
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/a946ee16-de3b-3832-a883-8192c6f45121.roa
File: a946ee16-de3b-3832-a883-8192c6f45121.roa (raw, json)
Hash identifier: AY4XAzjBMoUhdu7Py6pjDtbawlt/NSpsRLbGei+iU1c=
Subject key identifier: 81:9A:C3:BE:F4:FF:95:53:0F:59:49:C9:7A:88:12:85:08:BA:7D:94
Certificate issuer: /CN=1e268aaa-6306-4988-99f7-d5802a67b577
Certificate serial: 010D0C9F4328584F94D3418A65CEDEE73835F700
Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/a946ee16-de3b-3832-a883-8192c6f45121.roa
Signing time: Thu 22 Oct 2026 01:00:12 +0000
ROA not before: Thu 22 Oct 2026 01:00:12 +0000
ROA not after: Wed 20 Jan 2027 02:00:12 +0000
asID: 14593
IP address blocks: 98.97.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Nov 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:94:d3:41:8a:65:ce:de:e7:38:35:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577
Validity
Not Before: Oct 22 01:00:12 2026 GMT
Not After : Jan 20 02:00:12 2027 GMT
Subject: CN=4a6ddec8-0b0f-457c-a678-73a022f4a05f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a4:38:fb:a5:cf:1e:aa:3b:18:2e:28:05:a8:
77:62:e0:26:37:19:4a:86:f8:e2:4a:b9:ec:f9:14:
13:3c:dd:a5:dd:74:e3:02:c8:45:ce:e8:e3:6c:ca:
25:b5:b4:4e:5f:56:f1:53:8c:bf:2a:ee:36:ca:d8:
b0:62:ac:04:ac:09:9c:16:c2:2e:47:37:23:dc:51:
25:70:40:60:f9:80:60:5b:4e:9b:dd:74:91:09:15:
20:e4:56:18:98:65:fc:a7:14:0b:f2:99:e3:dd:b3:
6c:60:7c:e6:8d:57:ed:17:33:74:88:6b:d6:0e:be:
5e:59:87:c9:c1:6a:bb:62:4b:c0:24:20:69:2a:05:
7b:ff:ce:33:d8:91:4f:77:74:db:50:2f:e7:5f:a9:
60:24:44:57:97:a9:64:9c:ad:b5:bf:be:bc:e6:0a:
e6:5d:5f:11:72:56:11:ad:4f:5b:be:1e:3e:e9:c8:
01:c3:68:82:8b:b8:a2:01:88:06:a3:71:37:ff:bd:
ad:f7:1e:b5:07:bf:45:37:71:fc:3d:d5:66:a0:ed:
86:2d:80:8e:2d:03:28:d1:4b:18:17:3e:12:44:f5:
75:04:ab:76:a7:11:78:cc:b8:41:14:09:5f:a0:01:
11:c1:5c:9e:df:4c:43:1f:a7:c1:1c:7b:6b:38:a3:
2f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9A:C3:BE:F4:FF:95:53:0F:59:49:C9:7A:88:12:85:08:BA:7D:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/a946ee16-de3b-3832-a883-8192c6f45121.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl
X509v3 Authority Key Identifier:
keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
sbgp-ipAddrBlock: critical
IPv4:
98.97.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:04:e8:8d:fb:f0:af:cc:1a:33:26:43:3d:14:80:d5:7b:10:
ee:af:67:27:67:4a:7a:f1:83:93:d4:cc:11:6f:d3:26:29:67:
b2:86:85:1c:60:52:b5:75:cf:17:29:8d:f1:48:af:7e:27:aa:
66:d5:4a:95:78:e8:70:67:57:b3:f7:d8:03:9c:29:2e:db:8e:
5d:0b:40:f4:ff:23:59:36:59:2a:c3:38:07:71:5c:07:cb:b2:
8e:a9:f2:ba:21:18:65:cc:4c:70:45:66:66:c1:e1:d0:c1:3b:
4c:2f:16:62:a2:21:09:45:70:90:04:5d:18:9d:dd:7f:b1:2e:
69:7b:24:09:1d:19:03:4b:f6:06:5f:e0:9a:0a:e1:1f:8d:45:
38:10:5a:9a:73:1e:c7:e2:a5:ba:7e:8a:71:7f:6c:70:ec:38:
c9:59:4e:f9:36:74:41:e0:6f:63:cd:e3:60:3b:41:04:b8:c8:
ba:de:4d:29:8c:70:ff:55:70:f3:eb:7e:00:7c:dc:f5:a9:56:
50:dc:0d:72:00:91:7e:cb:44:e5:27:01:0a:f8:7f:24:76:06:
3c:1e:b3:c6:9a:82:2a:ca:fa:d1:0d:b2:93:76:95:76:26:e8:
bf:1c:f6:36:e8:27:63:21:88:ce:07:3d:d2:73:02:10:b7:ca:
e6:17:96:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 05:52:36 2026 by rpki-client