28:9c:69:b2:ef:85:c2:
9f:21:bb:bd:d8:e8:e2:1d:69:c7:5a:50:51:dd:ce:
40:69:3c:f9:f1:14:72:8b:f7:dd:d5:0e:b2:ee:cb:
18:ee:d1:e2:e4:5b:ad:a0:cd:d9:19:73:e5:88:cd:
3e:6e:b2:9a:2a:0d:bf:f6:b5:f2:e3:8c:1c:4b:07:
6f:9a:01:5f:fe:61:07:c8:37:a3:0e:ce:9f:ed:e2:
12:d7:70:1a:2e:51:18:6f:b2:5b:bf:19:3e:6a:3d:
82:6b:5d:b7:7c:ea:21:5c:7b:fb:b6:b0:a9:36:56:
f2:4d:19:c9:47:9b:d8:d9:d4:aa:b1:24:a5:68:9b:
ff:be:31:f3:db:b3:87:03:6e:87:a6:0a:2d:45:43:
cb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:59:73:44:01:BE:10:B9:09:00:DC:E1:CE:34:D3:95:FB:64:2F:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af/aa1f874e-095d-34c7-82c1-8c864143547d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af/80a5a637-2442-4c3f-b791-5a2e260822af.crl
X509v3 Authority Key Identifier:
keyid:8A:39:90:B1:69:98:EF:64:F0:DF:06:55:9A:81:14:F5:E3:79:72:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af.cer
sbgp-ipAddrBlock: critical
IPv4:
98.142.188.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:76:03:a9:8b:66:ca:3b:0b:a1:42:da:86:90:58:d1:11:b0:
c6:7d:5c:6e:17:3a:d4:59:9e:e7:32:52:98:bc:53:66:a0:3c:
b0:38:29:a2:32:02:ae:79:b6:8d:5c:b0:50:13:d9:3b:3d:59:
27:3a:47:33:0f:30:04:60:d3:17:86:bc:3f:25:71:63:2e:80:
4b:5d:d6:4a:81:6a:9b:c5:ab:84:1c:98:76:90:d2:75:fb:c1:
d4:3e:f2:89:94:e7:f7:95:a0:6a:7d:77:77:f2:ee:7c:9b:17:
1b:8c:6f:25:ce:5b:ff:24:fd:bd:a3:04:d3:6e:71:69:63:56:
2a:8a:2f:ee:ae:27:33:95:8f:0c:8d:97:99:8b:49:ae:b3:4b:
c9:cb:13:dc:45:31:6a:5e:81:7a:d1:53:d9:da:e2:11:a7:cf:
5c:67:a7:85:cc:ee:4e:34:5b:07:4f:f0:43:81:bb:0d:d8:ed:
9a:f7:0f:b9:60:f2:25:34:4c:a4:38:64:0f:10:88:2a:15:31:
db:4e:52:83:0c:0e:2e:c0:b6:d9:2d:eb:bd:e7:6a:88:df:c1:
1f:e5:8a:3d:f6:72:40:d5:0c:91:1e:e6:8f:31:10:5f:ef:d0:
73:80:7e:01:d3:09:ac:69:43:db:42:b2:b9:c1:44:eb:88:80:
eb:55:f9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:37:55 2026 by rpki-client