
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aab2c1f2-0fe5-32b6-afd2-611d9ed3ce0d.roa
File: aab2c1f2-0fe5-32b6-afd2-611d9ed3ce0d.roa (raw, json)
Hash identifier: EEztIcMN19ZmzeQVplOmFsyQ3U3aSUqtAqnAfWrZ8vk=
Subject key identifier: 07:9C:D7:8A:AA:5E:FE:32:9E:62:4C:7D:83:DC:47:A3:2F:68:07:AE
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F49827152D081D6F974DF8B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aab2c1f2-0fe5-32b6-afd2-611d9ed3ce0d.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 33657
IP address blocks: 98.252.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 24 Oct 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:82:71:52:d0:81:d6:f9:74:df:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=fde71046-1e1d-4273-8c89-63d8cc0d71a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b3:4a:6f:2c:3a:57:42:f6:00:b8:57:ad:de:
3f:6c:54:ca:28:cb:a5:01:76:ea:fd:fc:60:b9:cf:
e0:a9:a1:1d:e9:bd:d4:82:95:fe:80:13:f1:fe:64:
0c:48:40:aa:8b:98:25:91:97:dd:e5:f5:f0:c5:c9:
a5:d2:5e:07:86:68:cc:af:3f:59:2e:b2:7a:1b:63:
94:a1:29:b1:8f:a7:0f:ac:c2:b9:a2:18:97:22:01:
c5:19:40:13:18:d4:1d:2a:79:96:c8:8e:63:e0:d3:
7b:fb:c2:61:33:db:ca:c6:0c:7e:6f:4d:a0:c4:bf:
bc:7b:ac:b0:3e:28:04:e6:dd:79:e3:99:99:a3:42:
5f:cb:08:b1:02:42:28:5e:b3:96:f1:dc:3a:81:60:
51:46:14:dd:fc:0c:ff:60:f3:32:dd:47:cc:59:d1:
6e:8b:b4:0c:bb:48:47:07:85:81:89:95:ef:e4:93:
b6:09:04:83:29:e4:ea:e9:6e:b0:b1:6e:e2:90:9a:
1c:ce:b5:7d:33:e2:63:cd:da:82:09:c5:30:1d:49:
58:5c:32:07:f8:1c:bf:b9:cc:70:ea:38:c5:b5:7e:
67:79:60:cc:27:5f:f2:a1:c3:f3:23:29:ce:3f:6c:
b3:29:be:74:34:f0:db:74:35:3d:bf:cd:21:53:ff:
1c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:9C:D7:8A:AA:5E:FE:32:9E:62:4C:7D:83:DC:47:A3:2F:68:07:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aab2c1f2-0fe5-32b6-afd2-611d9ed3ce0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.252.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:4c:d9:98:7e:cd:35:68:c4:f6:92:34:8f:85:86:94:39:8d:
c9:a4:87:fa:36:60:f9:eb:74:e0:d5:ae:6f:5b:51:cb:ad:84:
a3:13:39:b2:36:e0:b2:8e:cd:65:78:65:1f:1f:e7:31:14:07:
c4:10:c4:59:ac:0c:75:55:81:4d:23:db:e2:10:fc:1b:03:5a:
a6:8c:a7:ce:62:66:a1:8e:5c:ad:67:b7:57:70:41:47:05:83:
9c:c2:96:c5:a7:62:16:7f:2b:aa:b3:75:dd:85:8c:6f:dc:62:
dc:db:6b:fb:43:96:0f:e0:32:b6:00:e9:e0:d2:97:19:5a:1f:
72:04:97:a2:11:44:ba:92:35:ee:57:66:8e:ef:35:da:cf:c8:
3d:20:23:6d:91:ae:16:5f:88:65:74:a2:76:c8:f3:28:7a:05:
90:3a:d5:3e:52:96:f0:60:ef:f7:73:61:73:d0:5e:2a:6f:31:
37:eb:3a:2a:9a:38:9c:9d:d0:78:3a:c9:fe:3e:55:6e:40:dd:
6a:ea:21:22:f7:ed:6e:e5:d2:26:59:81:c9:8c:20:71:8a:92:
ed:f9:b7:43:12:c8:cb:16:32:10:47:8e:c2:43:71:4e:57:82:
56:be:52:80:c4:ad:b9:9a:9a:70:d3:73:f8:2b:fa:4c:3e:98:
9a:03:09:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 10:01:19 2026 by rpki-client