
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/610305be-8bce-31ae-8887-28848a00ebee.roa
File: 610305be-8bce-31ae-8887-28848a00ebee.roa (raw, json)
Hash identifier: QDwkAXqAAsC1vFq8fhlz5eQXwx0zQ6mGWi2/UXOjzDo=
Subject key identifier: 13:D9:E7:A1:85:42:9D:06:E5:6A:96:31:C4:3A:3A:6E:AF:09:9C:E9
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F03A82D9BD551025E907BA540
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/610305be-8bce-31ae-8887-28848a00ebee.roa
Signing time: Mon 31 Aug 2026 01:00:12 +0000
ROA not before: Mon 31 Aug 2026 01:00:12 +0000
ROA not after: Sun 29 Nov 2026 02:00:12 +0000
asID: 7725
IP address blocks: 98.252.216.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:03:a8:2d:9b:d5:51:02:5e:90:7b:a5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Aug 31 01:00:12 2026 GMT
Not After : Nov 29 02:00:12 2026 GMT
Subject: CN=3dd5af59-08dc-4459-80de-5450e12a0b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f7:91:e3:69:5b:12:4f:89:70:45:bd:ce:e4:
ac:f8:67:c4:2c:8d:f5:e0:e2:84:b4:5b:97:74:c3:
64:92:12:ef:fe:18:a4:aa:9e:b2:72:14:dc:f4:9f:
ed:39:a5:cc:48:9f:c0:c5:10:ff:bd:da:56:92:d0:
11:58:15:83:16:7f:c4:90:19:19:8a:11:7a:e4:9d:
bb:c2:77:d5:52:0f:ee:5d:ab:10:fb:3f:08:5c:5f:
39:28:c0:e7:98:38:bd:c6:6e:49:35:ff:4d:ac:5b:
c3:7b:0f:d9:d3:8e:7f:68:83:4a:d6:1b:2e:40:ac:
64:4b:04:47:a9:42:de:34:01:ae:61:db:fd:3a:69:
78:89:c1:e0:35:c9:d5:cb:21:0d:a4:dd:3d:98:30:
c9:0a:11:5d:9d:c7:ba:e5:ff:58:1f:9b:4e:97:9c:
7f:72:6a:7c:15:e4:51:44:87:a2:dd:54:66:87:fa:
fb:8e:b6:17:8b:c9:78:ed:f9:4e:5e:40:63:04:ff:
0b:8d:33:51:84:9d:2f:38:74:a8:37:61:e7:30:e8:
ab:d5:78:bd:53:77:d0:dd:9b:d7:5a:ec:f4:50:6c:
51:37:ab:8d:2d:e6:c5:a4:32:1b:d1:a1:62:77:07:
75:4b:5a:58:2e:b8:da:2b:4b:92:89:89:b9:fe:2a:
b5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D9:E7:A1:85:42:9D:06:E5:6A:96:31:C4:3A:3A:6E:AF:09:9C:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/610305be-8bce-31ae-8887-28848a00ebee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.252.216.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:50:21:7f:be:5c:f8:18:92:98:52:4f:37:cc:f9:31:28:3f:
4a:e8:51:a6:62:2c:d3:19:c5:c8:ab:34:05:cb:59:c8:b6:da:
f8:3a:51:69:88:e1:20:da:2a:39:43:c6:35:c3:ce:a8:d7:1d:
8a:ff:54:ec:7c:e1:38:7d:13:de:e5:74:9e:57:9e:b3:e2:f0:
a4:e0:fd:5a:84:26:63:68:80:12:92:c2:ae:25:1b:86:9d:3b:
0c:83:ef:28:0c:93:d1:52:8a:b1:2d:f3:de:7a:bb:0b:19:b1:
3a:21:f4:ff:ea:bf:6e:27:46:80:53:15:64:38:e4:f7:50:24:
57:73:65:bd:2f:14:be:45:c1:fa:e0:31:a6:e6:38:20:de:5d:
a7:0d:64:3d:b3:02:00:1d:a4:1f:ad:0c:49:b1:c4:f9:a7:29:
c7:58:7a:12:46:26:5b:b0:72:3b:9f:80:ba:a4:42:ee:69:e3:
c9:97:20:b3:80:35:34:8d:8e:9f:18:b7:75:73:a0:c3:01:23:
0d:18:d5:df:6e:d4:04:b2:8d:ea:a5:6d:5f:9f:2c:53:20:a2:
13:3f:d0:fe:11:ab:5f:ad:30:44:c0:9b:9b:a8:7d:cb:c4:76:
ad:7a:ca:d4:3a:fc:74:d4:4b:d4:09:97:fc:1e:3e:a0:67:d4:
00:d5:d5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:44:47 2026 by rpki-client