
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/98f21885-21e4-4f38-8c7d-26696d802c35/08666148-34e2-3c46-b6fe-570b57b38ca8.roa
File: 08666148-34e2-3c46-b6fe-570b57b38ca8.roa (raw, json)
Hash identifier: H652jdZM2O+KrRmEiFnlq/ayplQ+Suj1ET1k81Zpcuw=
Subject key identifier: D9:3C:16:C9:4F:C8:46:8D:18:CF:15:D8:23:86:24:65:2D:4B:A3:87
Certificate issuer: /CN=98f21885-21e4-4f38-8c7d-26696d802c35
Certificate serial: 010D0C9F4328584F03AF79380AA76197C3AF95C0
Authority key identifier: 4F:2E:32:6E:17:06:CB:FA:65:24:A3:90:A6:E2:CF:A9:3F:2B:B3:0C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/98f21885-21e4-4f38-8c7d-26696d802c35.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/98f21885-21e4-4f38-8c7d-26696d802c35/08666148-34e2-3c46-b6fe-570b57b38ca8.roa
Signing time: Mon 31 Aug 2026 01:16:26 +0000
ROA not before: Mon 31 Aug 2026 01:16:26 +0000
ROA not after: Sun 29 Nov 2026 02:16:26 +0000
asID: 394258
IP address blocks: 204.108.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/98f21885-21e4-4f38-8c7d-26696d802c35/98f21885-21e4-4f38-8c7d-26696d802c35.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/98f21885-21e4-4f38-8c7d-26696d802c35/98f21885-21e4-4f38-8c7d-26696d802c35.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/98f21885-21e4-4f38-8c7d-26696d802c35.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:03:af:79:38:0a:a7:61:97:c3:af:95:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98f21885-21e4-4f38-8c7d-26696d802c35
Validity
Not Before: Aug 31 01:16:26 2026 GMT
Not After : Nov 29 02:16:26 2026 GMT
Subject: CN=7c9b7a16-3bc8-42d0-a8c4-bdbe665f00a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ad:7e:27:5e:e0:2c:65:2f:4c:5b:c9:83:eb:
e4:ba:80:00:47:d8:4a:44:55:ce:eb:9f:73:b0:ea:
db:79:2a:37:c4:13:16:77:23:72:63:1a:47:99:e9:
ef:33:a0:e4:d5:2b:2d:3f:d3:e9:8d:16:99:14:d2:
3e:05:8f:d3:10:38:09:3b:74:80:e4:0d:b2:85:f9:
30:7e:5f:59:11:a5:0c:ba:e1:10:5f:2c:45:dc:df:
d6:f5:08:93:1a:59:ba:c1:7b:1b:bd:b4:21:4a:fe:
34:16:23:e8:cc:17:b5:14:28:5e:ae:e2:81:14:88:
b8:73:30:6f:b5:1b:57:34:26:d9:19:a0:77:fa:22:
62:aa:67:72:93:b5:fb:af:c1:5e:f7:f5:ac:2d:bb:
b1:81:5f:d2:02:af:5a:ba:cf:f0:34:91:ad:ad:3d:
cf:69:82:a3:6c:74:78:ab:10:08:6c:3e:0e:11:e8:
f1:82:0e:cc:1f:90:7d:e6:f3:e3:d3:9e:3e:6c:33:
98:34:eb:1a:8a:b7:6c:d3:f3:de:5f:39:45:0f:7e:
51:34:8f:d5:35:f1:66:4f:58:6b:51:55:3b:9b:30:
ba:99:a1:2e:39:08:c0:96:8a:09:fb:de:8b:16:7a:
2e:17:04:f9:b0:42:07:77:0e:9e:07:58:51:7c:e8:
ee:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3C:16:C9:4F:C8:46:8D:18:CF:15:D8:23:86:24:65:2D:4B:A3:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/98f21885-21e4-4f38-8c7d-26696d802c35/08666148-34e2-3c46-b6fe-570b57b38ca8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/98f21885-21e4-4f38-8c7d-26696d802c35/98f21885-21e4-4f38-8c7d-26696d802c35.crl
