
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/985e617e-601a-3b13-8030-8bd7f1806922.roa
File: 985e617e-601a-3b13-8030-8bd7f1806922.roa (raw, json)
Hash identifier: FQ13t5tHve8Ayt2BUMDlwpASGm5cN+6kA8pVxCe4Xms=
Subject key identifier: 95:38:6D:A8:7E:F4:89:F0:A9:38:3C:AE:77:52:1D:F4:9C:3F:7A:C8
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584E36003FB0DDF1DAC77E3F6380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/985e617e-601a-3b13-8030-8bd7f1806922.roa
Signing time: Thu 18 Jun 2026 09:00:12 +0000
ROA not before: Thu 18 Jun 2026 09:00:12 +0000
ROA not after: Wed 16 Sep 2026 09:00:12 +0000
asID: 33662
IP address blocks: 98.201.208.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 24 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:36:00:3f:b0:dd:f1:da:c7:7e:3f:63:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jun 18 09:00:12 2026 GMT
Not After : Sep 16 09:00:12 2026 GMT
Subject: CN=9aea3fa5-b406-4711-8555-ea7b299d0592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:16:1f:f0:a6:49:df:c3:b5:c1:7d:8d:dc:e8:
f9:86:a0:00:88:64:54:50:4b:9d:5a:23:8f:d7:13:
e6:cd:11:b3:8c:ea:bf:3f:89:e1:a1:94:61:3a:da:
06:f2:60:1b:8c:cc:fd:94:25:42:0e:03:9a:da:77:
d5:71:7c:45:e7:69:86:99:6c:23:19:c8:dc:58:1f:
78:69:49:0b:81:c9:b1:2d:04:cb:02:fa:d2:c4:b6:
a0:b8:b9:5a:d8:6c:af:d5:6e:9f:df:4c:09:08:7e:
8e:47:ad:45:ca:b4:37:d9:c9:f2:45:db:f5:b6:e1:
51:1c:62:04:47:11:56:87:38:98:32:f7:cf:85:f0:
be:8b:3e:82:5f:64:df:70:cc:23:aa:cf:94:86:95:
91:d1:1e:60:3e:2e:a5:49:3b:d4:38:5a:d9:fc:d9:
51:94:8b:fa:33:c0:de:23:63:71:d9:16:c2:98:74:
21:f8:67:78:59:70:f1:60:e4:65:39:2c:e5:19:0f:
7c:bc:cb:40:22:e4:fb:c7:ae:13:04:3d:3c:6c:41:
da:ad:43:da:09:83:9a:d7:da:89:bb:5b:9e:c1:5e:
c9:3b:3f:03:48:1b:98:35:cf:33:a2:c0:0e:48:1a:
b3:7b:f8:c2:34:97:20:d8:b4:78:a9:b7:68:5c:dd:
84:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:38:6D:A8:7E:F4:89:F0:A9:38:3C:AE:77:52:1D:F4:9C:3F:7A:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/985e617e-601a-3b13-8030-8bd7f1806922.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.201.208.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:42:20:92:99:13:0a:e9:75:46:0d:99:77:88:f3:82:ef:18:
ce:2b:5f:d7:7f:1e:ea:70:96:c7:52:d3:9f:b0:70:56:02:4b:
7f:2a:ac:14:24:73:ed:0d:91:05:c3:88:47:a1:30:a5:f9:f4:
4a:46:0a:28:0a:0e:85:9a:0d:28:88:f8:29:0a:c8:1f:e7:19:
3b:d6:ab:b5:3c:fc:87:b6:b5:28:c4:ce:b3:d8:42:f8:f2:32:
a8:db:22:25:4a:94:b4:bf:0a:b8:90:93:1a:ff:7e:1f:a4:2b:
db:4e:75:05:5d:c7:bf:26:1e:a8:c1:7e:42:c0:87:9c:67:da:
70:06:aa:17:18:a6:9d:8d:28:9b:b4:37:3e:85:d2:ba:a0:dd:
d9:74:72:0a:68:d7:3d:79:d8:6d:7f:63:22:8a:05:23:3a:43:
45:d0:f6:8b:5d:b3:f5:6e:2b:01:17:76:25:7b:8f:4c:35:d1:
46:3a:99:5a:62:00:03:21:dc:68:ee:fa:d6:d4:69:bd:b8:65:
80:9c:7c:6e:64:e8:be:c1:43:39:f9:52:8f:46:df:ee:d2:42:
7a:f3:96:1f:f4:06:80:77:a4:a0:93:67:ae:5f:aa:1c:3f:15:
96:0d:6b:47:d6:e9:4e:48:0e:e5:aa:b9:c2:40:2d:c5:51:f0:
a3:9e:4d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:45:26 2026 by rpki-client