
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/128d7091-0236-34d7-a042-2b113a111f38.roa
File: 128d7091-0236-34d7-a042-2b113a111f38.roa (raw, json)
Hash identifier: ELamV7Acdrflovo482AA0SoUznreJr5soLd4yGNDllA=
Subject key identifier: 49:11:7D:37:26:FB:44:F8:88:6F:B1:B9:0C:24:AB:9B:7B:75:50:10
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584E6F3D4418BDAC8CB0FA6CAA00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/128d7091-0236-34d7-a042-2b113a111f38.roa
Signing time: Wed 08 Jul 2026 21:00:12 +0000
ROA not before: Wed 08 Jul 2026 21:00:12 +0000
ROA not after: Tue 06 Oct 2026 21:00:12 +0000
asID: 33491
IP address blocks: 98.223.84.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 24 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:6f:3d:44:18:bd:ac:8c:b0:fa:6c:aa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jul 8 21:00:12 2026 GMT
Not After : Oct 6 21:00:12 2026 GMT
Subject: CN=b9042dfd-7205-4d56-95ea-3b4efaa2e042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c3:b6:b9:4f:3f:03:82:46:4b:2a:53:86:9f:
12:a8:57:70:ef:ad:1c:0f:8a:d3:0c:25:e5:75:06:
f5:85:50:6c:70:53:9e:12:9e:d8:0d:f9:90:77:8b:
4a:4b:a7:aa:78:4d:ba:e8:e2:c3:5b:96:3c:21:15:
11:3b:63:ad:b6:bd:35:98:01:8f:bf:4d:00:b7:85:
4d:99:c5:49:74:2a:58:a2:af:de:22:e5:25:5d:f9:
9e:16:2c:47:dd:a3:ed:f3:27:15:ec:dd:da:33:73:
e2:65:21:9e:eb:aa:9e:1f:75:57:c4:43:8b:21:22:
32:f6:7c:d2:5b:1e:97:ac:5d:8a:0d:0c:42:cc:19:
4d:58:46:24:94:c8:df:59:3e:50:b1:6c:68:d4:26:
a3:25:e9:92:25:b1:1c:38:d3:18:0f:bc:2a:d5:52:
03:77:ec:0c:ff:69:c5:59:3d:bd:42:66:4c:e2:05:
14:50:82:e0:7c:92:70:80:05:91:2b:df:c0:fd:01:
af:b9:a5:7a:28:5f:67:bb:71:ba:02:52:fe:80:e0:
68:0d:54:99:bf:f6:e1:ae:00:84:ad:50:6a:23:00:
ba:d9:93:b4:00:05:6e:e7:bf:35:45:72:3b:9a:ec:
d0:96:82:31:39:bb:e5:f6:03:fc:0b:51:b7:99:85:
8d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:11:7D:37:26:FB:44:F8:88:6F:B1:B9:0C:24:AB:9B:7B:75:50:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/128d7091-0236-34d7-a042-2b113a111f38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.223.84.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:06:a1:0f:ad:a5:39:52:36:5a:9f:da:8b:c8:1a:7b:6e:c7:
4d:e9:24:0e:37:5d:7e:92:dc:ab:b2:6d:98:8f:9e:85:a2:8d:
b2:5a:26:e3:58:d9:52:42:f1:d2:33:13:6f:b8:3d:02:94:a7:
7d:78:81:91:c2:db:68:b9:c1:14:6b:a3:22:ef:90:0a:f6:60:
01:6e:09:2a:04:e2:02:50:9c:ad:8c:cc:d9:2d:86:0a:98:ef:
ae:04:c3:07:f3:bd:da:80:02:a4:ad:fd:fd:ae:88:3c:37:2d:
3b:81:92:17:8c:e6:b0:dd:5e:f9:53:d2:43:3a:bb:e5:83:27:
9e:33:c5:7f:59:b4:9d:58:82:3d:b0:e7:3f:eb:f7:e6:78:1a:
3a:b0:a6:84:57:3e:48:dd:ed:d4:e1:71:50:4a:74:19:5b:a5:
1b:f1:b3:c4:45:0c:af:f6:ec:86:b6:f3:59:b0:42:c8:a8:78:
2e:58:20:27:74:38:d7:b8:76:5c:7d:d7:50:c4:3b:2f:a4:49:
7b:3c:ac:03:15:e4:2e:2b:e9:81:0f:d3:64:d1:8b:81:22:bd:
5a:03:1d:da:42:71:c9:b9:1e:1b:72:c9:90:01:db:c2:46:03:
d3:9f:eb:5f:ff:5b:cd:91:d6:59:00:83:e3:b4:9d:67:af:7a:
f0:cc:fb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:22:12 2026 by rpki-client