
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f04bd3d-d511-3429-ae2e-80a9d4ba4a32.roa
File: 5f04bd3d-d511-3429-ae2e-80a9d4ba4a32.roa (raw, json)
Hash identifier: idI8kXVEpGJBFpVpDurrY7PXPuQd6aK87jvp6Ats6r8=
Subject key identifier: DE:AC:73:51:32:CC:B7:81:9D:95:24:DC:A4:26:2B:9B:23:64:AB:55
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F498C2EFEA6321C3ED56B5860
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f04bd3d-d511-3429-ae2e-80a9d4ba4a32.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 33491
IP address blocks: 98.212.46.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:8c:2e:fe:a6:32:1c:3e:d5:6b:58:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=3c8cbd98-0a9c-4f81-af65-747151e528bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:27:9a:b1:43:99:ea:bc:69:32:34:8e:ec:0c:
b1:ec:99:26:5c:8b:a3:59:1b:65:4d:7e:28:76:89:
c1:a5:6f:ad:a7:b9:37:fb:37:0e:58:4f:5d:f2:5e:
f3:18:57:ef:e5:39:dd:af:96:fb:79:88:50:e0:f8:
ec:88:8f:ab:b5:25:11:38:bf:e7:33:43:fe:eb:0c:
81:b8:0c:32:f0:ac:a0:5a:6c:04:cc:ed:1e:01:07:
90:a4:e4:21:88:49:02:5a:dc:f3:c5:80:b5:a1:11:
69:1a:94:e1:91:3e:52:57:32:ec:66:54:cb:e2:ed:
ff:d6:d3:84:b8:db:66:b4:57:64:31:82:e4:30:5d:
e7:59:2b:61:18:2b:49:76:be:00:d1:0d:5c:6f:a6:
ce:f7:8f:6e:22:68:1d:e0:18:b7:f5:10:46:71:e8:
0d:0a:6d:49:3d:88:04:03:3e:e3:d5:8b:30:ec:75:
cf:08:db:71:6a:d2:9a:2a:f3:69:91:87:0f:80:c7:
cb:f5:ce:98:71:86:7e:87:5e:37:27:4f:69:d2:c6:
6c:13:21:d8:85:2d:51:eb:ea:c5:dd:7e:58:7c:63:
b5:44:d5:d2:cc:18:c5:ec:4d:b2:9f:f0:72:38:dc:
96:87:fd:65:e3:a6:ca:3c:14:58:7f:ba:c2:37:04:
ae:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AC:73:51:32:CC:B7:81:9D:95:24:DC:A4:26:2B:9B:23:64:AB:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f04bd3d-d511-3429-ae2e-80a9d4ba4a32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.212.46.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c9:43:11:b4:16:c8:58:b2:39:19:6f:7b:33:49:de:67:ec:dc:
7e:4a:43:db:fd:70:c3:4a:2d:2c:ca:c2:0c:de:83:ac:e8:74:
e9:6c:41:80:60:e0:9b:29:73:3e:f2:8a:9f:f5:50:5b:bd:21:
b4:60:56:26:7e:63:40:7a:a8:67:2b:36:2f:44:4e:45:2f:c3:
e4:ca:c0:30:4a:b3:5e:33:ca:88:e6:f2:65:d1:bd:24:57:2c:
67:3e:fc:96:a6:e8:65:b5:ee:83:a8:fb:24:1c:a9:d6:13:38:
3e:4b:e0:a0:0e:52:bb:af:a2:c3:2e:36:21:d9:fd:7e:cf:ff:
24:95:1e:83:90:dd:6e:e0:a2:4e:40:bd:f6:a7:8a:fe:70:1e:
0e:e6:41:b4:cd:a9:65:56:0b:d9:ff:f4:77:51:74:4a:d5:ef:
1e:a9:ca:57:ac:89:f8:8a:01:36:4c:ce:f4:c3:83:eb:44:7b:
19:4d:bd:13:48:54:94:89:95:8f:05:2c:45:ec:75:ad:c6:cd:
f1:0b:df:77:93:8c:60:33:56:18:85:d6:cd:a6:40:58:96:2b:
d5:f3:f9:e0:be:b7:e7:e9:d9:a3:d5:ad:9c:1b:d0:bd:ec:14:
c6:20:82:d8:6f:37:fe:ba:f8:92:d3:4b:5f:da:f3:b5:5c:bb:
43:f8:79:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JjC7+pjIcPtVrWGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
M2M4Y2JkOTgtMGE5Yy00ZjgxLWFmNjUtNzQ3MTUxZTUyOGJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoieasUOZ6rxpMjSO7Ayx7JkmXIujWRtlTX4o
donBpW+tp7k3+zcOWE9d8l7zGFfv5Tndr5b7eYhQ4PjsiI+rtSUROL/nM0P+6wyB
uAwy8KygWmwEzO0eAQeQpOQhiEkCWtzzxYC1oRFpGpThkT5SVzLsZlTL4u3/1tOE
uNtmtFdkMYLkMF3nWSthGCtJdr4A0Q1cb6bO949uImgd4Bi39RBGcegNCm1JPYgE
Az7j1Ysw7HXPCNtxatKaKvNpkYcPgMfL9c6YcYZ+h143J09p0sZsEyHYhS1R6+rF
3X5YfGO1RNXSzBjF7E2yn/ByONyWh/1l46bKPBRYf7rCNwSu5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN6sc1EyzLeBnZUk3KQmK5sjZKtVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWYwNGJkM2QtZDUxMS0z
NDI5LWFlMmUtODBhOWQ0YmE0YTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYtQuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMlDEbQWyFiyORlvezNJ3mfs3H5KQ9v9cMNKLSzKwgzeg6zodOlsQYBg
4Jspcz7yip/1UFu9IbRgViZ+Y0B6qGcrNi9ETkUvw+TKwDBKs14zyojm8mXRvSRX
LGc+/Jam6GW17oOo+yQcqdYTOD5L4KAOUruvosMuNiHZ/X7P/ySVHoOQ3W7gok5A
vfaniv5wHg7mQbTNqWVWC9n/9HdRdErV7x6pylesifiKATZMzvTDg+tEexlNvRNI
VJSJlY8FLEXsda3GzfEL33eTjGAzVhiF1s2mQFiWK9Xz+eC+t+fp2aPVrZwb0L3s
FMYggthvN/66+JLTS1/a87Vcu0P4eUI=
-----END CERTIFICATE-----
Generated at Fri Sep 25 13:08:03 2026 by rpki-client