
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e4ddfaed-7011-395c-a7c7-eea1662f8240.roa
File: e4ddfaed-7011-395c-a7c7-eea1662f8240.roa (raw, json)
Hash identifier: xpj55a62DWg/6z5f7i6f2oH50pEkS6CttyoICl3jA1M=
Subject key identifier: B5:ED:D8:5A:14:FF:7A:4C:0D:EF:B4:DD:A6:63:B3:62:63:9D:C1:60
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584ED0020B6E2435FE7336D4FD00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e4ddfaed-7011-395c-a7c7-eea1662f8240.roa
Signing time: Wed 12 Aug 2026 13:00:12 +0000
ROA not before: Wed 12 Aug 2026 13:00:12 +0000
ROA not after: Tue 10 Nov 2026 14:00:12 +0000
asID: 7029
IP address blocks: 98.23.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 28 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d0:02:0b:6e:24:35:fe:73:36:d4:fd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Aug 12 13:00:12 2026 GMT
Not After : Nov 10 14:00:12 2026 GMT
Subject: CN=5311b5bf-e424-47a2-9652-d12d88bc404e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:db:ac:08:63:bc:98:ff:79:12:0a:fd:c1:2a:
6b:b8:b6:11:af:4a:2d:23:7c:07:f9:9c:05:ff:43:
99:23:32:10:96:82:e7:10:c2:d2:7f:16:38:ea:64:
b9:e8:d5:51:23:69:d5:12:26:e4:d3:79:d7:d7:12:
26:44:97:d6:07:6b:14:3a:c1:24:14:f5:54:9b:c0:
a8:ef:59:6d:35:ac:5e:c4:d9:cb:99:44:12:c5:50:
35:a5:34:f9:ea:52:89:97:9f:6d:e8:86:21:f8:6e:
f8:1b:39:a1:72:8f:90:88:0f:a6:35:cd:3b:33:3e:
f3:04:8b:5e:68:69:85:f0:78:62:da:8b:92:0e:eb:
34:18:93:5f:58:e6:8d:8d:ac:d8:ea:e9:65:54:5e:
c7:d2:ca:a8:12:93:4c:e7:66:eb:d6:a7:54:d6:56:
cd:94:ce:7e:94:a6:fb:cf:83:a5:e9:20:e0:ad:ec:
52:90:97:59:ba:a0:dc:1b:0a:f5:7b:7d:67:57:75:
c7:b0:83:c0:79:ae:a5:15:b0:52:7a:80:e3:aa:07:
a8:fd:0b:7e:44:42:37:02:c7:9a:09:8e:3a:3f:5b:
47:d2:9d:c9:56:1b:c9:a6:b9:4c:c2:35:5f:e9:da:
49:5c:06:f4:44:d0:23:d6:b1:02:78:79:17:10:c5:
b1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:ED:D8:5A:14:FF:7A:4C:0D:EF:B4:DD:A6:63:B3:62:63:9D:C1:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e4ddfaed-7011-395c-a7c7-eea1662f8240.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.23.233.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:66:07:73:70:7f:aa:ca:12:5f:93:f5:c8:50:cc:fc:64:cc:
1c:36:e4:96:54:ad:d4:bc:95:11:91:27:9d:45:be:0e:6e:10:
f8:62:37:a0:db:90:6a:f6:6c:65:fb:5d:eb:8b:9f:dd:f3:05:
6b:2e:ef:8b:b0:4a:c1:9f:75:44:ad:72:a5:eb:07:1d:02:11:
20:1b:75:5e:88:67:b2:3c:69:69:02:ec:38:16:6a:48:90:b0:
ff:f9:58:e5:dc:be:f9:84:b3:a3:cf:d8:1c:99:00:43:5a:94:
22:a8:1c:c1:b3:9f:ff:30:76:a8:8d:dc:53:e4:c0:57:cf:dc:
6c:15:f8:41:f0:cd:ca:ac:be:37:22:08:93:6e:02:a3:3a:d1:
0a:df:ee:af:7a:ee:79:06:17:0e:43:c3:1f:ac:8c:ff:e4:61:
4f:30:d4:9b:c9:0d:49:26:f3:f7:75:c2:f7:0d:75:a9:4a:19:
64:96:ec:73:14:63:3c:fd:ee:9b:28:c9:3e:dc:28:1e:9f:38:
2b:52:9c:27:d9:e9:cc:92:cd:b8:e8:a0:6c:52:05:50:1c:4b:
24:d8:bc:75:62:4b:33:8a:bf:8c:eb:d4:d1:7e:06:31:3e:a3:
4a:c7:ac:d6:fc:be:30:a6:e2:a3:8f:ad:f3:b7:dd:b4:f4:0c:
f6:39:18:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAgtuJDX+czbU/QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk
NTMxMWI1YmYtZTQyNC00N2EyLTk2NTItZDEyZDg4YmM0MDRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtusCGO8mP95Egr9wSpruLYRr0otI3wH+ZwF
/0OZIzIQloLnEMLSfxY46mS56NVRI2nVEibk03nX1xImRJfWB2sUOsEkFPVUm8Co
71ltNaxexNnLmUQSxVA1pTT56lKJl59t6IYh+G74Gzmhco+QiA+mNc07Mz7zBIte
aGmF8Hhi2ouSDus0GJNfWOaNjazY6ullVF7H0sqoEpNM52br1qdU1lbNlM5+lKb7
z4Ol6SDgrexSkJdZuqDcGwr1e31nV3XHsIPAea6lFbBSeoDjqgeo/Qt+REI3Asea
CY46P1tH0p3JVhvJprlMwjVf6dpJXAb0RNAj1rECeHkXEMWx/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLXt2FoU/3pMDe+03aZjs2JjncFgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTRkZGZhZWQtNzAxMS0z
OTVjLWE3YzctZWVhMTY2MmY4MjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhfpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADJmB3Nwf6rKEl+T9chQzPxkzBw25JZUrdS8lRGRJ51Fvg5uEPhiN6Db
kGr2bGX7XeuLn93zBWsu74uwSsGfdUStcqXrBx0CESAbdV6IZ7I8aWkC7DgWakiQ
sP/5WOXcvvmEs6PP2ByZAENalCKoHMGzn/8wdqiN3FPkwFfP3GwV+EHwzcqsvjci
CJNuAqM60Qrf7q967nkGFw5Dwx+sjP/kYU8w1JvJDUkm8/d1wvcNdalKGWSW7HMU
Yzz97psoyT7cKB6fOCtSnCfZ6cySzbjooGxSBVAcSyTYvHViSzOKv4zr1NF+BjE+
o0rHrNb8vjCm4qOPrfO33bT0DPY5GKo=
-----END CERTIFICATE-----
Generated at Thu Aug 27 12:32:26 2026 by rpki-client