
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a3aecdc-1903-3b7d-8434-92e2ec5f5ca9.roa
File: 8a3aecdc-1903-3b7d-8434-92e2ec5f5ca9.roa (raw, json)
Hash identifier: 5EY2x7S2+I9Jds62EOjBLERIPc6K/+VvaRtsM7wqDdA=
Subject key identifier: 2C:B8:1F:4D:EB:3E:E0:ED:FB:95:5F:82:01:F5:E6:1A:DA:D3:7C:D7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119FEBB7C2E528A21A7EBBC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a3aecdc-1903-3b7d-8434-92e2ec5f5ca9.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33491
IP address blocks: 98.34.10.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9f:eb:b7:c2:e5:28:a2:1a:7e:bb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=3fed606f-0f72-4b51-904b-0d38ea3461f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5a:cc:c8:47:66:2e:71:91:e2:82:fe:93:ad:
fc:f5:e0:17:e3:5d:09:71:a7:c1:8d:78:c3:82:e9:
20:df:01:53:12:62:46:65:12:44:1b:b3:fe:5b:8e:
eb:a5:6e:18:75:66:2a:5e:86:a2:56:b5:28:14:21:
c0:95:c6:05:01:5b:e8:b7:a6:35:ce:3c:a4:46:ed:
de:58:7c:5a:40:2f:33:01:ea:53:d3:54:1c:ca:d5:
c1:d1:4d:46:18:27:cd:bb:a3:96:3f:49:d9:89:dc:
13:a8:7c:e2:dd:15:70:db:ea:fa:a0:62:26:57:dd:
85:27:86:92:2d:24:05:69:30:c7:6d:ae:04:97:6a:
2a:ef:02:c7:94:32:d0:cb:ba:b6:a7:df:e7:7e:7c:
bf:e8:e5:d0:70:48:31:cf:6f:95:d6:6b:e3:b0:cf:
b1:5d:bf:7a:b4:00:aa:4a:f1:95:95:26:5c:06:a2:
86:bd:88:ac:14:0d:56:1e:2c:19:43:6b:17:af:1f:
53:3b:07:30:62:0c:8b:c2:db:ea:49:53:db:b3:2d:
68:53:6e:9e:f6:24:56:b1:04:fd:eb:3b:1b:53:99:
ae:ec:93:5e:57:63:55:8c:fa:8d:95:47:de:b9:36:
aa:60:c6:07:48:9b:a7:d8:b9:2b:30:59:07:19:94:
5d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B8:1F:4D:EB:3E:E0:ED:FB:95:5F:82:01:F5:E6:1A:DA:D3:7C:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a3aecdc-1903-3b7d-8434-92e2ec5f5ca9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.34.10.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:0e:15:ec:d7:b1:ee:23:eb:9c:ee:10:dc:31:b7:d2:91:a6:
de:03:2b:16:7f:21:79:11:8e:a9:ac:5f:1a:1b:c0:8d:9f:4c:
da:72:2a:ae:fc:2c:cb:89:58:6b:32:38:49:57:62:53:f8:b5:
ff:06:fe:ff:1a:73:50:18:6d:53:ff:62:9a:be:2b:d8:51:f1:
d4:c3:fc:57:84:c6:02:4e:6e:df:da:6c:04:d3:94:ab:66:91:
53:ed:cc:b1:6f:d4:23:aa:ba:79:7c:44:d2:57:44:51:7f:fc:
83:0a:25:1d:66:40:9f:46:21:b6:a0:f2:01:1c:8e:c6:81:ac:
98:f2:98:9c:29:0a:8b:04:9a:73:1e:c3:ea:ca:1d:19:f1:75:
54:68:f5:20:f1:39:85:05:f4:a3:a6:d6:3f:92:c9:e5:f0:d7:
cb:27:6b:f7:bd:8f:17:e4:a4:91:0e:85:e7:ea:b3:94:a6:53:
1b:02:e0:6e:3e:92:28:32:9b:c1:85:bd:ae:b1:67:6a:99:58:
eb:f4:52:0d:27:7c:e3:e9:8b:72:50:f7:96:3f:63:4d:e4:0d:
06:f6:1d:fb:37:7b:c5:19:07:db:2a:ab:a8:e6:50:3d:9d:5d:
73:fd:25:63:07:f3:67:43:a3:48:c3:1e:8b:0f:38:57:c3:f6:
23:80:13:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 14:16:32 2026 by rpki-client