
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4/1f5af7b1-5fb3-301d-a898-32a052a6e971.roa
File: 1f5af7b1-5fb3-301d-a898-32a052a6e971.roa (raw, json)
Hash identifier: g9qCoBy9oVHpC3JawcSrKsf1zn8Vppe4OHVkMpjxI8o=
Subject key identifier: 58:4D:14:2C:5A:D3:10:E0:74:A2:26:AE:BC:9B:A6:2F:80:9E:2B:8D
Certificate issuer: /CN=98b0e4c3-1653-497d-83ba-9d8b10e9f1a4
Certificate serial: 010D0C9F4328584D2BDA1D0C512CDF6CA8960700
Authority key identifier: 61:4F:BC:D9:31:24:42:A0:57:62:2F:C5:0A:17:B1:DC:38:92:C9:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4/1f5af7b1-5fb3-301d-a898-32a052a6e971.roa
Signing time: Sun 15 Mar 2026 01:00:32 +0000
ROA not before: Sun 15 Mar 2026 01:00:32 +0000
ROA not after: Sat 13 Jun 2026 01:00:32 +0000
asID: 10631
IP address blocks: 131.96.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 18 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:2b:da:1d:0c:51:2c:df:6c:a8:96:07:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98b0e4c3-1653-497d-83ba-9d8b10e9f1a4
Validity
Not Before: Mar 15 01:00:32 2026 GMT
Not After : Jun 13 01:00:32 2026 GMT
Subject: CN=4eb08ab3-78b2-44d3-9462-68c0d2f20721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:75:df:0c:b7:c9:69:cc:e9:39:fd:dd:4f:01:
76:b6:b3:74:b9:51:5b:b7:39:3a:2f:d4:71:29:d3:
ce:dd:b2:4e:40:93:3c:47:2b:26:51:20:7b:d2:4a:
32:6c:9b:b9:e8:e5:8c:fd:b4:59:0c:7d:92:88:a9:
a9:d0:e2:fd:29:34:35:5e:93:43:e2:9c:70:7c:e1:
ae:5d:0a:11:3e:e7:bd:c5:7a:af:ed:0a:7d:27:85:
30:2d:a8:2b:b7:e2:a4:c5:fa:71:82:05:65:55:d4:
9f:01:70:e2:7f:50:8d:09:e9:ad:b3:5a:06:89:5c:
ed:66:65:73:bc:e6:95:f8:30:4c:ca:6f:0b:cf:77:
fd:33:0b:2e:86:26:f5:72:e7:df:cf:54:dc:a9:39:
29:3d:6b:78:a5:71:3d:11:f2:f6:11:dc:59:51:c7:
9e:eb:1a:65:d3:8d:7b:78:d4:ea:f7:7b:15:98:c2:
eb:1e:45:b3:5f:0b:ae:9f:e3:2c:56:b9:8e:07:21:
73:87:7b:f9:7b:e0:7e:8a:c7:9a:fa:39:85:c8:01:
52:0a:93:4c:6c:e3:9a:2f:22:82:76:19:06:36:90:
57:e6:ad:c2:ba:79:46:09:49:cb:2c:c9:30:77:6d:
b5:17:fd:ee:49:4c:1a:b1:c9:b1:18:8c:0c:5e:be:
7a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4D:14:2C:5A:D3:10:E0:74:A2:26:AE:BC:9B:A6:2F:80:9E:2B:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4/1f5af7b1-5fb3-301d-a898-32a052a6e971.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4.crl
X509v3 Authority Key Identifier:
keyid:61:4F:BC:D9:31:24:42:A0:57:62:2F:C5:0A:17:B1:DC:38:92:C9:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4.cer
sbgp-ipAddrBlock: critical
IPv4:
131.96.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:6e:84:e5:13:ff:d8:85:a9:da:36:f3:03:35:19:1a:9b:67:
08:31:41:46:68:c3:38:a0:b4:49:f2:7e:0d:40:4b:86:fe:55:
72:4b:87:3b:31:dc:c8:d4:5f:24:ca:fd:2c:7d:70:d7:70:b3:
70:b9:3f:3a:07:b5:e8:10:43:9c:14:0a:7b:69:5f:72:f0:ce:
d3:f0:de:63:6d:96:e2:3c:cb:41:72:c6:95:e9:b7:28:af:57:
bd:2a:65:44:35:79:a4:9b:c9:08:28:2d:7d:1f:f2:9d:da:69:
d8:88:41:d6:cd:39:78:98:f0:69:7d:c5:07:a8:ac:f3:ba:be:
51:93:07:38:ba:d6:8d:1b:58:64:61:fb:0c:f1:82:f8:3a:51:
49:7a:ba:e6:0d:42:cf:f5:69:db:83:2c:bf:f0:ec:80:c1:75:
9c:97:85:8b:bd:b8:ea:95:5e:d7:b4:f4:19:61:e0:09:ce:5d:
c6:46:2b:8d:62:8a:cc:71:0d:eb:b5:74:1b:b8:9e:8d:c3:6c:
86:7d:7a:b9:24:11:e3:3c:33:81:2f:ca:8d:98:a0:6b:df:d7:
68:4f:c6:b8:a7:5f:0d:86:c6:2e:f6:94:17:6a:12:e2:1f:e6:
7e:aa:7d:e5:65:33:42:67:b1:42:d6:31:1d:aa:e1:da:5a:5a:
07:cd:58:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 00:37:03 2026 by rpki-client