
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/3fd5055b-6246-37c7-b47a-0d9dbcf436c6.roa
File: 3fd5055b-6246-37c7-b47a-0d9dbcf436c6.roa (raw, json)
Hash identifier: IWMVwSF1vMyU1+RaW26nkb0aHspFMCs9UEJmrxvm8RM=
Subject key identifier: A0:AC:8C:29:73:D5:95:F3:63:D0:83:40:84:4C:AD:C5:F6:DA:36:8D
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F4328584F49756B6D609109C219DFA680
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/3fd5055b-6246-37c7-b47a-0d9dbcf436c6.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 21859
IP address blocks: 98.98.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:75:6b:6d:60:91:09:c2:19:df:a6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=253f2340-33aa-4b0a-9a66-01283bb02edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3e:ff:51:64:7f:9e:e7:9f:b4:27:c0:73:ea:
1c:8b:8f:0e:f5:d3:53:eb:01:b9:6e:89:ae:93:32:
5e:ba:a5:fc:a0:f5:e5:76:23:93:bb:68:b9:d8:47:
4d:2e:eb:31:42:d5:52:ee:ac:23:d6:23:91:c2:a6:
f0:6c:f9:d3:d7:ac:d9:42:b3:ca:37:f8:34:92:c2:
a7:b9:35:8c:df:02:71:0b:08:7e:57:24:06:e2:89:
de:71:08:d8:39:c1:88:1b:60:38:42:73:23:e1:aa:
ee:87:0d:a4:6a:0e:ca:b9:75:22:86:6e:d2:73:92:
a1:ad:1e:31:45:d6:61:38:08:39:70:07:02:9b:e6:
64:21:93:3f:a9:62:b7:ef:0a:8f:21:ec:9b:e3:88:
ae:d1:fa:e6:5c:74:ce:de:e4:2f:51:b3:69:99:43:
e0:a4:5a:04:b6:dc:6c:2d:ec:ed:d2:68:9e:98:35:
38:47:8e:d9:6f:82:57:14:45:b0:34:a3:65:66:ba:
ce:a9:fa:b1:0b:ce:56:48:d6:f3:16:13:39:3e:ee:
c0:b0:25:e1:9e:33:40:a6:e7:f8:e3:b5:f0:e7:fd:
bc:81:f7:72:9e:cc:07:e6:16:91:15:d6:3a:76:ee:
4c:c7:b4:5a:79:d7:1b:10:78:27:7a:ef:03:1f:5e:
8a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AC:8C:29:73:D5:95:F3:63:D0:83:40:84:4C:AD:C5:F6:DA:36:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/3fd5055b-6246-37c7-b47a-0d9dbcf436c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
98.98.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:04:d1:78:25:49:b8:d8:94:8e:61:40:8f:fc:ae:e7:ea:b7:
8b:46:39:1c:39:b7:2b:53:11:12:ad:00:78:48:eb:42:9e:a6:
35:0a:86:1c:c7:3a:88:1a:1c:64:cf:e8:e2:35:0f:9f:3f:55:
4c:db:58:00:37:35:ee:b9:21:7b:ba:4e:b3:77:9a:c9:ac:9a:
c3:c9:76:f0:1b:b1:a6:e0:bc:43:ba:71:5f:4f:35:f6:39:ac:
94:28:74:d4:9f:d7:a9:00:5d:f3:b0:2e:d1:71:5b:97:b5:c1:
b1:9f:a5:0e:1f:73:96:0d:ae:26:1c:87:f9:1d:b6:14:57:9d:
ff:04:05:fe:51:13:3b:ae:07:18:ad:d7:80:28:31:01:6a:09:
ee:9e:f8:97:50:2b:23:72:21:15:70:db:c7:f4:55:3b:5d:d9:
a2:80:ae:d9:c1:a9:a5:7a:1d:06:01:1e:b1:96:53:6e:81:6a:
e1:c8:8e:fe:83:07:29:e2:fa:12:ff:98:76:e8:67:6d:90:b9:
9a:c7:d9:cc:c3:fa:76:0e:88:70:d9:ba:14:25:fb:68:1e:d8:
dd:7b:b3:9e:6f:3b:3e:94:b9:07:2e:77:3c:bc:cb:d7:b9:fc:
1f:d4:6c:0e:50:0a:14:11:26:f2:36:0c:16:e6:92:80:61:bc:
d5:2c:3f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:59:58 2026 by rpki-client