
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8522e119-215f-3d92-b009-6c7586c08d9a.roa
File: 8522e119-215f-3d92-b009-6c7586c08d9a.roa (raw, json)
Hash identifier: icIoj8rtKfPhsNI6Gc5g2xzz2SeGxe2W/WN6/EhxkjE=
Subject key identifier: B1:39:3B:54:CD:65:70:20:22:00:EA:9D:C1:32:F9:FA:1B:DA:50:FB
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119E13B710CD2FE3A2606800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8522e119-215f-3d92-b009-6c7586c08d9a.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33491
IP address blocks: 98.222.232.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9e:13:b7:10:cd:2f:e3:a2:60:68:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=6e137674-1913-48f3-a962-6ed0cc06a8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cf:79:32:d0:55:67:4c:61:fd:50:dd:db:4a:
59:b6:20:8d:58:41:da:89:a1:39:a6:0c:25:4a:96:
6a:95:6f:d6:bd:b2:6e:f7:7a:f2:04:a4:5e:ab:73:
02:d2:9d:64:93:1a:da:14:07:3c:3d:ba:54:1e:e7:
77:d4:09:a4:2c:8e:32:aa:06:c7:8a:02:a8:b4:24:
b1:cf:0c:a1:21:48:37:04:d2:75:dc:91:af:d9:d3:
a9:8b:66:c4:54:b2:01:e6:f5:8e:17:2e:7f:6d:14:
16:59:d0:f7:bf:9c:8d:21:e1:87:05:87:00:87:69:
e3:51:e4:1b:98:23:af:24:ac:da:13:dd:e5:c2:01:
34:5c:ae:0d:8a:db:4b:27:f6:ba:3b:53:32:5c:eb:
5a:eb:d5:1f:e9:f9:c1:73:af:8f:7d:b4:24:62:df:
a2:6d:d4:6b:db:5f:a4:da:d0:f7:1c:6b:a9:83:6c:
7e:9b:8a:6c:3b:72:87:2d:88:e6:32:7e:fe:6a:08:
db:33:2d:d1:9c:ed:64:fe:7f:ce:29:7f:8c:fd:dc:
47:28:54:f1:c9:a9:0b:4d:7a:86:7d:21:9a:da:7c:
42:58:85:1a:d8:e2:06:7a:27:a9:d1:d6:6f:8e:8f:
d4:5c:87:b3:08:8b:7e:0e:97:2e:95:cc:93:e1:e3:
d0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:39:3B:54:CD:65:70:20:22:00:EA:9D:C1:32:F9:FA:1B:DA:50:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8522e119-215f-3d92-b009-6c7586c08d9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.222.232.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cf:d6:37:4d:0a:71:93:ac:0f:9b:04:dc:c3:d1:a2:f4:ab:7c:
33:cd:c9:22:57:b7:d6:cf:ac:52:56:38:86:d3:f8:5c:83:2d:
f9:7f:3f:05:33:65:98:c9:55:af:93:48:d8:f7:08:d9:04:13:
07:8e:ca:7f:c2:64:a3:81:1f:9f:a2:11:34:c9:62:dd:d7:c0:
64:b4:de:65:75:f2:a2:fd:29:40:f3:90:0e:d3:24:71:59:c7:
0b:e7:0e:a5:6f:07:98:0b:11:22:5a:97:b1:28:7f:d6:0b:a6:
b2:1a:2e:12:82:7b:f6:b0:4a:bc:0a:a4:f6:93:00:df:d2:a7:
8a:43:29:43:1f:09:39:b4:17:ff:ba:ec:e1:ce:8b:85:d1:2a:
4b:f3:e0:27:e8:cb:ca:2a:18:be:f9:db:bc:d7:2f:86:a9:6e:
c9:67:de:78:f8:aa:14:4c:7b:02:d7:7d:31:a7:33:6b:13:96:
63:8a:69:26:be:a9:00:3c:42:16:25:51:2d:c6:fb:5b:1a:49:
20:81:cf:57:45:8f:14:27:f2:2f:c5:dc:72:44:ba:9f:4d:73:
fb:c4:37:33:6f:89:fa:d6:df:af:e8:dc:e6:23:75:cd:44:7f:
63:c9:ba:94:de:f5:5a:2a:ce:4b:7f:98:b2:5d:5b:cb:27:67:
eb:71:d1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 14:25:11 2026 by rpki-client