
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/98d4dcd1-7048-351e-8685-4eb20dda3967.roa
File: 98d4dcd1-7048-351e-8685-4eb20dda3967.roa (raw, json)
Hash identifier: 8CmSi9sDA8TbeO4KfU3zkIF5bqMOQqaR6t3ZNmHRbjk=
Subject key identifier: 91:34:21:08:C2:02:0B:67:E0:C0:88:F4:C1:23:63:99:85:49:DB:F8
Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
Certificate serial: 010D0C9F4328584E8C8A498EAC4DD0750CB42F80
Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/98d4dcd1-7048-351e-8685-4eb20dda3967.roa
Signing time: Sun 19 Jul 2026 09:00:11 +0000
ROA not before: Sun 19 Jul 2026 09:00:11 +0000
ROA not after: Sat 17 Oct 2026 09:00:11 +0000
asID: 16509
IP address blocks: 170.225.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:8c:8a:49:8e:ac:4d:d0:75:0c:b4:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
Validity
Not Before: Jul 19 09:00:11 2026 GMT
Not After : Oct 17 09:00:11 2026 GMT
Subject: CN=9e1884d8-e8e3-4dfe-a9f7-d2b94dce1350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7c:9f:58:31:3b:ef:10:a5:c2:8c:52:69:0f:
e5:65:fa:3d:d8:77:a5:54:1d:a2:f4:02:74:d8:a0:
d0:f6:ff:77:8a:90:e7:d1:a4:5d:e6:9f:ce:e2:61:
74:fd:74:36:4a:aa:a4:0b:a1:c4:6a:9c:09:b5:42:
b5:f8:de:5f:3f:97:c5:56:7a:20:59:4c:80:04:a1:
c5:cf:69:bc:46:89:cb:d6:54:8b:ee:a7:93:3f:4b:
66:2e:ed:df:14:77:47:08:30:6c:18:14:f5:53:29:
a3:cd:2c:ac:4b:2f:27:c3:dc:2a:e7:d7:29:ee:e7:
0b:d8:59:87:e1:61:35:f3:58:02:ec:ac:c0:0f:c8:
62:c4:2a:53:b3:74:b0:68:80:bd:10:d6:4e:4b:6a:
a7:26:f1:ef:df:16:f3:93:0a:1b:cf:f4:67:9d:eb:
b8:73:b2:3b:7f:52:48:0b:6f:57:7a:36:b0:f9:07:
1d:8c:22:5c:11:4b:9f:64:bf:ca:f4:d6:81:34:4c:
8b:35:79:4b:b3:ce:da:c1:96:eb:63:ac:9d:dd:7e:
e4:80:47:1b:36:2d:2f:cb:f3:d5:94:f0:de:f7:71:
5a:04:60:c2:6c:9d:7b:65:cd:e0:68:72:02:74:6e:
0b:94:3b:0f:05:28:86:37:cb:ed:7f:c8:85:1f:fd:
d4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:34:21:08:C2:02:0B:67:E0:C0:88:F4:C1:23:63:99:85:49:DB:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/98d4dcd1-7048-351e-8685-4eb20dda3967.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl
X509v3 Authority Key Identifier:
keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
sbgp-ipAddrBlock: critical
IPv4:
170.225.215.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:6f:3f:0c:a0:54:9b:cf:d4:d0:09:b0:ba:18:87:70:98:50:
54:1c:b3:4e:34:b1:7b:d0:ab:ba:7d:4a:41:6f:c4:d0:40:e2:
34:9e:4f:44:20:6b:89:26:5c:4a:91:45:70:d3:46:d1:d8:9d:
52:45:3a:08:3b:b8:4c:26:fb:08:99:54:b2:6a:a9:5b:4a:49:
9c:57:e9:2d:07:8d:09:29:15:de:3c:10:c1:e9:ca:5e:4e:73:
70:4d:7b:d9:d6:4f:42:4f:a7:25:7f:5a:10:61:b9:4d:62:af:
80:6e:c1:67:01:af:bb:86:dc:be:01:0e:88:d4:0f:96:2f:da:
8b:a1:e2:1f:e9:b0:80:30:b9:99:23:56:a5:9a:8a:e2:cb:0d:
b4:da:33:eb:e2:ac:57:ed:a4:a1:45:d3:02:8f:a5:6c:92:bf:
38:0c:73:51:45:c2:e6:33:67:b4:24:94:d0:a1:82:f6:e2:76:
f3:f7:f2:0c:11:bc:76:4c:d6:43:ae:9e:e0:c4:e7:95:8e:dc:
64:6a:9b:4d:e3:72:c3:1e:10:cf:5c:dc:81:da:25:54:a7:0c:
38:b6:44:f5:a4:85:7f:88:ff:8f:c6:07:7f:30:3d:58:15:1d:
6f:a7:b8:d5:7f:a1:56:02:43:f5:19:af:bd:a9:d4:67:da:0d:
9b:75:aa:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:11:37 2026 by rpki-client