
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4323d577-23d1-3700-98c8-440a6febdcce.roa
File: 4323d577-23d1-3700-98c8-440a6febdcce.roa (raw, json)
Hash identifier: nUSFPDMJ7jxynkZvgO8Lb1qpjHY28/1CsT97qjtPYrw=
Subject key identifier: EC:E9:CA:53:A8:3F:56:A5:E8:83:60:36:56:B4:12:01:04:A3:39:16
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F7A4E8DC4E36065C4F68CAEA8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4323d577-23d1-3700-98c8-440a6febdcce.roa
Signing time: Mon 12 Oct 2026 13:00:12 +0000
ROA not before: Mon 12 Oct 2026 13:00:12 +0000
ROA not after: Sun 10 Jan 2027 14:00:12 +0000
asID: 33668
IP address blocks: 98.224.252.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 22 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7a:4e:8d:c4:e3:60:65:c4:f6:8c:ae:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Oct 12 13:00:12 2026 GMT
Not After : Jan 10 14:00:12 2027 GMT
Subject: CN=ad07ab77-c426-46b7-b5c6-1e8f1219217f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5c:14:e5:ce:6a:76:ec:14:c5:e5:c4:d7:f2:
40:26:bc:0e:bb:71:ef:28:4d:c6:8d:48:26:14:26:
4c:c2:fd:89:29:2f:e1:33:b4:94:9d:a2:2f:93:20:
0f:25:3d:7d:9c:a5:74:b5:02:8f:d8:3b:56:fd:32:
86:58:c9:68:35:e4:0e:11:2d:43:b9:a5:94:cb:b6:
1d:c2:8e:f6:42:f7:4a:04:f5:6a:06:32:93:54:6f:
60:7a:88:d1:55:1a:55:20:23:54:7c:8d:90:a7:d6:
a0:35:43:1a:7a:14:cd:d2:b9:ab:aa:6a:4d:96:a1:
7b:87:5e:ab:b9:63:0e:fa:90:66:8d:50:7a:a2:64:
0d:ee:ab:6c:75:ee:08:8d:5d:e5:3d:4e:63:8f:42:
0d:df:e1:f0:23:54:2b:f5:62:8e:33:cd:0c:99:9a:
88:18:be:6a:42:05:4b:e6:47:11:d7:cd:ae:bc:da:
0b:4b:7b:c5:f6:f8:0f:6b:08:a1:28:c0:e1:ce:5c:
c3:b9:a9:8f:55:1d:ca:cc:a4:f7:3a:2c:7b:45:82:
da:c1:49:d5:bf:a1:46:38:ae:5b:a6:af:f3:09:0b:
c1:61:8d:f2:fd:85:c4:f3:ef:83:68:62:e6:3f:87:
f2:46:b0:2f:f6:55:b6:67:d6:1c:12:c2:01:dc:cf:
5a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E9:CA:53:A8:3F:56:A5:E8:83:60:36:56:B4:12:01:04:A3:39:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4323d577-23d1-3700-98c8-440a6febdcce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.224.252.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:5f:94:11:02:d3:e6:f8:95:a0:72:ff:92:03:97:0e:08:0c:
9d:af:09:ef:83:8f:c8:4e:88:d5:a7:56:94:f6:e3:9e:49:b3:
67:24:31:6d:5d:00:46:e1:41:01:f6:3c:f6:a8:6e:4b:90:b8:
3f:1c:99:8d:0f:47:6d:21:22:89:27:01:89:d4:16:af:90:0f:
0b:be:e9:e1:77:98:f9:3d:62:56:ff:91:59:48:2a:7b:95:1a:
e8:5e:d5:15:28:0e:84:21:6b:43:fe:69:ff:e0:f5:aa:23:8d:
11:07:66:9c:9c:ff:58:f8:bb:a4:a0:56:8f:49:e5:18:49:98:
35:15:de:88:47:86:65:6a:95:77:17:6c:d1:ea:5a:3b:8a:1f:
8a:cc:b8:c1:6c:ba:12:f0:8a:ea:58:ad:ce:43:ac:59:bc:cd:
bf:c2:ae:47:a9:25:bd:0d:da:9c:8a:89:bc:c3:f6:96:16:1a:
91:3a:01:3f:bd:32:ac:dd:76:66:be:f5:1a:55:8c:09:d7:cc:
a8:a7:7a:bf:d0:1e:b5:e5:43:e6:85:a0:dc:f7:ba:76:b3:cb:
20:7a:94:f7:16:e3:4a:73:9f:10:1b:25:bb:1d:e3:3d:c0:46:
81:de:3d:3f:3b:0c:0f:2e:86:81:5f:bc:7b:64:26:ac:92:b1:
f9:ab:ba:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 12:21:15 2026 by rpki-client