
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/291cb588-827a-3b01-9234-b283604f955c.roa
File: 291cb588-827a-3b01-9234-b283604f955c.roa (raw, json)
Hash identifier: 04SEPiSVV8o6ziFAQGL5OcKv9w+F4Q+PWD084V/jBTk=
Subject key identifier: 16:48:14:44:A1:83:90:69:F4:70:BD:31:4A:E5:8F:0E:FF:B9:B2:B5
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F4328584F4277D6D14D4BAC8F89CE6340
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/291cb588-827a-3b01-9234-b283604f955c.roa
Signing time: Tue 22 Sep 2026 13:00:12 +0000
ROA not before: Tue 22 Sep 2026 13:00:12 +0000
ROA not after: Mon 21 Dec 2026 14:00:12 +0000
asID: 21859
IP address blocks: 98.98.208.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 06 Oct 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:42:77:d6:d1:4d:4b:ac:8f:89:ce:63:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Sep 22 13:00:12 2026 GMT
Not After : Dec 21 14:00:12 2026 GMT
Subject: CN=cefafb21-be11-494f-9c9a-af769615fec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:93:8c:3c:6d:64:35:ce:ad:ee:46:26:c1:b6:
42:bf:a1:22:95:65:56:f8:1d:ee:f0:36:bc:5a:79:
7d:bd:6b:dc:74:49:64:28:67:af:0e:27:d1:66:b0:
fd:81:76:9e:29:90:2c:f7:38:d5:9e:d8:6f:37:3b:
4e:69:26:65:dd:3d:30:dd:1f:7e:8d:99:8c:87:70:
89:4d:6b:70:01:72:66:d7:83:8b:78:46:50:a1:2d:
db:8c:f8:d7:32:50:8f:18:19:64:bc:91:e3:1c:4a:
13:9f:80:45:12:35:6e:7a:34:e8:c3:a9:e0:15:ce:
f8:7d:4d:ce:08:39:fc:a0:b8:88:af:50:2f:ee:c6:
d3:e0:c4:76:b4:14:8b:80:8a:26:70:97:76:85:2f:
3d:1f:b4:03:59:03:67:39:20:d3:13:99:dc:76:36:
70:aa:8e:0e:e9:f6:42:94:6a:5f:38:e0:bf:58:7d:
72:8d:11:01:a2:b7:62:a2:93:59:40:42:e6:aa:6d:
6a:fa:f2:a4:40:34:8f:5c:c2:b9:c6:ed:4a:a2:e7:
51:c8:f1:e6:b8:71:e1:2a:5b:ec:0a:23:0f:7a:03:
15:db:d0:74:26:70:70:c8:66:8a:0e:4c:35:ab:cf:
df:50:b5:f6:41:50:d1:69:6a:4d:4e:3b:07:25:02:
d2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:48:14:44:A1:83:90:69:F4:70:BD:31:4A:E5:8F:0E:FF:B9:B2:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/291cb588-827a-3b01-9234-b283604f955c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
98.98.208.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:ce:90:c9:f7:bb:ce:d3:51:02:74:23:c9:86:02:54:b7:0d:
b2:12:d0:09:65:29:66:a3:49:28:24:17:0f:42:46:fa:31:3c:
39:e6:bf:84:9f:20:8d:82:e2:64:56:38:a1:c4:cc:06:ba:0e:
28:91:f4:44:6a:32:f8:cf:09:d9:1d:8d:69:d4:4d:f1:7f:73:
90:0e:32:1f:19:0e:f6:74:99:3e:af:d1:cf:aa:e8:d8:2d:a8:
aa:42:19:9b:0e:45:62:f5:82:34:27:5a:27:82:c5:e1:4e:7b:
39:c4:fd:d8:aa:1a:38:b3:9c:dc:40:bd:83:b9:6d:af:e0:37:
81:eb:bd:82:01:7c:76:e5:3a:20:d9:19:26:6d:0d:2e:e2:9d:
ee:a2:60:ae:69:33:2c:e4:35:e6:62:90:82:bd:75:41:a9:69:
e9:d7:28:52:16:14:34:8f:73:38:a1:75:22:76:93:cf:3e:6d:
14:54:c4:74:a3:be:0e:62:0a:f1:17:91:5a:f0:42:ab:43:83:
e6:49:29:dc:f1:c5:33:93:50:ac:e6:54:f4:1c:b6:d4:0c:aa:
f2:d0:5b:5b:b3:0c:c8:bf:db:d4:24:61:44:2e:d9:da:02:24:
69:66:5b:ab:68:f4:1a:b9:4c:c1:72:2d:6a:7d:4f:b0:83:10:
1d:d1:6a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 01:34:57 2026 by rpki-client