
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff7e8311-1e20-3b4a-8834-e9c3ea26dde8.roa
File: ff7e8311-1e20-3b4a-8834-e9c3ea26dde8.roa (raw, json)
Hash identifier: GGS2MSeLlvonxQvhsQ0AXwpZLSEg47zlnqwaf4UqwBc=
Subject key identifier: 14:8B:2A:86:19:FD:3D:E0:46:5F:B7:A7:C0:ED:B9:F5:D3:4F:36:21
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584EC371B82D3E8F82014CBB5D80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff7e8311-1e20-3b4a-8834-e9c3ea26dde8.roa
Signing time: Sat 08 Aug 2026 01:00:11 +0000
ROA not before: Sat 08 Aug 2026 01:00:11 +0000
ROA not after: Fri 06 Nov 2026 02:00:11 +0000
asID: 7029
IP address blocks: 98.23.234.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 28 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c3:71:b8:2d:3e:8f:82:01:4c:bb:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Aug 8 01:00:11 2026 GMT
Not After : Nov 6 02:00:11 2026 GMT
Subject: CN=1312082f-1d52-4b94-afb0-213b08dd2e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d8:4b:2a:57:bd:63:aa:31:9f:d0:76:d9:70:
34:67:f6:b9:aa:66:93:d6:4f:86:53:89:d7:07:37:
65:a5:d9:3e:27:fc:c9:eb:3e:c3:aa:cd:f7:bc:df:
af:da:8b:ce:08:45:d9:a0:7f:ea:7a:b9:26:81:92:
bd:10:a8:bd:52:2c:e5:d5:02:8d:59:e8:82:8c:db:
0c:8d:a5:d1:ed:f1:18:9f:5c:fc:34:ce:d0:ae:23:
9b:39:4f:72:a0:79:a6:9f:b3:14:dc:b3:0d:7e:7c:
8d:94:67:c1:51:f7:7b:43:73:45:39:f7:40:30:a2:
5f:6e:21:8d:ca:10:99:95:48:3f:4d:62:2e:e1:f6:
94:93:70:cb:a3:f0:ea:1b:ba:2d:1a:4f:6a:ce:b6:
5b:31:cf:0b:e7:ad:04:97:06:cc:4c:b9:b2:f6:4e:
3b:6d:5f:9c:3c:c1:94:c9:4e:1d:21:ae:c9:7b:df:
ed:90:45:bd:8b:49:af:3e:40:14:d7:f5:b3:49:84:
ef:34:12:7c:ec:8c:8a:0b:fa:e8:82:2c:19:40:be:
ad:62:81:fc:a9:48:8f:97:f1:07:95:11:b8:37:e2:
27:9a:29:1f:89:31:c8:b4:c6:f5:07:3c:2a:2c:c1:
2e:88:5a:5a:b9:2f:c3:03:98:aa:76:fa:ad:01:e0:
ec:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8B:2A:86:19:FD:3D:E0:46:5F:B7:A7:C0:ED:B9:F5:D3:4F:36:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff7e8311-1e20-3b4a-8834-e9c3ea26dde8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.23.234.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:87:ad:8f:30:64:21:a0:63:4b:52:1b:1a:f2:51:89:5b:04:
01:e1:32:f4:e7:9e:1b:59:ff:88:22:ab:b3:24:ba:ba:db:81:
79:3c:12:d5:f7:43:e8:40:c4:ca:50:8a:56:8d:0f:d7:95:a2:
7c:e7:6f:ee:79:06:9c:e8:f0:0f:1d:e4:74:52:7a:2d:3e:aa:
27:5c:ed:65:8a:48:db:13:d6:43:fd:85:0e:8a:02:fa:26:27:
c7:da:fc:28:96:a6:74:34:bd:57:6f:70:46:07:96:54:27:1e:
94:47:52:c8:e9:26:00:7f:d9:e3:c9:f5:76:6c:d7:ac:1c:75:
3f:b6:29:0a:5b:a3:0d:53:08:78:da:a9:4b:95:06:18:fc:60:
1b:1c:94:f4:c6:16:71:4b:45:65:d8:d3:b0:78:92:22:aa:24:
cd:17:8e:bc:06:e5:93:63:f2:a7:c9:ea:4f:6b:1f:ef:06:a8:
ee:b0:4d:7f:92:07:a9:d1:3b:54:47:80:b9:61:cd:cd:21:64:
45:81:69:c3:ab:5f:8f:63:24:af:5e:59:d2:ad:e3:ab:0e:28:
6f:0c:7e:71:07:84:55:c0:fd:98:11:51:3d:f0:af:48:12:d8:
3c:20:c9:76:e0:e7:63:4e:43:0a:5f:26:3a:de:2b:a2:35:6e:
8a:1c:29:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 12:26:20 2026 by rpki-client