
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/23d78f72-cae4-3827-920f-85c38c632f71.roa
File: 23d78f72-cae4-3827-920f-85c38c632f71.roa (raw, json)
Hash identifier: 9BG+dRypurC+Ibk7MoGyog4vAqOlBq86xSqoDvUxoTM=
Subject key identifier: 3C:85:31:F9:75:0B:D9:D8:5D:DD:12:0B:C8:45:36:DA:9F:F3:4C:DB
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F4328584CFB1CEB00630CF14D17523200
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/23d78f72-cae4-3827-920f-85c38c632f71.roa
Signing time: Wed 25 Feb 2026 14:00:39 +0000
ROA not before: Wed 25 Feb 2026 14:00:39 +0000
ROA not after: Tue 26 May 2026 13:00:39 +0000
asID: 21859
IP address blocks: 98.98.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:fb:1c:eb:00:63:0c:f1:4d:17:52:32:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Feb 25 14:00:39 2026 GMT
Not After : May 26 13:00:39 2026 GMT
Subject: CN=c17d0d86-32d4-454a-832b-f1f64a69670e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f6:af:f2:08:19:a5:96:1c:9d:a5:87:1f:aa:
3d:18:bd:2e:90:e1:20:77:ab:17:01:e1:d2:71:03:
54:ba:38:d4:11:c1:a2:ea:a1:7e:c2:73:3d:9e:66:
d5:79:94:06:1d:6e:2a:2b:ac:09:6a:98:b1:b7:8b:
df:42:29:20:da:45:ae:ae:03:4d:12:32:37:d1:ad:
c3:08:e8:c2:79:fb:b2:9d:c3:49:25:2b:9f:59:f4:
c7:f9:d2:94:7a:0a:66:ce:40:00:8b:b5:0b:27:18:
bb:01:5b:ee:07:23:01:74:a0:3b:3a:1c:51:59:a4:
45:3a:00:69:6e:1c:c7:b6:64:90:0f:08:7c:27:11:
a4:c0:33:d3:ca:ad:56:48:5b:99:b2:2f:21:0a:f3:
dc:80:ec:1f:7c:98:89:e9:13:73:52:83:49:ea:16:
1e:4e:da:b5:f2:a0:f9:4e:7b:31:d6:e6:48:4e:b4:
c8:b1:29:0c:bf:d8:4a:07:af:4b:54:7e:02:c9:10:
59:0d:50:64:09:68:a9:91:22:3c:ba:79:0f:98:39:
11:7a:2c:23:aa:2d:b4:18:bd:93:cb:7d:18:b6:4c:
71:02:d8:f7:b9:43:cf:34:c6:27:d7:b2:4d:bd:fc:
0d:15:c4:03:86:fd:e6:0b:43:32:cd:a9:50:ce:f1:
47:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:85:31:F9:75:0B:D9:D8:5D:DD:12:0B:C8:45:36:DA:9F:F3:4C:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/23d78f72-cae4-3827-920f-85c38c632f71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
98.98.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:13:d9:0d:c7:45:29:89:f6:ec:bd:49:e6:73:ee:03:90:71:
2e:3e:77:3b:40:59:e7:32:ff:87:5d:db:00:97:e0:fd:b1:ff:
34:6d:78:a3:1b:53:d8:8a:dc:68:6e:e2:b9:c3:61:b8:9f:19:
32:b1:1c:27:87:69:e5:02:44:07:a6:fe:1c:94:51:f7:a0:db:
03:8f:ae:85:01:c5:45:3e:ef:fe:9e:e2:bb:b3:27:ad:5e:a6:
14:00:88:5e:e6:7c:b4:32:2a:e7:1f:ca:ef:28:8a:41:e1:d1:
d2:2e:e4:c8:f8:9d:fe:c5:d9:30:42:ae:b9:a6:23:5a:5e:b5:
61:34:8d:5c:66:f8:94:6f:31:3d:96:0e:a9:d2:3d:19:98:ab:
1a:55:a2:e3:83:7b:f6:7e:30:ce:5a:ac:10:4b:ae:6b:d9:95:
dc:a5:d0:70:35:bb:85:cc:96:e1:63:ba:cc:22:61:ca:3d:0c:
b1:78:9e:eb:9a:b3:4b:c8:d1:a8:fa:d1:67:88:69:d2:05:fc:
e4:17:ea:5a:70:ab:a8:56:0e:af:f4:fd:84:98:87:3d:2f:ed:
c8:c6:7a:b2:b8:cf:a3:82:ac:ac:9d:c5:ef:62:aa:60:7a:d0:
81:4d:b1:64:c8:67:72:e3:cb:ec:71:be:be:0d:89:f0:5a:ef:
08:64:84:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:32:08 2026 by rpki-client