
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02e44648-abd2-32ac-b525-ee1364bdf682.roa
File: 02e44648-abd2-32ac-b525-ee1364bdf682.roa (raw, json)
Hash identifier: tYcLPDeHKhHEnKPNbiGlcZCToPQ3PSoCuKXAO7cU2Mc=
Subject key identifier: 69:8E:16:63:A9:46:75:21:62:E7:96:06:30:11:45:61:E8:28:6B:E7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584ED4321E4CDFDD60A1F7FEA360
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02e44648-abd2-32ac-b525-ee1364bdf682.roa
Signing time: Fri 14 Aug 2026 01:00:13 +0000
ROA not before: Fri 14 Aug 2026 01:00:13 +0000
ROA not after: Thu 12 Nov 2026 02:00:13 +0000
asID: 13367
IP address blocks: 98.240.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d4:32:1e:4c:df:dd:60:a1:f7:fe:a3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Aug 14 01:00:13 2026 GMT
Not After : Nov 12 02:00:13 2026 GMT
Subject: CN=7f8a013a-af0e-4ba9-ab98-158543ca9990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:07:5f:ad:dc:ff:4b:71:e3:38:b0:21:8e:06:
d7:c0:0d:1b:1f:dc:ce:d7:91:4c:e9:0b:1c:a4:c0:
eb:9f:02:86:49:83:fe:74:9b:bc:e6:b6:55:02:55:
8a:7f:37:d4:60:1c:9f:66:ac:35:db:e3:c2:fa:16:
5e:f3:9c:7f:ed:fa:f1:3e:29:a8:c8:3f:0b:a0:c2:
a9:5c:5b:7c:aa:82:b9:0c:87:ba:55:07:fc:47:4c:
c0:bd:9a:cc:f0:e3:24:78:32:bf:01:21:b7:4b:07:
0a:03:49:53:14:8c:72:1a:4a:2a:4d:f6:ba:ce:8d:
dc:86:c1:16:70:a3:09:18:d0:c4:9d:25:a9:ba:00:
88:df:de:6b:e5:b0:c7:65:40:c6:25:f6:94:be:d2:
3f:82:cb:57:4c:d5:84:46:92:5d:e3:2f:d8:ea:01:
74:03:63:04:19:53:6c:4c:8e:fa:b6:a5:0f:26:ff:
ae:4c:2f:82:1f:3c:fe:ca:d5:a4:3b:60:cf:d9:da:
44:5c:46:d6:04:7b:49:5b:b3:e5:a0:3a:0b:9b:03:
7c:36:b4:3a:67:b4:a1:95:fa:dc:43:6a:c7:4d:72:
14:34:3b:51:f3:0b:65:75:c6:6a:77:a7:85:c3:78:
7c:be:48:8f:11:73:df:75:46:65:4a:b8:89:22:bc:
3e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8E:16:63:A9:46:75:21:62:E7:96:06:30:11:45:61:E8:28:6B:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02e44648-abd2-32ac-b525-ee1364bdf682.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.240.216.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:11:b5:27:8d:ba:17:30:29:be:6c:bc:e0:59:c2:45:30:02:
42:eb:d9:07:8e:1e:4c:6f:1f:22:fd:2f:44:73:fa:8f:e6:6d:
8b:b3:a7:f2:59:9e:6c:e3:4a:b9:f4:02:97:76:a3:d1:e4:fd:
9d:7a:49:b7:50:4c:72:72:23:3a:09:7b:f5:94:20:87:8c:0a:
b8:68:8a:33:b8:af:0c:54:21:8c:b8:d5:9b:38:08:6b:cc:75:
49:f8:52:bc:80:6d:06:04:b1:ea:ed:86:48:53:95:5a:42:bc:
b2:7a:90:20:08:e2:e0:f3:6c:a5:f4:d7:16:ff:ee:67:de:fa:
aa:10:d7:ac:d2:38:50:5d:98:ec:9f:be:ba:87:26:16:27:8d:
7e:9c:df:88:9f:b3:53:f5:49:31:43:e4:1d:97:14:34:91:a7:
7f:67:17:ba:52:c9:54:15:9d:79:e8:fa:96:b6:7a:b7:f6:1d:
18:1e:47:82:46:79:0a:d0:b1:7f:9e:07:e1:15:49:89:a5:8e:
9b:2e:5c:eb:5e:e9:17:e2:3b:b4:24:27:31:14:c3:f4:74:47:
0d:fa:0f:81:f4:de:7e:fa:1a:16:98:15:c7:b4:5a:16:3b:6f:
c7:de:8a:76:a8:e5:0b:1a:04:09:1a:00:2b:d4:37:e5:34:f0:
cb:31:d7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:40:10 2026 by rpki-client