
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a30333a-39df-3830-ac0d-5043bfefb5f8.roa
File: 5a30333a-39df-3830-ac0d-5043bfefb5f8.roa (raw, json)
Hash identifier: wyFuZCKucn3cd3PnC79xNmFAqVGo7I9KzWRz4IsB4/Y=
Subject key identifier: 40:98:72:81:D8:C7:47:8D:C6:12:27:56:DD:20:9A:DC:A1:31:C0:4E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584E6F3D2E0D792BFD4166B4D880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a30333a-39df-3830-ac0d-5043bfefb5f8.roa
Signing time: Wed 08 Jul 2026 21:00:12 +0000
ROA not before: Wed 08 Jul 2026 21:00:12 +0000
ROA not after: Tue 06 Oct 2026 21:00:12 +0000
asID: 33491
IP address blocks: 98.212.128.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 24 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:6f:3d:2e:0d:79:2b:fd:41:66:b4:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jul 8 21:00:12 2026 GMT
Not After : Oct 6 21:00:12 2026 GMT
Subject: CN=9a9ee340-30ee-470a-857e-5f5086920c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:43:20:dc:2c:77:35:12:78:04:29:48:4f:9d:
be:84:b5:f9:c8:a7:7e:b9:ca:3e:92:4c:98:f0:1d:
0a:ad:4c:e3:09:40:ce:1c:fa:93:2b:4b:27:02:6e:
70:5d:1b:7b:cb:d9:c7:38:87:c2:76:ae:37:05:43:
51:1e:73:dd:ad:d1:ba:19:f2:4d:a0:1c:d4:90:59:
08:e8:b1:1d:d0:2a:23:71:20:76:ee:bf:1d:7c:19:
1a:51:3e:3b:97:8d:09:1b:2a:37:89:a3:2f:9d:46:
22:2c:1c:da:16:fa:fc:44:cc:4f:da:d6:94:35:9a:
cf:2a:1e:99:32:1a:a6:3c:80:5e:c5:7c:44:88:12:
54:40:17:af:3b:be:90:3c:3e:25:bb:8d:56:13:e0:
d1:8b:8c:c3:42:42:84:a7:bf:6f:b8:43:88:0e:55:
4e:81:c6:19:d7:20:da:46:6e:37:ab:a0:b8:c6:9b:
7e:bb:0e:23:ab:41:84:1b:1b:00:ca:8b:47:76:45:
cb:ed:cf:a4:df:4c:76:4e:5b:ad:1c:fa:26:76:1c:
04:50:6f:0d:4d:d2:bd:b8:c2:dc:f5:37:7a:7a:14:
87:ca:a2:21:67:53:b7:74:af:99:a9:00:e9:b3:bc:
d0:95:a7:ed:55:51:55:4f:18:b1:24:f5:c7:19:2e:
c6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:98:72:81:D8:C7:47:8D:C6:12:27:56:DD:20:9A:DC:A1:31:C0:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a30333a-39df-3830-ac0d-5043bfefb5f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.212.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:e0:1f:db:76:ab:81:9a:07:90:80:32:09:7e:81:2c:e4:38:
6a:62:df:07:ff:00:eb:e6:24:97:15:de:9f:06:7f:88:47:a6:
08:c1:98:a6:bb:2d:37:2c:bf:b4:0a:4f:64:e4:15:0f:99:26:
68:c8:8f:6d:77:7d:fe:ff:2d:dc:f2:37:c1:21:a0:92:8a:71:
8d:c7:58:ed:d1:7d:01:40:07:2c:c2:54:0f:85:fc:9f:fd:f4:
f4:a1:55:27:4d:f9:ff:96:a5:f3:95:dc:50:e6:cf:15:4b:5a:
f7:4d:25:9d:f3:36:43:37:52:9f:06:d8:35:11:ad:9f:89:b2:
78:f0:49:5b:f0:27:7c:e1:d9:81:43:88:da:ce:f4:3c:6f:98:
e6:bc:21:a5:4e:89:08:d8:38:12:77:e8:c8:23:d4:9a:a1:9c:
40:a6:7e:d7:a8:77:b5:f4:e6:a3:84:e6:39:a7:d1:de:e6:4d:
a8:77:1f:b5:f9:ac:d5:a2:d2:57:07:ea:d9:5c:c4:41:c0:45:
07:86:4f:6f:13:35:a7:8b:da:63:e2:68:8b:e2:3e:18:6d:a3:
4e:44:bc:50:99:d8:5a:8f:7b:1a:59:46:f3:e8:f9:7a:e5:89:
14:52:be:ff:ed:e6:54:df:d2:29:0e:d9:cb:fd:31:f3:bc:1d:
cc:e5:2e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 03:10:16 2026 by rpki-client