
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/0e5db1f3-b3a1-3597-99f3-28ec533ed3e7.roa
File: 0e5db1f3-b3a1-3597-99f3-28ec533ed3e7.roa (raw, json)
Hash identifier: LJud1ARY0TvfcLkmM34cFS5WmYCO7n6eWDz5TZopBoU=
Subject key identifier: EE:49:CB:B6:90:06:D8:B3:86:75:81:4C:8F:B1:0D:1A:A4:BB:62:BF
Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial: 010D0C9F4328584EEA8750F8C5191BE25F6C0100
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/0e5db1f3-b3a1-3597-99f3-28ec533ed3e7.roa
Signing time: Sat 22 Aug 2026 01:00:12 +0000
ROA not before: Sat 22 Aug 2026 01:00:12 +0000
ROA not after: Fri 20 Nov 2026 02:00:12 +0000
asID: 396982
IP address blocks: 98.158.240.0/20 maxlen: 20
148.64.0.0/19 maxlen: 19
168.149.128.0/18 maxlen: 18
170.176.240.0/21 maxlen: 21
199.247.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ea:87:50:f8:c5:19:1b:e2:5f:6c:01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
Validity
Not Before: Aug 22 01:00:12 2026 GMT
Not After : Nov 20 02:00:12 2026 GMT
Subject: CN=8e2a20c3-5c33-482b-93e6-b950ebb69271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:74:8e:53:86:c0:c1:25:6a:21:95:d8:e3:7a:
8b:eb:37:55:1c:0b:4a:ee:1c:d2:2e:6a:5d:a8:6a:
d1:67:eb:57:6b:90:bd:68:d7:b6:c7:1c:3a:20:b2:
2d:df:b1:60:69:80:1a:97:9b:2c:0b:55:4e:47:da:
f4:4a:a1:76:79:c4:fc:e8:3e:1d:17:46:6d:4c:19:
4a:ef:11:d4:dc:3c:dc:f8:62:16:7e:59:6d:b1:23:
0f:36:92:a0:13:5f:22:9d:66:c9:dc:45:62:61:e3:
75:bd:71:df:f5:05:a7:74:db:71:a9:67:85:f8:f1:
5d:df:6d:0e:ed:83:e0:a1:e1:2c:30:2e:d4:73:17:
55:cf:45:c8:c5:c8:6c:60:23:ca:d6:8c:6c:e7:2a:
97:7c:c8:49:8a:83:74:61:76:83:d8:45:61:4c:22:
d2:92:3d:e6:c8:ae:28:b3:29:4b:64:b0:ad:5d:31:
f1:e0:9b:a2:a0:27:1f:e8:d9:c0:b5:49:0a:92:28:
88:50:c7:47:38:1d:a4:37:b5:45:dd:31:1c:a8:89:
df:2a:8e:c1:4e:87:ff:33:a3:6f:d3:ae:96:4b:b5:
5c:a7:98:81:19:e1:87:2a:c2:12:f6:1b:b6:1e:d4:
63:85:5b:c7:30:79:37:6d:69:fd:dc:b8:e7:18:89:
a2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:49:CB:B6:90:06:D8:B3:86:75:81:4C:8F:B1:0D:1A:A4:BB:62:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/0e5db1f3-b3a1-3597-99f3-28ec533ed3e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
X509v3 Authority Key Identifier:
keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
sbgp-ipAddrBlock: critical
IPv4:
98.158.240.0/20
148.64.0.0/19
168.149.128.0/18
170.176.240.0/21
199.247.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:c3:fe:34:15:5f:dc:c0:7d:cc:73:0e:a6:d5:ad:8a:3e:79:
e1:fe:28:8b:01:67:07:a1:73:16:cd:c8:84:98:c9:50:58:c3:
9f:65:5e:12:56:ce:91:1b:0c:d7:12:94:5f:14:24:17:22:f3:
68:11:45:ef:5a:12:ba:6f:82:5c:ad:ec:b4:37:a9:16:c4:ce:
0e:f4:56:e3:e3:a8:18:b3:7c:dd:6e:94:b3:a6:b2:1d:9c:9d:
62:aa:94:5e:49:a4:39:90:3d:94:3d:65:74:84:29:a7:fa:24:
40:52:3e:8f:5a:51:19:3b:f6:94:d7:28:2e:b1:90:52:d4:ca:
3a:26:27:1b:d7:52:7e:85:61:dc:fc:ff:f7:80:e4:ca:39:ef:
4d:d0:98:cf:e8:6c:3d:9a:34:b4:78:71:dc:63:c2:43:bc:62:
60:a9:6e:55:66:a0:66:7a:61:20:53:61:da:c8:29:6e:03:16:
aa:54:a1:58:c4:4f:3f:9c:99:40:d5:ef:7f:67:0d:67:8e:18:
82:d0:67:29:6b:4c:d5:40:d6:06:5d:23:6d:cd:59:98:98:da:
32:da:c9:5c:84:0c:7c:67:05:8b:62:d8:bb:9e:7b:8a:12:a9:
89:d1:da:e1:6d:0f:c1:49:14:5b:ff:9c:68:f6:87:99:f6:41:
f9:12:c2:7e
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWE7qh1D4xRkb4l9sAQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3
NzY5MB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk
OGUyYTIwYzMtNWMzMy00ODJiLTkzZTYtYjk1MGViYjY5MjcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHSOU4bAwSVqIZXY43qL6zdVHAtK7hzSLmpd
qGrRZ+tXa5C9aNe2xxw6ILIt37FgaYAal5ssC1VOR9r0SqF2ecT86D4dF0ZtTBlK
7xHU3Dzc+GIWflltsSMPNpKgE18inWbJ3EViYeN1vXHf9QWndNtxqWeF+PFd320O
7YPgoeEsMC7UcxdVz0XIxchsYCPK1oxs5yqXfMhJioN0YXaD2EVhTCLSkj3myK4o
sylLZLCtXTHx4JuioCcf6NnAtUkKkiiIUMdHOB2kN7VF3TEcqInfKo7BTof/M6Nv
066WS7Vcp5iBGeGHKsIS9hu2HtRjhVvHMHk3bWn93LjnGImi0QIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFO5Jy7aQBtizhnWBTI+xDRqku2K/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1
YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvMGU1ZGIxZjMtYjNhMS0z
NTk3LTk5ZjMtMjhlYzUzM2VkM2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2
NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx
Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw
Y2ZkMTc3NjkuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQEYp7wAwQF
lEAAAwQGqJWAAwQDqrDwAwQEx/cgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAErD/jQVX9zAfcxzDqbVrYo+
eeH+KIsBZwehcxbNyISYyVBYw59lXhJWzpEbDNcSlF8UJBci82gRRe9aErpvglyt
7LQ3qRbEzg70VuPjqBizfN1ulLOmsh2cnWKqlF5JpDmQPZQ9ZXSEKaf6JEBSPo9a
URk79pTXKC6xkFLUyjomJxvXUn6FYdz8//eA5Mo5703QmM/obD2aNLR4cdxjwkO8
YmCpblVmoGZ6YSBTYdrIKW4DFqpUoVjETz+cmUDV739nDWeOGILQZylrTNVA1gZd
I23NWZiY2jLayVyEDHxnBYti2Luee4oSqYnR2uFtD8FJFFv/nGj2h5n2QfkSwn4=
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:56:42 2026 by rpki-client