
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21a2292a-e8bb-3f85-b350-0fdc21f31299.roa
File: 21a2292a-e8bb-3f85-b350-0fdc21f31299.roa (raw, json)
Hash identifier: tRwfGBrphpE/IMj9+9WNJ99IUw0xJM9h2m0yuA55PZw=
Subject key identifier: 2F:C1:26:D9:93:1C:D6:CC:4D:CF:DF:A0:62:2F:06:13:26:B3:8A:7C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119FD1DA908F535BC521AA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21a2292a-e8bb-3f85-b350-0fdc21f31299.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33491
IP address blocks: 98.222.72.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9f:d1:da:90:8f:53:5b:c5:21:aa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=10004fab-65e9-4414-a284-097264ea43df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:22:be:4a:1a:44:cf:6e:41:3d:0d:37:d8:97:
a6:c2:76:09:31:ae:ab:83:f4:45:1d:4b:26:0c:b8:
7b:e0:57:3b:5d:66:7a:d9:46:82:11:98:f5:99:a8:
55:1c:3e:da:14:fd:e7:12:82:c3:86:e9:92:e2:09:
ea:24:1a:16:da:a9:a1:c8:97:18:7c:57:b3:58:f5:
b0:b4:2c:2a:53:ff:4a:31:68:f1:da:88:72:2a:76:
75:b0:14:04:d5:ac:04:b8:bc:21:67:ee:e7:7a:70:
fc:6c:86:8b:70:ae:00:1f:71:f1:fe:3e:dd:3c:44:
80:91:cb:3d:e6:17:24:b0:ee:c7:33:95:41:82:3d:
87:39:17:58:e8:cf:2c:78:41:eb:ab:1f:7c:b4:15:
f5:9e:6d:8e:2b:5e:13:89:b0:34:54:5b:f0:40:61:
81:7f:d0:d9:0b:8f:b2:dc:fe:a0:19:4c:b0:24:e3:
b8:d7:57:9f:18:a6:62:97:bc:ff:79:2c:80:9a:4b:
4c:13:33:c8:44:cf:64:22:77:b5:30:ea:df:0c:4e:
6a:93:82:18:71:18:00:07:2c:bd:28:ca:5a:a2:f3:
31:a4:87:8e:86:62:76:cb:60:33:94:b8:17:4e:93:
05:49:ce:42:43:46:8f:54:a9:b7:ef:6c:6c:18:14:
58:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C1:26:D9:93:1C:D6:CC:4D:CF:DF:A0:62:2F:06:13:26:B3:8A:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21a2292a-e8bb-3f85-b350-0fdc21f31299.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.222.72.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:48:4a:4b:ca:07:13:58:dd:81:82:a2:44:05:31:2a:ce:ae:
0e:e8:fa:7a:63:76:0b:a6:96:69:60:2f:30:2b:44:cf:f7:c1:
c6:d5:97:da:9f:92:2f:f9:9e:c1:14:5a:d1:61:1f:95:14:f7:
ab:e2:8e:b1:60:d9:aa:fa:17:29:c9:fa:18:0a:a2:20:b5:46:
ff:17:12:2c:69:a3:60:02:ab:47:6f:32:28:b3:54:4c:3f:a0:
0e:c3:58:1a:e2:2f:6d:82:52:c9:44:ae:60:fb:55:83:27:c0:
65:2b:b0:f7:f8:c2:95:0b:21:be:fe:82:19:f7:1d:d6:0e:31:
56:9b:4b:1b:7d:5f:fe:82:fa:ba:a0:e3:b4:0b:8f:22:f4:2f:
6a:ce:57:f4:e7:e5:c7:46:2d:08:56:7b:14:ff:0e:0c:ab:e7:
44:77:bc:16:d9:3d:20:6d:a6:48:30:bf:52:7c:9e:25:50:78:
0b:24:0b:f2:7b:cb:4b:3e:66:e5:f5:af:42:1b:3b:44:a5:e9:
e9:7e:1b:4a:00:16:25:ac:43:c1:af:cf:4e:2c:f7:98:7c:ad:
00:2f:f7:fd:4f:b0:b0:41:a6:18:b3:89:66:55:4d:fa:eb:fb:
fe:45:9f:d0:b5:e9:8b:20:d5:a8:7e:18:b6:d8:23:98:3f:39:
ad:b3:6a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 15:15:23 2026 by rpki-client