
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d38d42a-309c-38b3-857f-7213505732dc.roa
File: 8d38d42a-309c-38b3-857f-7213505732dc.roa (raw, json)
Hash identifier: NjlO08L3EwOzz6/xlG44F4Rl1Y2H1j4w9SsQsaLD/oA=
Subject key identifier: 65:A1:3E:16:80:C6:60:12:B6:77:25:BA:19:2A:B4:82:6F:1A:0D:B0
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119E74FB5E5267CB17CBD9C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d38d42a-309c-38b3-857f-7213505732dc.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33651
IP address blocks: 98.42.238.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9e:74:fb:5e:52:67:cb:17:cb:d9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=9c590c1b-8606-4d31-af0c-3a349402721a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:50:03:12:0c:a6:00:3e:0a:1a:97:d0:9f:ab:
c9:0e:f7:3b:50:d8:c4:8f:3c:10:00:6b:f2:d9:0d:
14:d4:7a:a3:67:a2:54:c5:a5:2f:df:90:e6:66:93:
35:c5:8d:69:8d:a0:de:1e:12:10:ea:b9:13:ea:2f:
26:41:b7:78:3d:22:9b:31:18:b1:02:87:d2:6a:3f:
5a:62:83:20:c1:0b:44:f8:7f:3a:16:52:69:82:c8:
f6:67:95:c1:f1:c6:56:6a:ae:b0:af:07:5e:ae:ea:
27:4d:3b:8f:d7:8f:c3:dc:4c:ee:a5:9d:0c:21:8f:
c7:12:91:5f:ed:4c:2c:a2:bc:46:62:a2:fe:9d:b0:
fa:6c:1f:d4:31:da:c1:4d:3c:73:a5:2d:11:19:d7:
85:ef:61:6b:ad:87:7f:99:f7:f6:b4:f7:10:3d:07:
3d:10:29:55:d5:4c:aa:fa:99:84:3c:d3:6e:98:23:
60:41:ec:8c:77:28:83:0b:ea:7b:fe:da:95:19:56:
46:f7:25:e4:da:45:02:d7:a4:2f:d5:4f:f1:8c:9d:
62:68:c6:05:b8:f0:01:fd:9b:05:9b:ce:a2:60:65:
28:92:d2:66:f4:be:27:e9:b6:3e:6d:45:50:80:8e:
43:62:4b:1f:36:84:ae:a7:09:bd:84:c6:24:59:c3:
64:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A1:3E:16:80:C6:60:12:B6:77:25:BA:19:2A:B4:82:6F:1A:0D:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d38d42a-309c-38b3-857f-7213505732dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.42.238.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d9:7a:f3:d5:38:94:c3:4b:f7:c8:67:df:bb:f6:8d:ec:db:28:
9c:4f:44:64:51:4c:ef:38:25:f2:80:4a:d9:89:89:80:88:56:
e3:58:d0:c2:52:f6:26:0f:e7:67:fb:1f:29:8c:44:6b:d0:64:
a7:7a:3d:10:79:1b:e9:50:d7:bb:f4:76:7c:70:e6:25:ca:64:
0b:e8:66:76:6f:62:9c:c6:e3:f3:f0:b2:fa:b6:29:5f:4d:c1:
0b:2c:77:b1:e7:cb:86:30:a4:70:24:06:d6:04:18:60:bc:72:
7c:97:aa:61:9f:2a:63:c4:f1:65:c3:53:fd:1d:58:06:3b:ab:
e6:5a:a6:64:d3:90:a0:fd:cd:ec:6c:cd:24:30:59:d9:3b:8e:
c0:93:4c:fb:d0:c7:b2:5f:56:62:7c:72:6e:1a:7e:15:fe:79:
33:f8:28:06:8b:a2:e4:91:3e:46:30:7b:83:91:e5:d3:95:2c:
2e:d5:df:65:02:6d:93:cf:47:91:26:84:7f:93:db:2d:bd:54:
53:7e:ce:d7:f7:48:28:2a:aa:5e:f3:89:64:26:a3:14:f6:8a:
65:0e:f8:8d:fa:27:45:3f:2e:40:90:74:59:58:a6:9d:29:59:
95:f8:12:bc:94:27:ae:f9:fd:e5:2a:e5:75:d4:fa:90:64:70:
39:74:47:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:50:58 2026 by rpki-client