
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/cd89b1c9-2750-3d92-95f8-b1676b079a58.roa
File: cd89b1c9-2750-3d92-95f8-b1676b079a58.roa (raw, json)
Hash identifier: Gjkk7kZ/H1q0bH03FYmmAeV3Xj3aJT9wcuUXyXEBZFQ=
Subject key identifier: C8:51:14:BD:04:3B:E4:43:B6:C4:84:43:00:E5:F1:06:FA:3D:70:80
Certificate issuer: /CN=d65fef8f-4cd2-4778-9158-f56f30242812
Certificate serial: 010D0C9F4328584ECBD1E01DEFDC3A860D534C00
Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/cd89b1c9-2750-3d92-95f8-b1676b079a58.roa
Signing time: Tue 11 Aug 2026 01:00:11 +0000
ROA not before: Tue 11 Aug 2026 01:00:11 +0000
ROA not after: Mon 09 Nov 2026 02:00:11 +0000
asID: 2734
IP address blocks: 98.158.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 20 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:cb:d1:e0:1d:ef:dc:3a:86:0d:53:4c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812
Validity
Not Before: Aug 11 01:00:11 2026 GMT
Not After : Nov 9 02:00:11 2026 GMT
Subject: CN=31822f2c-30cc-41be-8537-219a5cd99b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:be:62:60:53:48:f0:c3:f2:96:94:ef:b0:71:
ad:8f:4b:af:fa:90:d7:31:d7:74:2b:6e:11:37:d0:
b1:af:39:8a:da:87:da:d0:73:17:41:20:ec:f8:ca:
0c:6b:a4:61:01:8c:bc:f3:f3:6a:1e:37:d4:60:aa:
9b:d2:fb:4c:79:eb:55:e9:61:0d:29:ad:8d:9a:2d:
1f:5d:54:75:87:b6:ae:81:6e:b7:d9:d3:87:7a:ca:
d1:75:1e:ef:d8:98:0b:98:50:b1:ea:0c:83:9e:7d:
ea:d9:1b:18:72:4a:b5:a2:27:3a:35:c8:00:bb:e9:
c5:ff:f4:a9:3b:55:f7:b3:1a:9e:6a:be:34:a8:c9:
78:f8:da:95:35:3b:e4:ec:62:bc:68:d3:5b:01:b8:
ff:bc:35:e8:9e:db:82:ea:05:29:e2:ae:c9:fc:34:
25:26:9f:d2:6a:1d:ae:dc:49:31:6d:3b:98:5a:0e:
73:ba:9c:08:a4:f7:f2:c3:86:81:c2:48:5d:82:09:
cc:2d:41:77:97:42:d9:73:37:4c:53:80:19:c0:71:
45:29:7b:a4:a3:2f:1b:81:5e:0d:25:ac:fa:0e:a6:
a8:84:05:bd:c7:96:a2:d1:c1:5d:dd:9c:9d:e6:55:
78:3c:7d:2a:22:c3:c9:37:48:80:db:cf:8d:d1:74:
d8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:51:14:BD:04:3B:E4:43:B6:C4:84:43:00:E5:F1:06:FA:3D:70:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/cd89b1c9-2750-3d92-95f8-b1676b079a58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl
X509v3 Authority Key Identifier:
keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
sbgp-ipAddrBlock: critical
IPv4:
98.158.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:cb:bb:6d:5e:87:ff:20:c6:67:24:2c:a3:5d:f3:69:2d:a8:
8d:f6:69:4c:f8:a2:a1:06:1b:fe:5e:88:0b:62:9f:df:84:8a:
65:43:60:c2:85:f8:a4:da:df:0c:83:85:11:44:44:b8:7d:25:
6c:56:40:8a:d1:31:75:d6:39:29:55:47:80:41:56:39:e5:1e:
d6:52:c3:f8:e8:61:59:da:81:73:90:07:0b:39:05:b7:41:5d:
8e:8f:74:1b:2e:75:a9:d2:0a:fa:59:9e:5d:68:43:a1:5d:bc:
38:d8:5b:50:4a:d5:9b:d9:98:1c:1e:c5:49:9f:b2:ff:d4:c3:
54:b2:92:50:52:47:61:97:22:32:2e:d7:68:75:51:e3:46:b2:
f5:4c:29:ad:d4:1b:01:b5:62:88:ef:bf:f0:8e:38:65:fe:37:
76:62:66:07:38:32:16:af:6f:8d:cf:b1:06:f4:2b:f6:f3:a8:
29:a2:60:dc:eb:4b:54:ba:9f:60:51:4c:5f:e9:1f:37:99:d4:
d6:53:c7:1c:c0:79:9f:ae:53:a1:39:db:6d:67:f1:de:cf:40:
50:3d:6c:dd:e0:be:dc:eb:4a:7a:35:9f:25:d9:75:d0:b3:bf:
43:cc:51:b9:5a:81:0c:1d:7f:a6:15:f1:a4:00:7b:0b:14:04:
0a:ab:3e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 22:14:27 2026 by rpki-client