X509v3 Authority Key Identifier:
keyid:4F:2E:32:6E:17:06:CB:FA:65:24:A3:90:A6:E2:CF:A9:3F:2B:B3:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/98f21885-21e4-4f38-8c7d-26696d802c35.cer
sbgp-ipAddrBlock: critical
IPv4:
204.108.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:15:78:a9:4c:1b:50:b0:4e:10:32:7d:69:ea:a4:a1:13:f8:
d6:77:0f:e7:35:21:98:b7:3b:8e:2e:9b:9d:12:4d:3e:69:96:
88:f6:e0:29:5f:d3:ff:cf:39:90:73:c4:07:37:28:c5:7f:2e:
a7:38:4c:2f:4e:48:3e:e8:90:86:1b:89:75:34:fb:e6:5c:f0:
ce:70:63:4d:fa:78:43:df:f4:11:1c:f8:0d:2d:40:ec:12:98:
8d:d9:71:88:9a:f0:f0:1e:4d:47:7d:c9:ad:6c:f7:7c:1e:1c:
38:3c:06:24:9d:54:22:e2:0b:cc:a2:42:c9:75:53:12:96:77:
14:66:dc:0e:53:c8:de:b8:06:cd:9b:ef:52:5c:56:30:41:92:
30:87:33:0e:78:ec:35:09:90:6d:b6:ee:92:50:bf:ff:7c:07:
b4:da:c1:a5:88:cf:a7:9c:31:a9:cd:b8:6c:0b:9c:63:67:95:
86:c3:73:9a:c2:54:c1:d7:07:ff:d5:2a:22:02:49:93:7c:2f:
1b:29:94:d1:70:14:12:bb:f9:2d:aa:26:d2:22:8e:0a:92:52:
e8:59:6f:42:f1:4c:97:d8:fa:c2:26:e9:04:6a:e0:b9:d4:2f:
cc:c2:8d:7f:67:a7:e2:7b:2d:a2:70:0d:bb:ab:f1:fd:de:91:
8d:a7:fe:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Dr3k4Cqdhl8OvlcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOThmMjE4ODUtMjFlNC00ZjM4LThjN2QtMjY2OTZkODAy
YzM1MB4XDTI2MDgzMTAxMTYyNloXDTI2MTEyOTAyMTYyNlowLzEtMCsGA1UEAxMk
N2M5YjdhMTYtM2JjOC00MmQwLWE4YzQtYmRiZTY2NWYwMGEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK1+J17gLGUvTFvJg+vkuoAAR9hKRFXO659z
sOrbeSo3xBMWdyNyYxpHmenvM6Dk1SstP9PpjRaZFNI+BY/TEDgJO3SA5A2yhfkw
fl9ZEaUMuuEQXyxF3N/W9QiTGlm6wXsbvbQhSv40FiPozBe1FCheruKBFIi4czBv
tRtXNCbZGaB3+iJiqmdyk7X7r8Fe9/WsLbuxgV/SAq9aus/wNJGtrT3PaYKjbHR4
qxAIbD4OEejxgg7MH5B95vPj054+bDOYNOsairds0/PeXzlFD35RNI/VNfFmT1hr
UVU7mzC6maEuOQjAlooJ+96LFnouFwT5sEIHdw6eB1hRfOjuGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNk8FslPyEaNGM8V2COGJGUtS6OHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi85OGYy
MTg4NS0yMWU0LTRmMzgtOGM3ZC0yNjY5NmQ4MDJjMzUvMDg2NjYxNDgtMzRlMi0z
YzQ2LWI2ZmUtNTcwYjU3YjM4Y2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvOThmMjE4ODUtMjFlNC00ZjM4LThj
N2QtMjY2OTZkODAyYzM1Lzk4ZjIxODg1LTIxZTQtNGYzOC04YzdkLTI2Njk2ZDgw
MmMzNS5jcmwwHwYDVR0jBBgwFoAUTy4ybhcGy/plJKOQpuLPqT8rswwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi85OGYyMTg4NS0yMWU0LTRmMzgtOGM3ZC0yNjY5
NmQ4MDJjMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGyUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH0VeKlMG1CwThAyfWnqpKET+NZ3D+c1IZi3O44um50STT5ploj24Clf
0//POZBzxAc3KMV/Lqc4TC9OSD7okIYbiXU0++Zc8M5wY036eEPf9BEc+A0tQOwS
mI3ZcYia8PAeTUd9ya1s93weHDg8BiSdVCLiC8yiQsl1UxKWdxRm3A5TyN64Bs2b
71JcVjBBkjCHMw547DUJkG227pJQv/98B7TawaWIz6ecManNuGwLnGNnlYbDc5rC
VMHXB//VKiICSZN8LxsplNFwFBK7+S2qJtIijgqSUuhZb0LxTJfY+sIm6QRq4LnU
L8zCjX9np+J7LaJwDbur8f3ekY2n/no=
-----END CERTIFICATE-----
Generated at Tue Sep 29 17:49:04 2026 by rpki-client