
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04aff7d7-62cf-3646-9772-baf6e4f4d023.roa
File: 04aff7d7-62cf-3646-9772-baf6e4f4d023.roa (raw, json)
Hash identifier: q3RxsuyLUlYEL/DfAiTBieevfUmtqDiCwQ97CAb0vGI=
Subject key identifier: 33:A7:6D:73:DF:6B:3E:32:67:EE:3C:CC:78:8B:97:BA:9F:EE:36:66
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584E6F3E63F79093416E500B63A8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04aff7d7-62cf-3646-9772-baf6e4f4d023.roa
Signing time: Wed 08 Jul 2026 21:00:12 +0000
ROA not before: Wed 08 Jul 2026 21:00:12 +0000
ROA not after: Tue 06 Oct 2026 21:00:12 +0000
asID: 33651
IP address blocks: 98.234.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 24 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:6f:3e:63:f7:90:93:41:6e:50:0b:63:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jul 8 21:00:12 2026 GMT
Not After : Oct 6 21:00:12 2026 GMT
Subject: CN=0ff613ed-93ad-4115-8bae-3e59931c2d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8b:00:b8:70:1a:70:d5:c8:6c:19:b6:0f:7f:
e4:f4:dd:45:f1:2d:9f:d5:24:14:42:70:e6:ea:c5:
7b:4d:62:1d:20:27:a0:a3:b8:08:ee:8d:e4:f4:3c:
a3:0e:de:86:ff:3e:8c:38:ad:92:54:dc:9f:19:97:
6b:90:58:bf:39:e6:51:d5:11:30:dd:26:b2:46:c1:
a1:0e:35:da:65:17:cb:1f:89:6b:38:f8:3a:30:de:
2c:f0:eb:b5:96:50:ff:13:f7:3c:62:1f:e8:b2:bc:
0f:2e:bf:46:fb:5c:c5:8b:f6:89:ad:7a:22:28:be:
4d:cd:c3:32:21:2e:ca:5b:71:df:8f:03:64:4f:72:
f9:bf:20:63:3a:1a:40:6a:8b:9c:4f:e0:a8:42:d7:
2e:60:f7:41:ae:e8:9c:c5:a5:32:28:fe:4d:a8:95:
31:ec:8f:c4:2a:68:71:77:64:90:eb:60:d9:51:df:
82:02:26:13:e7:22:80:32:d7:99:7f:2d:3b:e8:c8:
a2:84:40:a4:2b:ff:39:90:db:23:75:b6:40:9f:61:
22:53:fb:ec:98:19:e7:99:ad:1d:b6:c4:07:2b:61:
3f:07:6e:57:30:b9:e4:5b:b2:b7:1e:d3:40:a3:65:
59:12:19:d5:37:5e:dd:ca:d2:03:dd:e8:9e:06:eb:
52:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A7:6D:73:DF:6B:3E:32:67:EE:3C:CC:78:8B:97:BA:9F:EE:36:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04aff7d7-62cf-3646-9772-baf6e4f4d023.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.234.60.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:d9:7e:57:46:10:19:21:02:48:e9:90:41:b5:bb:61:46:d1:
a9:1c:58:71:bc:3f:ba:0b:20:d7:c5:84:10:00:3b:dd:ae:79:
d5:50:e2:a9:a5:ca:e5:9e:f8:d1:70:4b:a1:5e:ef:39:47:40:
0f:16:35:a0:35:28:cf:24:fd:1c:1b:50:63:b1:10:cb:09:dd:
a4:2d:68:03:c9:a5:43:33:78:a4:c6:2c:1f:9a:27:1c:a2:4b:
4f:32:0c:95:e7:7a:f3:e4:51:7c:aa:0a:cc:50:8d:04:72:cf:
15:f6:0b:11:6b:77:38:5a:a5:7f:73:6e:c2:e4:99:60:96:57:
21:2c:ee:0e:90:d2:ea:14:a9:38:c5:a7:3a:cd:04:34:52:57:
72:26:05:1c:be:a6:77:5a:6a:c7:c8:84:4d:c0:9f:8d:69:41:
a8:74:0e:60:1d:19:12:a6:4d:f6:10:22:70:86:a4:db:a6:01:
48:7d:84:80:29:31:9d:5b:56:53:3c:d6:52:f5:11:7a:fe:9a:
6f:27:56:f1:a1:e9:a4:42:fc:4f:f3:1e:f3:21:64:dc:f0:a9:
63:48:1b:99:c2:41:78:eb:c6:96:29:ec:c2:f6:12:70:d5:7f:
a9:27:60:95:df:7f:4c:06:c7:d8:e8:57:67:a5:3a:be:1f:c6:
fe:4c:c8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:14:01 2026 by rpki-client