
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/223fbcfb-4395-34e2-884e-c466ca7c2777.roa
File: 223fbcfb-4395-34e2-884e-c466ca7c2777.roa (raw, json)
Hash identifier: bcOFALvs/YU6jOU6CRLmukLjvSC6CR+kc7i3i3A/rBI=
Subject key identifier: D7:93:20:05:72:DB:C3:F2:C5:A2:B0:7D:0E:A5:EE:CA:6F:4D:E3:3B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584ED862DAF88B431C0FA62947C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/223fbcfb-4395-34e2-884e-c466ca7c2777.roa
Signing time: Sat 15 Aug 2026 13:00:11 +0000
ROA not before: Sat 15 Aug 2026 13:00:11 +0000
ROA not after: Fri 13 Nov 2026 14:00:11 +0000
asID: 33668
IP address blocks: 98.243.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 02 Sep 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d8:62:da:f8:8b:43:1c:0f:a6:29:47:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Aug 15 13:00:11 2026 GMT
Not After : Nov 13 14:00:11 2026 GMT
Subject: CN=cf4ff42a-136d-4850-8719-3ccaab0432ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9b:08:d3:5a:14:e2:6c:b5:9f:89:1a:d9:ab:
17:0d:f2:32:c2:b9:97:66:70:0c:03:22:f6:9d:5b:
aa:ca:d4:08:9c:0e:2b:5e:e5:64:10:f0:b2:78:74:
db:4b:af:12:7e:09:b4:ed:d6:04:9d:7d:0e:15:26:
ca:7c:fb:99:1c:a4:07:44:bb:ba:63:f8:12:97:43:
db:20:81:6f:0a:05:1f:5c:09:27:7f:4c:8e:c3:8a:
7e:76:72:2f:8c:a1:d6:6c:b2:27:56:83:40:34:6f:
c7:57:07:5b:8f:91:0f:4c:ea:e3:af:3c:80:2a:48:
a8:ee:cc:90:c4:35:9b:12:ba:04:eb:48:c2:73:b9:
9c:73:9a:b2:b3:7e:6d:fb:2c:93:d6:e1:aa:79:74:
a6:d5:a5:97:fe:a4:2d:ca:5b:65:f5:bb:93:99:0a:
83:7d:f5:69:99:e4:6b:3e:ac:03:ce:6e:af:76:1f:
1a:d4:4c:01:b0:d1:84:e9:ef:66:38:b4:99:dd:93:
a6:ca:19:5d:e6:fb:c4:5e:50:08:57:82:3d:d5:c8:
0d:49:f6:6e:53:95:ef:26:c0:a1:e2:84:f9:a2:a2:
a9:19:8a:b2:49:0f:66:bb:8b:e5:14:ae:00:24:e3:
d0:c4:c2:e6:fe:90:58:b1:eb:c7:0c:70:8e:7a:48:
34:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:93:20:05:72:DB:C3:F2:C5:A2:B0:7D:0E:A5:EE:CA:6F:4D:E3:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/223fbcfb-4395-34e2-884e-c466ca7c2777.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.243.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:4b:51:b6:6f:b2:1c:14:01:ef:cf:d8:7a:c5:4b:11:40:d8:
15:ea:cd:ea:89:a7:48:96:14:75:58:34:8c:9e:a5:ac:18:20:
5a:07:06:b6:28:0e:65:3f:60:75:e8:da:b4:70:b6:24:cd:b4:
01:02:a7:59:c5:13:a9:0f:2e:cc:48:af:3f:17:ac:5b:cf:8b:
bf:f0:58:22:fc:fa:c7:f2:ca:a8:75:a0:e5:9b:f2:37:18:e0:
68:b3:97:e2:05:84:d7:f2:58:d5:2a:a7:33:f4:49:f6:8c:f4:
5b:b0:96:0b:15:6c:16:a0:ab:ae:b2:c6:be:56:02:5c:29:5d:
5b:e9:a1:b1:69:4b:49:80:b7:be:e7:91:20:4f:55:a3:2a:90:
0c:23:49:eb:93:9d:d0:00:2b:b0:b6:97:d3:de:42:ef:5c:a7:
b1:b8:30:00:d2:3f:e8:76:ea:08:ab:5d:5f:26:5b:ea:00:b7:
10:80:0e:4a:a7:2e:c7:df:8c:c0:7d:cd:80:9c:99:59:c4:03:
e0:10:6b:56:24:5d:02:75:09:68:90:d7:fc:55:27:90:d2:d3:
44:95:fc:3a:a2:0c:97:12:68:37:6b:77:fd:48:8a:b0:57:d6:
3e:5f:66:47:fb:84:d4:2c:93:98:ac:b0:9b:6f:99:94:38:d0:
ca:e9:d4:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYtr4i0McD6YpR8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk
Y2Y0ZmY0MmEtMTM2ZC00ODUwLTg3MTktM2NjYWFiMDQzMmFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5sI01oU4my1n4ka2asXDfIywrmXZnAMAyL2
nVuqytQInA4rXuVkEPCyeHTbS68Sfgm07dYEnX0OFSbKfPuZHKQHRLu6Y/gSl0Pb
IIFvCgUfXAknf0yOw4p+dnIvjKHWbLInVoNANG/HVwdbj5EPTOrjrzyAKkio7syQ
xDWbEroE60jCc7mcc5qys35t+yyT1uGqeXSm1aWX/qQtyltl9buTmQqDffVpmeRr
PqwDzm6vdh8a1EwBsNGE6e9mOLSZ3ZOmyhld5vvEXlAIV4I91cgNSfZuU5XvJsCh
4oT5oqKpGYqySQ9mu4vlFK4AJOPQxMLm/pBYsevHDHCOekg0KQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNeTIAVy28PyxaKwfQ6l7spvTeM7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjIzZmJjZmItNDM5NS0z
NGUyLTg4NGUtYzQ2NmNhN2MyNzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYvPvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADFLUbZvshwUAe/P2HrFSxFA2BXqzeqJp0iWFHVYNIyepawYIFoHBrYo
DmU/YHXo2rRwtiTNtAECp1nFE6kPLsxIrz8XrFvPi7/wWCL8+sfyyqh1oOWb8jcY
4Gizl+IFhNfyWNUqpzP0SfaM9FuwlgsVbBagq66yxr5WAlwpXVvpobFpS0mAt77n
kSBPVaMqkAwjSeuTndAAK7C2l9PeQu9cp7G4MADSP+h26girXV8mW+oAtxCADkqn
LsffjMB9zYCcmVnEA+AQa1YkXQJ1CWiQ1/xVJ5DS00SV/DqiDJcSaDdrd/1IirBX
1j5fZkf7hNQsk5issJtvmZQ40Mrp1OA=
-----END CERTIFICATE-----
Generated at Tue Sep 1 05:08:03 2026 by rpki-client