
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c89f158-b76e-3812-857b-6c7ca1429a96.roa
File: 8c89f158-b76e-3812-857b-6c7ca1429a96.roa (raw, json)
Hash identifier: o+SkOXbtBbNbfQ99/bM+dPC8lrKA/FsRYbraFqubAn0=
Subject key identifier: 6A:42:D1:BC:D1:46:C4:A7:2D:20:A9:63:05:58:E7:5C:F2:E3:55:0C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584ED863FDDACBF24A8AA9089A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c89f158-b76e-3812-857b-6c7ca1429a96.roa
Signing time: Sat 15 Aug 2026 13:00:11 +0000
ROA not before: Sat 15 Aug 2026 13:00:11 +0000
ROA not after: Fri 13 Nov 2026 14:00:11 +0000
asID: 33668
IP address blocks: 98.209.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 02 Sep 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d8:63:fd:da:cb:f2:4a:8a:a9:08:9a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Aug 15 13:00:11 2026 GMT
Not After : Nov 13 14:00:11 2026 GMT
Subject: CN=a1c506d7-17a6-4d54-85f6-7e8d031ec029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d3:85:08:ef:ae:38:6d:85:f8:47:95:46:fa:
61:df:af:29:d5:84:18:b5:14:a0:90:85:a6:5f:bf:
c7:09:33:25:a8:e3:f0:ef:d1:69:79:99:d4:ed:5b:
8f:9a:54:a1:df:15:be:d0:3d:e5:1a:46:65:15:55:
ad:04:ec:d3:0a:e5:0e:a0:71:d7:97:d8:65:45:92:
b9:0d:de:2e:ba:0a:f8:0f:78:eb:2e:f4:d7:6c:83:
9b:51:0f:65:71:eb:da:6c:33:57:ce:b7:a7:67:f0:
f9:40:89:39:a8:d7:e8:d0:38:74:53:b6:78:e6:56:
b6:35:95:33:9f:54:44:d3:27:9e:5a:8b:6a:3e:99:
25:b1:a2:45:b8:0d:8d:d8:a5:b5:39:99:22:81:59:
15:2b:d5:0f:dd:75:1a:ed:66:80:2b:92:3c:cc:cf:
10:6a:de:82:58:4b:3d:6d:bc:a1:33:32:c6:dc:e0:
75:29:8d:af:f0:9b:01:9e:43:82:c9:85:db:48:21:
65:0a:04:d7:f8:23:6c:1b:d7:d4:9f:a6:07:2a:fc:
ae:e4:e2:29:58:26:d3:14:81:01:a9:51:a8:c1:d2:
e7:bd:8f:0f:d5:6a:20:d3:44:cf:57:af:dc:d7:2b:
e5:c4:50:d7:d6:7a:6d:19:4a:2a:fe:8b:9d:9f:ec:
90:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:42:D1:BC:D1:46:C4:A7:2D:20:A9:63:05:58:E7:5C:F2:E3:55:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c89f158-b76e-3812-857b-6c7ca1429a96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.209.185.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d9:06:0f:90:a3:14:83:20:38:3f:ae:63:3e:4c:ba:c3:68:31:
ff:c1:2f:50:d9:b2:b4:b5:23:64:3a:53:83:81:97:fe:da:97:
e3:22:b7:8c:66:e6:fc:18:e6:ff:f3:35:54:4d:4d:99:f6:1f:
7e:dd:64:a0:28:64:0c:99:10:9a:64:9e:16:fc:59:8d:66:b1:
13:5e:90:20:0f:53:28:a2:57:66:cf:e1:a7:f5:cf:df:a2:7e:
5c:dd:02:df:ec:7e:58:a9:9d:6b:a0:33:f5:e3:60:af:1f:06:
52:63:14:6a:03:e9:47:f1:a5:08:b6:30:aa:60:68:86:4a:64:
32:26:31:1d:9a:40:7a:cf:26:d1:65:04:af:15:1e:50:ae:bb:
02:eb:20:90:67:d0:c6:50:85:0d:4e:65:c1:32:01:7e:6c:2d:
fd:40:b6:8a:a6:c4:08:96:a4:72:90:18:40:12:60:8e:30:fe:
13:81:b8:88:21:c7:6a:91:a9:0e:98:dd:40:6d:97:29:08:8d:
83:97:4b:9c:a1:13:ce:56:85:9c:03:12:59:87:11:5d:bc:b6:
78:51:d2:df:92:55:16:1c:a7:9d:75:1b:f5:d4:9b:d2:3e:f6:
d9:ea:f9:fa:0f:77:db:00:3f:3d:b9:99:28:d7:76:15:9d:8e:
8d:32:ca:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:11:35 2026 by rpki-client