
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b35d8a6-15a2-3446-9d99-1b1dce955fb0.roa
File: 3b35d8a6-15a2-3446-9d99-1b1dce955fb0.roa (raw, json)
Hash identifier: VJmKV2+Vr+LAmhJT5gnMlwhD/SMY+ThKNGoiQY62+oI=
Subject key identifier: F8:05:3B:7E:1B:50:48:76:C9:FC:E7:FC:E4:0E:7D:EE:17:37:2D:E4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F7A4FF82FE71F9A7D6DA36600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b35d8a6-15a2-3446-9d99-1b1dce955fb0.roa
Signing time: Mon 12 Oct 2026 13:00:12 +0000
ROA not before: Mon 12 Oct 2026 13:00:12 +0000
ROA not after: Sun 10 Jan 2027 14:00:12 +0000
asID: 33662
IP address blocks: 98.198.156.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 22 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7a:4f:f8:2f:e7:1f:9a:7d:6d:a3:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Oct 12 13:00:12 2026 GMT
Not After : Jan 10 14:00:12 2027 GMT
Subject: CN=3451ea24-21ac-4540-9ee7-c9a4ddc552c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5d:73:37:8a:ae:44:d1:8a:e8:23:fa:38:29:
8b:45:21:dc:6a:f3:11:9c:c9:0c:d0:4d:9c:e9:c3:
95:31:10:55:fd:02:b7:83:35:7f:9d:c6:85:dc:2a:
f3:ca:e7:75:b6:3d:9a:89:74:5f:d6:94:2e:15:3a:
16:88:21:37:33:eb:c3:51:78:70:5b:bd:c2:ee:1a:
2b:f1:ca:10:19:0f:94:c8:52:aa:48:d4:21:92:fb:
db:0a:19:b0:93:24:fe:67:7f:5d:34:74:ed:c4:7e:
e7:50:29:04:02:27:b6:65:61:94:0e:d3:66:d2:06:
e9:94:12:8f:2a:b2:18:38:50:30:88:f2:92:c3:23:
d3:60:04:e9:d2:26:57:6d:92:1a:d4:16:29:01:b0:
18:47:e6:23:b1:fe:75:6b:f7:6d:d0:d3:ad:da:12:
32:fc:a7:f3:e9:52:0d:69:94:9b:7e:07:73:ab:ac:
8a:53:f8:25:f7:d3:37:58:d0:51:73:b7:6f:0b:44:
a9:00:44:34:a6:9b:d7:3a:9a:33:5b:ea:17:e1:32:
f9:f6:13:6a:1c:9b:f2:fd:9b:53:de:e7:d3:75:fe:
e0:30:4c:e6:9d:ea:0d:48:cb:ca:9f:93:b1:7b:8b:
22:ed:4b:ec:ac:84:45:a0:b6:84:e9:32:89:68:6f:
10:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:05:3B:7E:1B:50:48:76:C9:FC:E7:FC:E4:0E:7D:EE:17:37:2D:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b35d8a6-15a2-3446-9d99-1b1dce955fb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.198.156.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c5:c3:31:8f:62:06:aa:3b:0d:68:83:62:93:d9:4b:98:46:e7:
01:85:9a:4a:05:2f:85:de:78:51:d9:a2:ef:20:8f:73:e9:7b:
42:ac:90:0d:c8:9a:5a:11:76:20:d8:17:ef:fa:2a:03:ef:de:
31:87:be:ad:07:1c:f2:c3:75:be:72:73:4d:26:b1:a3:07:19:
b2:24:45:d3:5c:da:56:79:1f:55:e2:f7:d0:db:a9:2d:95:bf:
6d:d6:ca:b9:b9:0b:e9:28:8d:a1:ea:b8:25:7b:ed:7e:9b:f3:
b6:48:b3:2c:37:93:4a:fd:7c:9c:1f:09:50:6e:57:5b:16:9e:
be:31:e9:8a:fa:d4:54:a5:3a:83:6e:b2:e2:c3:70:9f:dd:d0:
46:fc:f0:3a:fa:39:91:1c:57:73:2b:9f:87:a4:86:82:7e:6a:
21:b6:00:d0:b1:3a:29:3a:85:da:33:c9:df:d2:05:d1:60:91:
9f:bc:20:e4:62:4c:a5:48:2d:ba:b7:c7:4d:af:86:dc:bd:2c:
c2:7a:b3:a4:29:87:99:e3:9e:cf:d4:ef:a3:e4:5f:18:6f:b4:
d7:e1:8e:72:2c:62:88:3a:ff:78:8e:93:55:3c:c4:cf:89:22:
5b:96:75:55:7c:c9:d3:e2:ec:91:43:a2:b2:1a:8c:4a:02:3d:
a7:11:83:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 01:43:56 2026 by rpki-client