
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/98d21f17-4a0c-36f6-a070-6808cb50ec98.roa
File: 98d21f17-4a0c-36f6-a070-6808cb50ec98.roa (raw, json)
Hash identifier: Ierc9UMDWyr56UEwx6dqHPMEYBbLRy/aBEQF9BVZmd4=
Subject key identifier: 7E:8E:B1:F2:86:49:6D:4E:B7:BA:43:95:55:FE:9E:C9:E8:E2:C0:E9
Certificate issuer: /CN=954e2959-b160-4ffa-86b4-aaa94863154c
Certificate serial: 010D0C9F4328584E9BE508F8BAE22B33D42B38E0
Authority key identifier: 7A:0D:9D:66:5A:CD:4F:54:DB:65:04:14:29:CB:05:0D:D9:7D:51:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/98d21f17-4a0c-36f6-a070-6808cb50ec98.roa
Signing time: Fri 24 Jul 2026 21:00:12 +0000
ROA not before: Fri 24 Jul 2026 21:00:12 +0000
ROA not after: Thu 22 Oct 2026 21:00:12 +0000
asID: 3801
IP address blocks: 149.248.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/954e2959-b160-4ffa-86b4-aaa94863154c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/954e2959-b160-4ffa-86b4-aaa94863154c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:9b:e5:08:f8:ba:e2:2b:33:d4:2b:38:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954e2959-b160-4ffa-86b4-aaa94863154c
Validity
Not Before: Jul 24 21:00:12 2026 GMT
Not After : Oct 22 21:00:12 2026 GMT
Subject: CN=e087420b-3ca8-47f0-9102-b53b9b6a5c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:13:2c:32:fd:b2:50:4f:5b:ab:5d:94:e0:1c:
7e:88:f0:55:94:68:8c:39:92:0d:20:6f:ec:b3:c4:
83:71:99:c0:f2:4a:e0:a5:f5:ae:ff:ab:e9:63:4c:
c4:64:8e:b3:45:12:98:39:56:44:26:17:0e:48:e4:
e0:d2:6b:82:cb:e4:e4:59:61:e5:a4:06:7d:0f:08:
d2:2b:46:6d:17:8e:09:7c:c1:88:09:36:df:fe:08:
93:7d:73:b4:d1:32:ee:ec:c1:71:08:94:76:73:09:
9c:a9:68:41:51:07:da:e4:77:24:b6:ea:62:3c:50:
60:05:a4:0d:6b:38:85:dc:1c:bf:ac:d7:8f:67:6a:
49:5e:71:76:de:e7:37:90:4d:c0:98:1c:4e:4e:ee:
c2:0e:0a:9c:28:e5:56:ab:2f:e8:d1:ae:34:44:cf:
f3:ed:7b:78:c6:78:09:43:3e:60:70:a0:54:32:7a:
90:e4:d8:8e:5c:95:58:33:9a:69:c9:68:d8:cc:4c:
db:2e:d2:d6:37:58:18:a8:21:56:c9:93:15:48:d6:
f2:c3:75:10:1a:f1:a0:4a:15:ba:e7:3c:e7:7b:ed:
04:1c:74:33:ad:ab:cc:79:9f:10:a8:95:8d:81:5a:
6e:5c:83:f0:81:a3:bd:1c:43:a7:d3:cb:a8:45:a8:
80:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8E:B1:F2:86:49:6D:4E:B7:BA:43:95:55:FE:9E:C9:E8:E2:C0:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/98d21f17-4a0c-36f6-a070-6808cb50ec98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/954e2959-b160-4ffa-86b4-aaa94863154c.crl
X509v3 Authority Key Identifier:
keyid:7A:0D:9D:66:5A:CD:4F:54:DB:65:04:14:29:CB:05:0D:D9:7D:51:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c.cer
sbgp-ipAddrBlock: critical
IPv4:
149.248.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:2b:53:98:23:1f:5a:81:3c:68:53:0f:42:da:e4:6d:55:f2:
8c:dd:c7:61:41:da:4b:6b:fc:1d:30:49:9d:53:3c:a5:f4:4d:
83:75:08:2a:51:21:70:5b:62:b6:3f:e7:46:99:f2:63:5e:6b:
d1:71:79:3e:55:ae:6b:45:8b:94:30:c8:ff:f9:18:c6:84:0e:
6f:49:82:66:36:29:e8:19:e9:16:33:4d:db:87:cb:94:4e:7c:
6d:0d:bd:96:a5:c7:7c:07:c8:d9:45:29:0b:ff:9d:93:e6:92:
29:24:1d:b7:89:fa:d3:44:ca:d7:5b:b8:7a:09:ae:8a:33:f4:
7e:05:cb:90:73:d0:24:61:7a:0d:3c:4d:ca:8d:ba:5e:79:f5:
97:f7:39:5e:01:8f:42:c9:05:fc:03:10:64:d1:d8:16:8d:bd:
ed:37:4e:2f:86:9c:0c:28:db:0e:a0:c5:71:d9:b7:14:2b:98:
64:83:46:ad:d8:30:f0:a7:d8:d1:7d:56:ad:ac:ea:40:d3:e9:
70:53:b0:0b:68:a8:88:94:f3:08:e8:0f:74:1d:a4:a4:07:03:
6e:6b:b8:af:0a:12:99:dc:51:f9:5e:0f:ef:13:99:2c:d7:92:
bf:0f:b1:7b:af:7b:6c:98:10:cc:33:54:d7:d8:98:85:4b:d2:
54:f7:4c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:52:44 2026 by rpki-client