
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/208a601c-4ad7-3fdf-a5ea-43e271d740a8.roa
File: 208a601c-4ad7-3fdf-a5ea-43e271d740a8.roa (raw, json)
Hash identifier: SRKmOKi55MsPX0dVRDRZT43QBVocAMl6YR1fMhk4Ca8=
Subject key identifier: C6:88:07:BD:EE:A8:3F:46:DB:49:A8:DD:4B:35:98:5D:B5:2D:5E:88
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F7A4FBB231B749E52D544BA40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/208a601c-4ad7-3fdf-a5ea-43e271d740a8.roa
Signing time: Mon 12 Oct 2026 13:00:12 +0000
ROA not before: Mon 12 Oct 2026 13:00:12 +0000
ROA not after: Sun 10 Jan 2027 14:00:12 +0000
asID: 33668
IP address blocks: 98.224.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 22 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7a:4f:bb:23:1b:74:9e:52:d5:44:ba:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Oct 12 13:00:12 2026 GMT
Not After : Jan 10 14:00:12 2027 GMT
Subject: CN=ef0d0785-c778-4921-82ac-9d5256c43414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:81:e7:84:a7:09:4f:60:0c:cf:76:21:02:fe:
cf:cf:bf:0c:a3:34:d5:c2:99:f6:24:92:90:4a:04:
11:a9:13:4c:5b:76:0a:f5:13:53:fd:5d:a4:9f:90:
ed:1b:7f:3d:34:18:fb:5f:6a:65:ce:0a:63:ab:bd:
4d:fa:4e:aa:a5:09:31:97:ec:42:3f:80:34:eb:6d:
a7:ec:e1:ed:c8:c6:2c:b6:ca:77:8b:c8:c4:d8:2d:
ca:91:21:56:cc:69:26:f8:e5:e5:ed:9e:c2:74:af:
a4:e2:84:d6:82:23:29:65:51:b7:b6:7b:09:f8:bc:
c4:44:7c:e5:01:41:b6:78:d3:b1:1e:e1:ac:37:fb:
f1:55:13:66:6f:2d:b9:35:9f:b9:39:ab:91:ab:78:
75:84:5c:96:99:1a:b7:b4:fc:01:6b:72:6a:9a:39:
7b:ed:72:3e:89:51:90:fc:f7:de:04:ec:c9:75:0c:
f5:c3:11:e4:f3:5c:e5:e9:eb:0e:fa:bd:0e:f4:ed:
91:06:8c:25:dc:db:81:06:1e:53:f3:97:9e:e9:32:
21:2e:fc:50:b2:70:9e:9d:02:3e:ad:c9:5f:7c:fd:
22:a6:b2:2e:a5:08:c9:9f:9b:02:75:b7:4f:2a:dc:
79:c3:f1:72:69:39:50:bd:c4:39:ca:cb:71:1c:94:
9f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:88:07:BD:EE:A8:3F:46:DB:49:A8:DD:4B:35:98:5D:B5:2D:5E:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/208a601c-4ad7-3fdf-a5ea-43e271d740a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.224.160.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:b7:c5:a0:8f:f0:2b:e8:fc:be:15:e9:ee:d3:ce:81:a4:0e:
21:77:0f:f5:59:8a:23:18:cc:2c:11:ff:21:27:bd:d7:45:01:
b6:04:fc:6a:6e:e4:1f:d4:0e:b2:db:fb:ff:f3:76:04:b7:8c:
7b:c6:2e:4e:00:50:12:f6:d7:b7:59:39:23:b5:36:49:dd:50:
21:b3:a5:4c:69:f2:2f:65:4e:02:dd:70:60:86:44:f4:47:86:
b3:6c:8c:c0:82:91:e3:1a:d9:56:6f:ba:ec:c6:59:fa:9d:0e:
dc:35:77:75:a8:e5:51:07:2e:e9:c1:58:68:dc:21:08:c0:2a:
e5:3e:c5:cc:e0:e2:26:5e:29:a9:29:13:7c:d2:83:aa:3a:eb:
8c:d1:fe:19:de:91:fc:fc:8d:e9:30:63:13:20:23:cd:0e:83:
62:8a:f0:60:9d:1e:ff:83:18:48:53:11:ff:5a:38:bc:5a:e3:
85:50:81:ad:f1:56:d6:4e:e2:c1:14:4f:0e:9e:5a:2e:de:45:
ec:75:7b:5a:04:e4:6b:5a:31:23:22:a6:cd:5c:4c:34:51:e3:
05:fa:b7:01:dc:81:dd:c4:99:50:44:3b:09:f6:b3:98:8e:ac:
df:1e:8c:64:88:fc:d0:31:03:49:40:f3:bc:14:e1:51:19:44:
1f:3c:b2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 13:42:47 2026 by rpki-client