
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/45c4ae63-1935-3db1-8d57-431b0e96a949.roa
File: 45c4ae63-1935-3db1-8d57-431b0e96a949.roa (raw, json)
Hash identifier: RhIVO8dby/8bOTccr8G52kHw79fjtJ5Inr2Dg0/xU5I=
Subject key identifier: E9:6E:E9:39:98:54:2B:44:00:42:3A:1B:6E:E6:00:FC:5A:24:A0:60
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F4328584CDC677196E1CA0C0D166F8280
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/45c4ae63-1935-3db1-8d57-431b0e96a949.roa
Signing time: Sat 14 Feb 2026 14:00:41 +0000
ROA not before: Sat 14 Feb 2026 14:00:41 +0000
ROA not after: Fri 15 May 2026 13:00:41 +0000
asID: 62610
IP address blocks: 98.96.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:dc:67:71:96:e1:ca:0c:0d:16:6f:82:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Feb 14 14:00:41 2026 GMT
Not After : May 15 13:00:41 2026 GMT
Subject: CN=309f74fa-9810-4219-be6f-d37a75d3b56c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fe:fc:17:38:1d:0b:2e:43:e3:22:02:32:07:
ba:2a:7f:bb:3c:41:65:0a:c8:b1:97:6e:dd:c8:09:
a9:ad:c2:c1:e8:09:46:d3:34:6c:b9:2c:c6:74:56:
2c:e4:92:ec:4d:ef:ae:61:2b:74:c0:6d:99:85:06:
19:63:ff:5e:a6:98:9e:98:c0:3c:80:d5:60:05:3c:
a1:6d:3a:a6:f4:e0:6e:40:35:37:fa:a3:a3:80:98:
3f:eb:02:cc:d8:e0:c9:78:ac:e4:5c:d1:ce:0f:bc:
04:af:7e:3b:04:36:27:5d:d3:cb:0c:12:4e:30:bf:
c4:c3:c0:7f:44:70:61:17:95:45:06:67:66:34:8b:
71:a6:78:38:36:bf:0b:19:d3:7b:51:99:e2:aa:c2:
8a:14:7f:c4:79:04:58:58:9b:b9:9d:8f:6d:85:9d:
2e:0c:4f:07:54:5a:7d:4c:cc:5f:84:68:68:5f:c1:
8e:bf:13:f1:7f:fb:aa:50:46:1d:ad:95:0a:04:01:
28:65:79:45:e4:d6:5a:b2:92:0c:04:80:f5:81:fe:
ea:70:97:7c:01:46:0f:ff:90:68:3f:1d:57:10:ad:
3a:dc:9f:5b:65:94:2c:89:87:96:f2:01:69:51:81:
cf:54:45:3b:e8:76:e7:93:e7:4d:b7:ab:1a:8d:20:
22:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:6E:E9:39:98:54:2B:44:00:42:3A:1B:6E:E6:00:FC:5A:24:A0:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/45c4ae63-1935-3db1-8d57-431b0e96a949.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
98.96.233.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:3a:1d:30:2c:5b:46:b8:c9:2e:e6:0a:b4:1a:4d:14:b6:3f:
87:26:7d:1a:ac:45:d2:46:bc:b4:37:83:80:31:f7:33:75:d2:
4b:ac:45:c3:45:81:e0:2a:5d:7a:54:5c:de:d4:39:71:9d:26:
78:8d:79:15:15:f3:df:71:5b:4a:ba:d6:43:94:a2:61:5d:8c:
97:de:ff:34:fe:75:40:01:58:45:bf:5d:68:03:63:a7:4a:df:
fd:c5:5e:07:53:e5:b7:da:fc:d0:f0:06:b5:96:3b:ea:1e:36:
3b:52:57:15:d1:8d:b4:cf:d1:2c:59:4f:31:be:4d:4e:f6:12:
5e:29:6c:ac:3a:21:e8:24:6f:44:84:dd:12:1e:3d:84:9c:af:
b2:91:78:9b:3c:4f:50:dd:4a:2a:f1:df:0f:b5:ad:0e:d4:24:
ed:0d:1f:a9:b6:12:81:13:f3:5b:93:51:4c:aa:f5:0a:00:32:
fc:9b:f9:54:7e:bb:c2:24:82:a3:89:b0:b3:e3:8b:5a:1f:20:
2a:d3:64:2c:a7:26:85:3a:f4:15:dc:15:89:87:21:e7:49:a6:
20:b4:a2:17:a5:33:37:57:91:4b:29:b9:55:9c:c8:46:34:be:
a1:61:ec:ad:6f:08:f6:7a:ee:f4:eb:6c:e2:f2:d6:fc:59:d5:
17:bd:29:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:32:05 2026 by rpki-client