
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af/aa1f874e-095d-34c7-82c1-8c864143547d.roa
File: aa1f874e-095d-34c7-82c1-8c864143547d.roa (raw, json)
Hash identifier: EcXBs4dhmLm/H2HdCPQzdmJeiVES4nJLbq6M6Krciy0=
Subject key identifier: 86:5E:B7:79:26:F0:2F:5F:C7:14:21:49:39:40:44:7E:4B:31:AF:BA
Certificate issuer: /CN=80a5a637-2442-4c3f-b791-5a2e260822af
Certificate serial: 010D0C9F4328584D9325471A0681ED2F53C5AC00
Authority key identifier: 8A:39:90:B1:69:98:EF:64:F0:DF:06:55:9A:81:14:F5:E3:79:72:F3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af/aa1f874e-095d-34c7-82c1-8c864143547d.roa
Signing time: Tue 21 Apr 2026 01:00:24 +0000
ROA not before: Tue 21 Apr 2026 01:00:24 +0000
ROA not after: Mon 20 Jul 2026 01:00:24 +0000
asID: 394688
IP address blocks: 98.142.188.0/22 maxlen: 22
98.142.188.0/24 maxlen: 24
98.142.189.0/24 maxlen: 24
98.142.190.0/24 maxlen: 24
98.142.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af/80a5a637-2442-4c3f-b791-5a2e260822af.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af/80a5a637-2442-4c3f-b791-5a2e260822af.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:93:25:47:1a:06:81:ed:2f:53:c5:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80a5a637-2442-4c3f-b791-5a2e260822af
Validity
Not Before: Apr 21 01:00:24 2026 GMT
Not After : Jul 20 01:00:24 2026 GMT
Subject: CN=4c8a5a47-e2db-4aee-918f-89219e1bcf32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ea:d6:f0:74:eb:a7:62:74:99:46:a7:14:2e:
62:de:7b:e1:51:3b:14:9a:30:ac:13:d3:7d:be:f9:
ff:be:e2:20:21:4f:b0:7d:b6:9a:4a:6c:fb:b7:b7:
4f:69:ff:05:f5:54:6e:af:ae:18:51:35:07:be:22:
b1:75:85:dd:4c:a3:e8:2f:d3:71:40:cc:b3:d8:87:
50:f1:9b:63:7b:d3:74:3e:89:a0:6f:fe:8b:be:7c:
55:25:fd:ee:08:fd:34:d9:b4:d3:5d:5b:31:3d:77:
78:6f:38:6d:c2:f9:84:7b:5f:30:7c:81:71:2f:a6:
89:21:e3:dc:73:a6:40:a9:6e:91:20:05:5d:97:7a:
fb:a5:3b:c4:ba:92:c7:18:d6:02:a9:dd:62:c3:6d:
14:f5:96:64:b5:9e:71:78:30:eb:86:77:0f:77:28:
6b:c2:f8:de:be:12:62:83:52:f6:43:72:d8:52:95:
ac:57:ea:14:ee:e2:43:3d:59:df:11:fb:22:27:c9:
78:36:63:fe:bb:ad:3f:ac:fc:38:22:18:58:7d:f4:
1b:68:ce:20:a8:22:5b:6b:2b:7e:16:1a:91:4f:d4:
a6:f2:7d:13:3c:56:af:01:4c:04:02:bc:c9:5e:ec:
8c:75:6f:f8:f2:23:56:8a:47:0d:0b:8c:ad:aa:9c:
85:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5E:B7:79:26:F0:2F:5F:C7:14:21:49:39:40:44:7E:4B:31:AF:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af/aa1f874e-095d-34c7-82c1-8c864143547d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af/80a5a637-2442-4c3f-b791-5a2e260822af.crl
X509v3 Authority Key Identifier:
keyid:8A:39:90:B1:69:98:EF:64:F0:DF:06:55:9A:81:14:F5:E3:79:72:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af.cer
sbgp-ipAddrBlock: critical
IPv4:
98.142.188.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:36:cd:37:01:9d:cc:33:e2:2e:e4:e7:54:a4:1b:72:56:40:
c0:c0:b2:81:90:58:3a:e5:94:f9:3b:58:6b:ed:b6:18:54:f2:
ae:01:32:93:90:0c:f8:4e:e9:b1:34:a0:da:30:46:5c:3b:80:
fc:b9:79:16:8f:c1:0d:73:01:6e:b4:23:16:4b:cb:a0:59:1d:
c8:68:cb:54:ed:1f:5d:92:aa:6b:76:3d:19:21:c8:81:72:88:
04:e6:df:89:d1:86:d1:fb:46:5f:46:65:0d:b5:f1:79:08:b1:
b7:72:57:5f:3f:d9:48:eb:7d:fc:20:11:36:a5:ce:18:05:ba:
4d:41:1b:d9:20:31:a4:8d:0a:43:5d:e9:c0:a0:b8:5f:3d:2c:
3a:3f:d3:fe:f6:95:4b:f8:e9:0b:b4:fa:a0:ab:b3:21:bc:03:
61:0e:c4:ea:25:77:a0:03:6f:45:32:db:c2:85:35:72:cb:ee:
5d:65:2c:84:83:bf:10:64:73:f8:82:48:f2:ce:ed:df:01:a5:
53:14:0c:90:cc:ee:9d:0c:fd:a2:ad:37:21:bf:40:0f:82:a1:
3f:e8:a4:c2:6a:71:ac:f3:52:13:b0:93:97:14:91:56:02:e9:
c5:0a:dd:f2:6e:6f:00:fa:1d:4e:c4:96:30:43:30:9f:e1:0b:
da:e7:5b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:42:12 2026 by rpki-client