
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f1ee2c64-e9e9-3e40-8554-d7002a818a06.roa
File: f1ee2c64-e9e9-3e40-8554-d7002a818a06.roa (raw, json)
Hash identifier: liWlnHw9izHBM5E6Czxfr73WJth+Ff9kBJ5VGLSZXfA=
Subject key identifier: 77:44:C3:97:50:26:9C:3A:2F:A5:6A:C8:10:F4:2B:69:E2:A5:81:7D
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F4328584EC371EBD173D8F9046AFA3080
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f1ee2c64-e9e9-3e40-8554-d7002a818a06.roa
Signing time: Sat 08 Aug 2026 01:00:11 +0000
ROA not before: Sat 08 Aug 2026 01:00:11 +0000
ROA not after: Fri 06 Nov 2026 02:00:11 +0000
asID: 12271
IP address blocks: 98.7.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c3:71:eb:d1:73:d8:f9:04:6a:fa:30:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Aug 8 01:00:11 2026 GMT
Not After : Nov 6 02:00:11 2026 GMT
Subject: CN=3d6f1029-cbb2-4def-83cc-9edd7d192c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6c:4e:8d:52:a6:b5:b1:2d:d9:5b:05:54:97:
86:9f:19:b9:d5:0a:01:96:c4:0b:4f:8b:af:a0:ad:
3a:1c:aa:7a:39:6c:af:50:16:22:c7:8b:0e:23:c7:
e2:49:47:eb:f7:8d:5e:9f:cb:99:08:d9:e3:df:c9:
a4:4d:f4:24:59:08:cc:72:b5:15:23:d2:c8:c3:c8:
b5:71:b7:ea:2d:3c:68:7d:80:a5:46:88:ed:2d:43:
02:a9:c8:c7:32:2d:b6:8d:f1:dd:cd:89:85:54:b0:
b5:eb:a7:11:24:fd:df:fb:1b:a0:91:42:67:c7:e1:
44:94:0b:c3:ab:95:25:cd:c0:3e:c0:86:50:50:2b:
08:34:af:22:bb:d5:fe:36:f7:21:8e:a9:0a:6a:4b:
41:ef:14:65:ee:2b:25:e4:79:9d:95:71:0a:71:3b:
f1:23:c3:82:a7:4b:64:f2:50:c3:d0:68:21:6a:51:
99:e1:25:7c:ec:8c:e8:2c:b5:8d:b7:b7:eb:d6:1f:
05:e1:a5:1b:94:3a:b9:14:1d:1e:43:3f:09:88:03:
fd:da:f6:06:06:8e:1e:27:55:e5:48:43:90:3a:16:
77:ec:e9:d4:0f:b1:39:08:f1:e1:0f:e1:52:ec:e1:
99:d0:e2:79:ec:cb:f2:90:13:28:3a:e5:09:83:a9:
70:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:44:C3:97:50:26:9C:3A:2F:A5:6A:C8:10:F4:2B:69:E2:A5:81:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f1ee2c64-e9e9-3e40-8554-d7002a818a06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
98.7.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:d8:70:b0:ea:d0:bb:b6:c9:de:c0:48:1d:17:86:3c:9d:f1:
0c:9d:60:fa:9e:09:5d:40:a9:0d:a9:bd:10:16:f5:24:bd:9b:
bd:d3:e0:29:3a:6a:41:30:77:43:96:c8:31:0d:09:d3:8d:0e:
9e:0b:47:aa:bb:54:5b:d7:ec:21:fb:7d:de:d0:a3:63:44:c2:
c9:01:84:b1:32:f6:bc:cf:0a:eb:2e:4d:37:4d:dc:38:ed:4f:
56:2c:e9:a7:fe:9e:2d:c0:6f:59:b3:99:ac:da:e7:6e:45:b0:
54:3b:cc:d4:eb:11:8d:00:6b:89:df:33:9b:a3:d7:85:99:de:
8e:2d:4d:9c:15:19:c8:b6:de:70:5c:eb:4a:14:e9:e5:db:ff:
d1:94:ad:f2:7d:9e:4b:83:45:37:9c:ab:1c:08:db:ac:8c:b0:
fc:86:6e:5f:e7:a7:b5:74:71:2e:ad:87:7a:73:d2:19:1d:26:
19:ef:6e:2c:44:fd:a1:ff:a7:4f:63:b0:1a:f2:22:c9:c8:ba:
d8:b7:87:aa:9a:84:e8:da:1f:dd:c4:a6:14:94:d0:24:ef:4f:
46:f1:86:11:01:94:17:42:e2:9c:e2:de:ca:80:7e:a1:ba:aa:
26:3c:b5:2c:fc:c6:a0:a9:64:72:3b:27:12:27:d6:4a:bf:a2:
44:c2:cc:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:58:18 2026 by rpki-client