
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3612ffcf-4087-3198-aadd-8da40f43ab54.roa
File: 3612ffcf-4087-3198-aadd-8da40f43ab54.roa (raw, json)
Hash identifier: JB2HBSuIWE3V22zAMP5zNAVM/pSmHNfgi1mgzSVIryE=
Subject key identifier: D6:E4:49:77:CC:49:2A:A8:2F:3F:89:30:9E:0B:75:FD:73:C2:DC:C7
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F4328584E4559F089A0676C1DAD693500
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3612ffcf-4087-3198-aadd-8da40f43ab54.roa
Signing time: Tue 23 Jun 2026 21:00:12 +0000
ROA not before: Tue 23 Jun 2026 21:00:12 +0000
ROA not after: Mon 21 Sep 2026 21:00:12 +0000
asID: 20115
IP address blocks: 98.8.20.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:45:59:f0:89:a0:67:6c:1d:ad:69:35:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Jun 23 21:00:12 2026 GMT
Not After : Sep 21 21:00:12 2026 GMT
Subject: CN=e1067e74-42d7-4306-8de4-e53f6c68e5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:bb:ac:20:fa:1f:7a:c3:d0:1f:1e:74:a8:74:
50:f0:c6:3f:a0:03:7c:33:ad:c7:40:2e:50:59:69:
08:bf:98:d5:43:d6:6a:13:6b:81:4b:12:46:84:d2:
bd:89:2d:80:88:48:3b:07:e2:6f:82:4f:84:15:c7:
97:c1:61:bc:c1:07:33:49:07:97:de:25:95:20:85:
69:ed:51:37:24:78:76:b3:f5:6e:1e:71:51:78:af:
1a:e9:a4:a5:c3:2e:65:cd:40:94:06:ed:36:17:06:
10:a4:6e:1f:50:60:1a:54:1b:7c:53:ab:3a:dd:ef:
70:75:55:a7:be:54:93:a2:d9:5a:9b:68:98:bc:98:
fa:25:16:99:b0:c5:b1:1c:9d:a7:05:a2:0f:2e:4f:
77:74:c5:23:fe:9d:0d:ff:af:9e:1b:f3:d9:1b:7f:
e0:e0:ad:c1:25:7e:f2:18:ab:53:9f:a1:e2:6a:f2:
08:d8:c8:49:d7:61:dd:4a:c0:c1:5c:4b:be:c4:bb:
21:82:f8:3a:b8:6c:a9:54:9d:a4:60:bb:ee:34:ab:
1b:0c:8c:20:0a:8b:9e:81:da:12:a9:25:de:5f:3b:
56:ea:dc:bc:7b:a8:6f:14:2f:75:8a:01:f2:b9:e0:
97:f9:6c:af:f8:c6:7c:c9:37:b7:55:bf:74:4f:37:
e4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E4:49:77:CC:49:2A:A8:2F:3F:89:30:9E:0B:75:FD:73:C2:DC:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3612ffcf-4087-3198-aadd-8da40f43ab54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
98.8.20.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:09:38:f3:ff:77:2c:cc:77:a5:6c:0b:5f:d3:88:e8:dd:2d:
59:8e:51:fd:11:43:7e:91:38:6e:8f:5e:91:a2:fb:ec:90:08:
07:e7:26:ff:1f:be:e6:50:6b:a6:f6:02:9b:ae:7b:f4:ad:04:
3f:36:3a:ee:e1:2b:92:b4:ab:48:c2:de:15:a2:51:57:2f:a9:
aa:10:e0:c7:9d:8d:13:aa:88:a9:af:dc:77:8d:63:9e:d2:72:
22:45:ca:3d:85:75:30:8e:b8:fb:da:59:17:7c:c1:c4:7a:6d:
d9:92:f7:06:40:56:67:69:0a:91:c4:2e:7a:13:87:00:d4:e0:
71:dc:64:f9:5b:57:32:b4:bf:51:32:71:31:a3:6c:5e:42:c9:
ed:0d:c7:55:99:95:23:0c:bc:a3:7b:bb:7b:18:b9:b1:25:cc:
8b:57:13:80:d2:c2:e5:74:7a:ec:81:a5:ab:d5:17:0a:1d:4e:
0a:c5:df:70:9a:76:fc:5f:d1:89:d2:2f:20:c7:11:c1:cc:fd:
4a:87:ed:de:5c:02:3b:84:f4:6a:f1:66:34:e1:63:69:e1:27:
ba:ed:45:aa:76:b0:35:fa:b8:fe:1c:be:3b:5b:4a:a0:94:97:
ba:84:62:9b:c6:a9:aa:1a:85:c5:9d:34:4e:e6:e9:66:14:e5:
07:44:85:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:02:42 2026 by rpki-client