
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/333596e7-ee5a-3aaf-8847-68ec0e6dfb40.roa
File: 333596e7-ee5a-3aaf-8847-68ec0e6dfb40.roa (raw, json)
Hash identifier: GnQ46BQubNjNg48IXcGgLai1S/w+3eVtm2CWZBNw5Wk=
Subject key identifier: DB:66:C4:A3:1C:E2:A5:58:EA:04:CD:9B:FF:8A:7E:9D:D5:29:66:FA
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F03A82CD7976F088DB1EFC700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/333596e7-ee5a-3aaf-8847-68ec0e6dfb40.roa
Signing time: Mon 31 Aug 2026 01:00:12 +0000
ROA not before: Mon 31 Aug 2026 01:00:12 +0000
ROA not after: Sun 29 Nov 2026 02:00:12 +0000
asID: 7725
IP address blocks: 98.251.72.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:03:a8:2c:d7:97:6f:08:8d:b1:ef:c7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Aug 31 01:00:12 2026 GMT
Not After : Nov 29 02:00:12 2026 GMT
Subject: CN=8abc75b3-eff9-46e3-b0ce-c9be15284a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ca:f8:dd:35:bd:41:a4:1a:1c:a9:b6:c3:29:
c0:2a:93:76:5c:19:3b:0f:41:bf:29:72:9b:a1:cf:
9a:21:9f:97:45:0e:b1:69:f5:16:14:77:1a:e3:73:
81:c2:60:55:fc:2b:18:f2:bc:b8:bc:3f:47:00:75:
12:0a:3a:a3:cb:1d:e3:69:b5:a7:67:c7:57:dd:a5:
8f:9e:07:44:83:00:b7:5b:c9:a8:b5:7e:7a:57:c6:
d9:6f:d0:45:cc:98:4b:63:a0:59:dc:31:f4:4f:04:
aa:14:f4:3e:2e:1b:1a:0e:8b:9b:d4:e3:59:8e:f0:
40:ce:19:58:65:84:39:53:ae:67:ea:77:c8:58:86:
2d:ce:00:58:6a:5a:0e:43:86:8a:ac:5b:d2:b5:8a:
8c:97:3b:e7:d8:85:52:38:fc:65:43:3f:4d:2a:cb:
bd:41:af:e0:00:c9:24:87:79:78:aa:61:37:4a:34:
d3:f9:18:3d:21:37:77:dc:2f:ca:61:7b:0b:c9:b8:
fa:2a:e3:39:5e:fa:85:15:02:6e:cb:59:a6:91:7a:
b7:0d:c1:9a:a4:64:e9:93:1e:21:cd:7e:13:e3:5f:
89:7e:c2:5b:67:8f:67:18:4b:67:a4:38:ad:6f:58:
5a:2c:aa:bb:5f:3e:c2:4f:18:a0:4e:2f:2a:54:0c:
48:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:66:C4:A3:1C:E2:A5:58:EA:04:CD:9B:FF:8A:7E:9D:D5:29:66:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/333596e7-ee5a-3aaf-8847-68ec0e6dfb40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.251.72.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:de:e9:65:50:96:55:e6:97:5e:a6:66:56:85:58:df:20:62:
90:5d:82:4b:2e:d6:43:2f:f9:59:9d:a0:81:53:e1:66:aa:33:
3c:37:34:6a:e1:85:2f:b2:20:a4:6b:02:d3:62:ab:40:81:35:
41:a2:c3:60:15:0f:dd:00:ec:f1:cc:b5:e7:56:e8:73:c1:d7:
d7:48:cf:b8:f3:68:93:2e:1c:2a:73:4f:13:31:f3:0e:3c:32:
4d:08:6c:df:3c:53:17:1c:3e:70:51:09:0d:ee:3f:75:b3:34:
9c:d3:93:fe:0d:f2:ba:eb:c8:71:38:21:f7:83:73:70:4e:2e:
86:e6:8f:a5:50:9c:91:71:9b:bc:91:4d:a9:9f:5f:fa:f6:fb:
de:fc:a6:15:97:a0:35:67:c2:1b:68:d0:58:46:11:d6:db:e2:
f8:35:f5:39:00:58:30:b6:a9:8c:a2:4c:dd:84:3d:32:fa:b2:
21:1e:5d:8d:af:4d:83:ac:2b:ab:74:0b:bb:0e:86:fd:7b:28:
73:5d:92:73:b0:94:ae:ae:3e:ba:f5:e9:21:29:6a:a9:11:62:
de:51:9a:c5:1d:72:97:cc:f8:00:bc:e8:e9:f4:db:6d:2a:9b:
4d:ee:5e:cc:90:ed:5d:1d:8b:35:cf:a3:77:0e:a0:24:4c:f9:
5d:14:5e:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8DqCzXl28IjbHvxwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk
OGFiYzc1YjMtZWZmOS00NmUzLWIwY2UtYzliZTE1Mjg0YThiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcr43TW9QaQaHKm2wynAKpN2XBk7D0G/KXKb
oc+aIZ+XRQ6xafUWFHca43OBwmBV/CsY8ry4vD9HAHUSCjqjyx3jabWnZ8dX3aWP
ngdEgwC3W8motX56V8bZb9BFzJhLY6BZ3DH0TwSqFPQ+LhsaDoub1ONZjvBAzhlY
ZYQ5U65n6nfIWIYtzgBYaloOQ4aKrFvStYqMlzvn2IVSOPxlQz9NKsu9Qa/gAMkk
h3l4qmE3SjTT+Rg9ITd33C/KYXsLybj6KuM5XvqFFQJuy1mmkXq3DcGapGTpkx4h
zX4T41+JfsJbZ49nGEtnpDitb1haLKq7Xz7CTxigTi8qVAxIxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNtmxKMc4qVY6gTNm/+Kfp3VKWb6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzMzNTk2ZTctZWU1YS0z
YWFmLTg4NDctNjhlYzBlNmRmYjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYvtIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFHe6WVQllXml16mZlaFWN8gYpBdgksu1kMv+VmdoIFT4WaqMzw3NGrh
hS+yIKRrAtNiq0CBNUGiw2AVD90A7PHMtedW6HPB19dIz7jzaJMuHCpzTxMx8w48
Mk0IbN88UxccPnBRCQ3uP3WzNJzTk/4N8rrryHE4IfeDc3BOLobmj6VQnJFxm7yR
TamfX/r2+978phWXoDVnwhto0FhGEdbb4vg19TkAWDC2qYyiTN2EPTL6siEeXY2v
TYOsK6t0C7sOhv17KHNdknOwlK6uPrr16SEpaqkRYt5RmsUdcpfM+AC86On0220q
m03uXsyQ7V0dizXPo3cOoCRM+V0UXgU=
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:06:00 2026 by rpki-client