
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/84b35f65-01c8-3c39-aea2-27cb6494dff4.roa
File: 84b35f65-01c8-3c39-aea2-27cb6494dff4.roa (raw, json)
Hash identifier: 3Xw9eix3WHGdQlA7NFUZ32LF5eWUjWKojE3Gbmpr+Ec=
Subject key identifier: A8:BC:8C:69:4C:47:EB:B3:0E:14:F0:91:D7:4B:68:74:43:04:BE:27
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119E12DB880F99ECD557C680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/84b35f65-01c8-3c39-aea2-27cb6494dff4.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33491
IP address blocks: 98.222.122.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9e:12:db:88:0f:99:ec:d5:57:c6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=73c6ebce-7219-4605-a06f-9096dd3d177e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:93:82:20:fb:30:c5:64:9f:79:ac:75:e2:25:
0c:2c:03:b5:ad:b3:d3:77:aa:de:70:88:cc:ea:4c:
71:4c:56:5f:27:8a:bf:6a:3a:7d:c8:c8:65:20:0c:
35:94:ad:b0:c8:bd:56:c9:01:2e:28:27:ec:77:96:
ac:1b:70:27:d0:51:67:ff:2c:9b:21:d1:9f:f5:13:
83:e1:22:b6:7b:e7:31:3a:25:1b:0d:e7:1d:a2:0d:
aa:ed:76:a6:d7:91:7c:b9:ba:b5:09:30:6e:3b:60:
87:19:1d:61:04:49:d3:39:57:27:82:4c:a6:99:d7:
6f:f3:29:5f:a6:66:8a:5d:1d:5d:3b:35:4d:06:95:
f5:4f:4f:d9:6e:6d:80:72:51:e6:b3:ef:3e:49:b9:
4e:ba:44:94:2f:a6:f6:85:c5:63:30:52:99:96:17:
84:d4:ec:aa:f2:26:79:10:e3:05:55:ad:18:74:3a:
5c:36:68:e3:ee:6d:f6:aa:96:8b:df:30:d2:8f:92:
46:12:cb:49:21:23:1f:62:05:dd:42:e7:55:7b:44:
12:b4:cc:0a:c0:21:67:24:53:3c:33:7b:15:b2:f4:
7d:d9:da:a1:e9:0b:d0:16:61:32:be:0f:34:fb:26:
1a:e8:5b:d0:1a:44:4f:22:76:4f:d8:35:f5:03:a2:
d5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BC:8C:69:4C:47:EB:B3:0E:14:F0:91:D7:4B:68:74:43:04:BE:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/84b35f65-01c8-3c39-aea2-27cb6494dff4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.222.122.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cd:89:14:9a:18:50:f2:14:04:c4:67:19:fe:6e:fd:31:2a:41:
a6:08:ea:82:b5:12:bb:77:b1:c9:5e:f1:51:77:ef:4a:c1:23:
45:bd:06:b3:65:45:a2:75:b2:58:39:be:3b:25:e2:93:e4:42:
29:f4:a7:94:46:ea:71:02:05:1f:7a:35:e4:c1:a8:3e:4e:98:
4a:6b:4f:0b:34:fa:b6:30:9a:29:99:db:40:9f:24:db:20:f6:
be:a5:eb:4a:aa:6e:b5:a2:53:89:fa:ce:9a:c2:3e:8b:7f:67:
e8:67:ad:54:84:5e:5a:99:c3:e5:97:63:6e:1e:d1:a9:9a:4a:
45:6c:f1:ad:7a:81:6c:74:6a:23:8f:20:68:a4:e7:d6:5c:49:
49:08:df:47:46:82:33:ef:ab:98:9d:98:d2:48:84:eb:60:59:
72:a8:0d:a0:ed:49:60:85:a2:71:7e:d3:75:71:34:ae:6e:e0:
bb:46:48:97:68:43:59:54:35:63:48:6a:08:26:8c:c2:8b:d5:
a8:d0:39:32:f3:69:f7:55:59:56:d5:cd:91:1f:8b:99:93:c4:
92:2a:62:bb:9c:ef:d0:9c:35:6d:5a:90:5e:8e:b0:a3:52:01:
f8:dd:6b:a0:31:da:5e:90:89:b8:e6:5b:6b:62:a9:d9:d3:37:
c8:7d:4f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 11:12:00 2026 by rpki-client