
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17a12b3c-924a-391a-b07f-686ce900e967.roa
File: 17a12b3c-924a-391a-b07f-686ce900e967.roa (raw, json)
Hash identifier: ly/T2xVdL7sRJPJvnFVf6NWxoq8cxZKgBQ6NYkF7F3I=
Subject key identifier: DA:9A:AA:7E:48:86:03:1A:DD:B3:1E:2A:04:C6:A1:C1:8F:78:1B:C5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F7A4FBDE712FB2AB79E3673F0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17a12b3c-924a-391a-b07f-686ce900e967.roa
Signing time: Mon 12 Oct 2026 13:00:12 +0000
ROA not before: Mon 12 Oct 2026 13:00:12 +0000
ROA not after: Sun 10 Jan 2027 14:00:12 +0000
asID: 33668
IP address blocks: 98.250.152.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 28 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7a:4f:bd:e7:12:fb:2a:b7:9e:36:73:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Oct 12 13:00:12 2026 GMT
Not After : Jan 10 14:00:12 2027 GMT
Subject: CN=b91f63aa-96e9-4849-886d-c1a64ae8d1af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3d:83:c5:d5:53:3d:75:71:c7:e4:df:5f:3f:
b4:45:cf:6c:b2:d7:e7:99:b9:b1:4f:01:f3:12:6d:
f4:5e:83:a1:9d:60:0d:ce:a3:99:c4:4c:4b:0b:aa:
13:b0:ac:69:6d:70:75:8c:24:20:a5:82:9f:07:7c:
20:0f:ba:27:64:cc:36:64:9b:68:1e:f9:88:51:3f:
a6:ab:3d:4b:f7:e0:cc:52:ef:db:c5:87:36:3e:47:
3c:57:36:8f:76:2e:25:c3:54:c0:92:3e:63:2a:dc:
91:6a:24:d1:18:2b:6a:8b:d4:fb:a3:2f:f7:be:90:
a5:d0:f5:39:30:55:6d:ba:fc:f9:33:cc:09:78:5e:
58:46:39:90:7a:50:ec:35:7a:3b:90:97:dc:b2:cd:
09:27:ed:8b:e1:f0:6d:fa:7f:f4:0e:1c:08:ea:4b:
00:4b:42:e9:5f:84:97:8e:1c:06:ab:e2:fc:4e:bc:
7d:7c:38:de:7e:6b:3a:57:66:d8:ff:18:03:4b:cf:
92:fe:40:b9:b8:90:e5:34:e5:36:e1:d9:ab:36:3e:
0e:13:93:f1:1f:e0:43:1d:b3:4e:bf:1c:90:9d:4c:
d3:85:aa:26:49:f1:9b:52:5c:c3:ab:7e:94:3f:ed:
db:65:0c:40:a2:36:34:23:66:46:3c:30:95:4f:9e:
f1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:9A:AA:7E:48:86:03:1A:DD:B3:1E:2A:04:C6:A1:C1:8F:78:1B:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17a12b3c-924a-391a-b07f-686ce900e967.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.250.152.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:a2:68:11:2d:01:c9:7a:64:da:11:79:8a:fe:4f:ed:b1:4b:
6d:b4:11:1b:ab:18:63:f6:bd:b7:8b:bd:83:92:4b:58:2d:80:
a3:92:e4:a0:34:74:de:82:14:1f:9e:c0:9d:4e:2f:8d:13:e1:
e7:2c:b1:9f:0e:ac:53:9a:5c:c2:8a:12:91:a6:46:5b:90:7b:
34:4f:bd:4a:bf:18:a8:7e:cb:a4:fb:bf:97:76:ab:48:7d:05:
de:92:63:3a:be:c0:a2:41:de:1b:38:86:42:40:b6:8e:84:45:
e5:62:53:1c:d0:5a:6b:5f:e9:66:4c:61:f8:b5:d9:6b:91:18:
e5:ee:7e:13:b8:d5:28:58:eb:e0:92:51:7f:70:ee:82:df:2c:
5a:60:39:f9:71:20:96:83:7f:cf:d6:67:27:6e:fa:9f:69:39:
6f:95:66:70:6c:22:73:36:39:b4:9e:d9:98:b9:24:b3:05:a8:
5c:b9:ef:a8:42:96:18:ee:f3:99:aa:f4:ab:86:bf:93:c6:ae:
59:ba:bd:07:78:a2:84:29:ca:be:87:b7:38:00:18:52:21:5e:
12:73:86:81:1e:a3:92:4f:5d:e8:2e:bf:47:75:71:85:b7:ff:
88:14:ac:01:8e:c1:04:a2:99:ea:e9:a9:11:38:d6:3c:68:eb:
ea:ab:68:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 18:02:55 2026 by rpki-client