
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9fba89d-51a1-3961-bb12-171b503f6ca6.roa
File: a9fba89d-51a1-3961-bb12-171b503f6ca6.roa (raw, json)
Hash identifier: 3SxEPwXheuqcIjXYDDh9YFtO8Gq/WjO/oRRDbc0CWSM=
Subject key identifier: 94:02:9F:F3:3C:50:3B:6B:FE:77:74:63:91:73:4A:F7:15:2B:77:58
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F03A82F3B162C741CB942CC00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9fba89d-51a1-3961-bb12-171b503f6ca6.roa
Signing time: Mon 31 Aug 2026 01:00:12 +0000
ROA not before: Mon 31 Aug 2026 01:00:12 +0000
ROA not after: Sun 29 Nov 2026 02:00:12 +0000
asID: 7725
IP address blocks: 98.62.142.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:03:a8:2f:3b:16:2c:74:1c:b9:42:cc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Aug 31 01:00:12 2026 GMT
Not After : Nov 29 02:00:12 2026 GMT
Subject: CN=fc394ed0-6857-4a12-9d6c-11b10a81c998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a7:9f:44:db:23:54:c8:a9:c8:82:8f:77:69:
75:b6:ae:02:44:f7:06:21:d0:17:2c:b0:39:8b:41:
00:25:96:40:09:a9:f7:be:d2:4e:3e:1b:ce:d0:32:
c2:47:ad:e1:ac:82:11:00:0d:d9:a3:f7:e8:11:58:
29:96:04:56:13:24:1b:e9:d1:35:e7:c5:17:5f:0c:
dd:82:2e:af:5b:b8:fd:9f:06:73:6b:63:cc:a1:d3:
c6:c4:14:fd:80:d5:ff:ef:a2:5c:fa:a4:94:e9:b8:
58:5d:9b:4a:56:5e:37:44:f6:41:de:2b:f8:62:1d:
25:00:06:c5:c1:88:0f:41:cb:19:e6:65:98:10:14:
1f:26:7c:3c:43:85:f7:59:2d:f8:10:02:2e:50:3e:
30:53:2a:de:20:cd:6d:25:4b:15:2b:13:26:cf:9f:
09:2b:c5:81:37:95:70:07:2b:f8:5d:44:d2:b1:a9:
95:0f:65:ed:63:55:a6:fe:b4:d9:1b:f0:b6:42:87:
d9:86:e1:ad:a0:aa:55:70:8f:8c:97:80:cb:81:5f:
1f:3c:41:04:1a:90:82:27:6c:c3:62:aa:02:e4:cb:
02:c4:64:b3:65:11:62:e3:59:44:3b:83:bc:ee:a2:
ce:47:11:16:be:68:2b:fe:fe:df:b2:a4:62:86:dd:
a9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:02:9F:F3:3C:50:3B:6B:FE:77:74:63:91:73:4A:F7:15:2B:77:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9fba89d-51a1-3961-bb12-171b503f6ca6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.62.142.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c9:4a:0f:d3:4b:b0:07:d5:59:cf:28:aa:61:53:db:6e:a1:12:
63:8b:09:80:77:8c:03:0f:27:dc:22:17:7c:62:64:7b:15:07:
08:4f:4b:38:c4:1d:63:ac:dc:e1:41:e6:c5:04:ff:ff:5f:44:
13:56:5d:f6:7e:39:7b:9f:10:64:9c:e5:c4:5f:1f:ea:f6:bd:
50:1a:1b:64:b5:fe:3e:41:ba:28:23:88:7b:8e:ce:83:a8:0d:
e2:63:81:c8:9e:7b:94:2e:fe:10:3b:d1:a3:19:36:c8:33:61:
b2:28:a5:91:e6:46:a7:d4:0f:26:b3:da:8b:48:cf:8a:1c:7c:
6c:9c:ef:d8:9c:1a:30:bd:c3:1a:95:82:6c:1e:a4:b6:83:b2:
43:f6:bd:81:39:d8:ca:d4:51:b7:70:70:2a:84:c6:13:a5:14:
1f:0c:40:6c:68:bc:56:2d:92:6d:e5:06:b1:65:24:72:19:6f:
4e:61:54:d0:ae:d8:a6:1e:ef:4c:3a:9f:1d:52:63:9b:24:09:
27:e1:8e:cb:a2:2c:0b:f1:7b:fc:be:a0:5a:e8:7f:4d:cf:fa:
70:b8:71:a5:23:8b:60:3b:70:6a:0b:9a:13:5d:8d:2c:5a:52:
aa:45:bd:3f:c0:ed:10:3a:a0:17:db:6a:4e:2c:c4:30:a0:e0:
a7:89:76:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:49:29 2026 by rpki-client