
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4afae1a1-22e6-3d9a-9b58-12a18aeb04f6.roa
File: 4afae1a1-22e6-3d9a-9b58-12a18aeb04f6.roa (raw, json)
Hash identifier: 5YQHLOwds7+8nVgbJoYW12SNHW0HZg8xFeV9CsIKQtc=
Subject key identifier: A3:CD:D2:D2:DA:A3:22:92:21:0A:C4:A4:5B:80:F6:3C:3D:FB:59:CC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119E18F54D45E1B2996009C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4afae1a1-22e6-3d9a-9b58-12a18aeb04f6.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33491
IP address blocks: 98.227.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 08 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9e:18:f5:4d:45:e1:b2:99:60:09:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=3a442dc2-8bd4-4cb8-b4da-ee6cea42fdeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:40:f7:cf:c8:ac:97:79:dc:ae:ed:87:e8:ed:
e4:42:87:fc:a5:db:2f:1a:e9:b1:fb:57:5a:f0:4c:
87:10:4f:76:79:90:9e:d4:a7:f0:3a:77:a8:1e:4e:
7f:af:3b:a5:b4:49:f3:cb:48:73:78:e4:70:e1:09:
1b:26:75:0b:e2:3d:bb:16:b9:d4:b0:92:c6:0d:e1:
f0:6c:eb:2b:2c:08:4a:b2:88:3b:51:f8:99:23:43:
88:c9:47:94:6e:69:09:49:c9:3a:12:e3:c1:94:32:
be:71:fc:e6:28:42:1e:02:60:84:14:66:13:3b:3e:
48:d7:6f:c2:6f:0c:44:f1:9a:17:a9:40:e8:29:91:
26:2c:b0:d2:7d:6e:05:c6:fb:95:21:fc:d1:11:23:
f9:84:08:0d:2d:4f:6d:a7:d1:c2:fa:2f:f3:e0:99:
8d:79:5f:da:90:4c:7d:fa:9a:d7:41:6a:7e:c2:f9:
ad:95:2e:11:60:ed:ee:d3:9f:ef:7d:33:e7:ed:70:
db:8a:6e:5c:73:95:75:e2:62:df:3c:e2:bb:40:75:
25:fd:70:ac:31:e3:36:66:40:5b:70:c9:4b:5d:dc:
33:51:42:e7:a0:c6:08:8c:db:0d:c4:80:bd:6c:81:
f3:72:24:8d:c3:89:a0:0b:25:43:a3:b7:ae:54:a9:
9b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CD:D2:D2:DA:A3:22:92:21:0A:C4:A4:5B:80:F6:3C:3D:FB:59:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4afae1a1-22e6-3d9a-9b58-12a18aeb04f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.227.90.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:56:f9:6e:b5:80:5b:51:42:6a:05:7e:96:d9:31:65:5d:ba:
48:cc:01:a9:67:1f:d5:03:b3:0c:4b:c0:fa:5d:ee:8c:ec:f5:
fa:ea:43:11:c8:c5:5e:e3:10:63:51:11:0d:9d:dd:60:ca:e1:
75:eb:c4:ad:83:71:a0:cc:00:7c:34:73:83:f4:72:ba:00:75:
9a:14:3a:e5:97:b0:1b:79:7a:7d:ff:21:84:ae:df:8d:60:9a:
5c:78:45:e3:11:86:7b:42:8e:23:6e:2d:73:18:a5:aa:e8:9a:
cb:9e:4a:dc:7b:2c:5c:e9:1e:5f:0b:fe:83:a6:19:15:63:3c:
07:11:c1:0d:89:1f:f2:23:9d:8f:53:db:f1:ed:46:aa:af:b8:
d4:d4:3b:9f:11:20:27:5c:2a:57:89:84:59:ea:ef:a8:1e:03:
0a:5c:8a:03:8c:3c:6d:d7:b0:55:b8:c3:de:4e:f5:98:03:d6:
05:27:36:5d:61:c6:4b:4f:4f:b9:bd:f3:50:f7:8b:90:06:59:
84:34:aa:7b:f4:db:d2:a9:77:c6:49:ef:6b:cc:99:3b:f4:db:
b5:f4:a5:05:c9:09:c9:e7:eb:c0:6f:eb:03:25:a0:20:cf:10:
a7:64:0d:8b:e8:cf:49:35:5f:f1:8f:31:47:00:ef:95:16:ed:
8e:b4:01:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 16:56:33 2026 by rpki-client