
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43f391d3-c24b-3136-a7d4-a5ea9a670324.roa
File: 43f391d3-c24b-3136-a7d4-a5ea9a670324.roa (raw, json)
Hash identifier: 74FtrkEulDHUQo0HgZupc/tRmrRfJme8gFa7eXFIBCY=
Subject key identifier: 52:EF:1D:E5:96:73:41:CB:7C:62:1E:34:47:FE:B1:93:35:53:3D:C0
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584ED862D74836E81C0F210E0580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43f391d3-c24b-3136-a7d4-a5ea9a670324.roa
Signing time: Sat 15 Aug 2026 13:00:11 +0000
ROA not before: Sat 15 Aug 2026 13:00:11 +0000
ROA not after: Fri 13 Nov 2026 14:00:11 +0000
asID: 33668
IP address blocks: 98.209.208.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d8:62:d7:48:36:e8:1c:0f:21:0e:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Aug 15 13:00:11 2026 GMT
Not After : Nov 13 14:00:11 2026 GMT
Subject: CN=b5b6a7cf-5208-483a-9056-ac5834881880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:10:b0:95:3c:b5:79:03:1c:28:6e:43:c7:a6:
c6:7c:d2:ec:7b:0a:70:82:fb:71:f7:7e:04:9c:91:
73:4f:8c:e0:09:bb:42:d2:1d:5d:ef:0f:96:1b:59:
f6:c7:c0:fd:1b:7c:d4:6e:25:be:41:3d:db:8a:77:
a2:b8:92:47:55:4f:7d:37:74:92:a8:9a:86:33:df:
2b:11:a5:72:3f:11:a4:db:fb:b1:55:47:af:6a:dd:
c2:71:1a:d4:57:70:74:00:26:58:74:cd:10:fb:3d:
a4:fd:2f:54:1a:1d:3d:74:79:66:10:be:63:8b:88:
03:a8:42:62:0c:6e:02:73:27:76:14:ed:b4:e5:59:
41:55:a8:f3:ac:94:1c:2e:03:7c:58:c3:dd:2b:31:
fc:74:47:e4:ee:0f:3b:b6:15:61:86:02:c6:60:64:
9f:29:a7:6b:b7:61:40:89:00:44:4e:9a:4f:45:91:
af:9a:26:09:f5:c5:bd:94:9b:04:5e:f7:a9:64:84:
07:4b:05:9d:0c:3c:33:3c:07:6f:a3:76:1d:e5:07:
fc:c7:f7:0e:0d:59:a2:06:93:eb:d3:65:d9:e4:d9:
38:52:d7:52:ac:f2:e0:1c:74:c7:aa:06:41:d8:98:
9c:54:8a:ee:22:1b:4e:f2:d2:83:10:d3:d2:07:ac:
81:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EF:1D:E5:96:73:41:CB:7C:62:1E:34:47:FE:B1:93:35:53:3D:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43f391d3-c24b-3136-a7d4-a5ea9a670324.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.209.208.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:b2:d8:2a:61:e8:f8:55:11:63:ee:d1:81:f4:e9:0e:ae:34:
0b:b7:37:11:79:5d:2b:25:9a:bf:a5:c2:2f:51:86:31:54:0b:
45:c0:01:16:6b:a6:b7:00:37:16:f6:74:26:69:0e:4b:fc:ce:
1a:38:2c:54:e7:e2:e7:9c:8a:96:6c:54:24:2c:27:af:c7:68:
dd:c1:68:5d:d5:24:5a:8e:90:8c:0c:5a:c6:62:18:be:23:b5:
e1:ff:a9:43:d5:84:1c:37:f4:15:bf:26:f0:61:0a:db:3b:ba:
5b:ec:97:7b:f1:55:4b:71:b3:f7:7a:f1:ac:5c:2c:bf:54:6b:
23:7b:09:51:07:02:42:9b:13:ce:e3:0c:be:d7:c2:ec:84:58:
68:bf:eb:d3:7d:36:25:82:11:9f:3f:2f:4b:e5:d4:1f:7c:20:
98:0b:8d:a9:60:06:45:6f:6f:2b:36:93:f2:02:8e:3f:4a:37:
b4:36:cf:c7:d5:9f:8c:99:69:9c:d5:95:28:95:80:23:25:84:
59:6c:ac:82:e0:70:b5:5e:49:c3:96:9f:80:7c:45:43:65:1c:
21:0f:48:de:0b:6f:c7:19:01:84:46:d9:46:b5:7e:37:37:16:
ed:bf:07:58:ce:12:d9:ad:f3:1a:c0:cc:5d:14:55:44:be:a5:
cc:dc:45:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:37:26 2026 by rpki-client