
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f65c2ca-c493-3969-8582-d7191f17220f.roa
File: 0f65c2ca-c493-3969-8582-d7191f17220f.roa (raw, json)
Hash identifier: OEpDeY/EX3sAjQhockdZeiEmYnGKUh6EMjOCaanW8QM=
Subject key identifier: 7F:40:CF:D7:04:99:92:06:F8:D4:50:DD:55:AD:A7:26:98:BD:3E:84
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119E6F47875463A6D2E27780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f65c2ca-c493-3969-8582-d7191f17220f.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33651
IP address blocks: 98.248.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9e:6f:47:87:54:63:a6:d2:e2:77:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=55e62f06-cf06-4758-8fb9-c4e909ad4a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:dd:33:e6:11:75:d0:9b:25:0c:31:82:0f:ee:
06:3e:0f:84:f7:7a:4d:39:1a:8f:6f:19:9f:18:ff:
f7:f8:d8:73:14:75:51:d2:ac:25:31:d1:13:49:8f:
60:5c:e2:17:14:0f:19:04:b7:d7:78:70:8d:77:7e:
08:2e:85:dc:3a:3f:ed:ff:9f:bd:bc:dd:8b:da:ea:
38:fa:ce:02:25:0c:6f:61:c3:99:c6:fd:bd:82:f0:
16:fb:78:cc:c8:5e:ce:c6:05:b4:f0:84:aa:9a:7a:
4c:96:30:03:07:11:9f:bd:91:60:2c:af:3d:71:fc:
06:d2:76:28:f0:2c:3f:be:c4:42:bc:58:44:f2:9f:
a4:0b:9e:b3:09:79:11:d1:15:9a:61:d2:74:7e:2c:
64:fe:e1:c6:61:8d:9f:f3:f3:84:1a:03:50:6d:7c:
19:3e:c7:b3:2e:ab:cc:b4:64:88:0b:2a:ba:45:05:
cf:bf:ef:3e:35:51:52:63:c6:52:3f:6e:23:98:f0:
09:4a:c7:61:1a:dd:d7:ae:d2:bf:50:c2:52:34:57:
c7:01:92:a9:c0:eb:29:35:51:53:81:05:97:2e:06:
77:6f:22:2b:24:32:22:eb:1d:eb:2a:39:a6:6e:ad:
f9:ae:ea:82:b3:28:5c:56:43:2c:dc:b1:7d:66:b9:
48:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:40:CF:D7:04:99:92:06:F8:D4:50:DD:55:AD:A7:26:98:BD:3E:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f65c2ca-c493-3969-8582-d7191f17220f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.248.245.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:ed:0a:b1:44:0c:d9:74:96:02:a4:2d:30:0b:d6:57:d1:c4:
c9:72:85:19:8d:ef:4f:bc:5b:fd:ed:93:5c:ba:6e:df:5c:50:
b1:d5:d6:3c:ec:65:be:70:7a:67:78:c7:5f:47:7d:77:52:e4:
03:79:71:91:24:2d:ba:28:66:5f:39:36:6f:08:da:93:66:6f:
4e:25:b1:ff:bd:27:25:80:49:8e:34:42:c5:03:bd:26:7a:48:
02:93:7c:7b:7d:6e:74:46:4f:89:6e:b9:87:c4:1c:bf:3f:b0:
2a:1e:e1:0b:4b:f0:7d:a6:98:8a:2b:0c:1b:a0:85:5d:65:91:
ea:cf:c8:0e:7d:d1:f7:b8:49:a6:72:b7:61:59:c8:ad:55:54:
bf:18:e9:ce:42:98:37:65:b2:25:96:e0:74:ea:87:13:4b:77:
0c:35:0c:20:55:f4:b9:a0:c6:ad:9e:33:11:91:de:08:e5:61:
0f:35:a9:ab:ad:3d:8e:8f:94:48:9e:35:0b:52:99:4e:c8:e7:
0a:24:5a:c2:24:f0:60:8e:b0:35:58:d8:3d:45:e3:0d:aa:25:
58:d3:eb:9f:00:9b:85:23:44:ef:4c:d3:0c:f0:9c:57:36:7b:
b3:7b:5d:07:f3:26:7f:ed:47:1c:50:40:95:f7:c6:59:07:76:
a8:73:70:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Rnm9Hh1RjptLid4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
NTVlNjJmMDYtY2YwNi00NzU4LThmYjktYzRlOTA5YWQ0YTBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6t0z5hF10JslDDGCD+4GPg+E93pNORqPbxmf
GP/3+NhzFHVR0qwlMdETSY9gXOIXFA8ZBLfXeHCNd34ILoXcOj/t/5+9vN2L2uo4
+s4CJQxvYcOZxv29gvAW+3jMyF7OxgW08ISqmnpMljADBxGfvZFgLK89cfwG0nYo
8Cw/vsRCvFhE8p+kC56zCXkR0RWaYdJ0fixk/uHGYY2f8/OEGgNQbXwZPsezLqvM
tGSICyq6RQXPv+8+NVFSY8ZSP24jmPAJSsdhGt3XrtK/UMJSNFfHAZKpwOspNVFT
gQWXLgZ3byIrJDIi6x3rKjmmbq35ruqCsyhcVkMs3LF9ZrlI5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH9Az9cEmZIG+NRQ3VWtpyaYvT6EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGY2NWMyY2EtYzQ5My0z
OTY5LTg1ODItZDcxOTFmMTcyMjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYvj1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADrtCrFEDNl0lgKkLTAL1lfRxMlyhRmN70+8W/3tk1y6bt9cULHV1jzs
Zb5wemd4x19HfXdS5AN5cZEkLbooZl85Nm8I2pNmb04lsf+9JyWASY40QsUDvSZ6
SAKTfHt9bnRGT4luuYfEHL8/sCoe4QtL8H2mmIorDBughV1lkerPyA590fe4SaZy
t2FZyK1VVL8Y6c5CmDdlsiWW4HTqhxNLdww1DCBV9Lmgxq2eMxGR3gjlYQ81qaut
PY6PlEieNQtSmU7I5wokWsIk8GCOsDVY2D1F4w2qJVjT658Am4UjRO9M0wzwnFc2
e7N7XQfzJn/tRxxQQJX3xlkHdqhzcCM=
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:58:43 2026 by rpki-client