
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/9c14bd55-5125-3910-a0b2-c13956384c3d.roa
File: 9c14bd55-5125-3910-a0b2-c13956384c3d.roa (raw, json)
Hash identifier: m78d+0dHTzbYftQ5JLIFvxpVEUvAV8jzrVHg7zBcSjw=
Subject key identifier: 49:4F:96:75:5D:51:B1:A2:A1:4E:A5:68:01:FB:6E:99:A0:0F:8F:D0
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F4328584DAAE037DEFCB53C8A885CCB40
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/9c14bd55-5125-3910-a0b2-c13956384c3d.roa
Signing time: Wed 29 Apr 2026 13:00:31 +0000
ROA not before: Wed 29 Apr 2026 13:00:31 +0000
ROA not after: Tue 28 Jul 2026 13:00:31 +0000
asID: 21859
IP address blocks: 98.98.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:aa:e0:37:de:fc:b5:3c:8a:88:5c:cb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Apr 29 13:00:31 2026 GMT
Not After : Jul 28 13:00:31 2026 GMT
Subject: CN=2b6f2dc5-e285-464f-b965-2472fadd61ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:64:d0:25:da:a3:23:e6:ff:f5:30:33:7d:18:
f5:d4:79:41:06:cb:f2:99:9c:5b:f9:76:5e:18:4b:
f4:d9:01:54:6c:34:cd:86:22:12:d0:50:6e:01:47:
1b:cf:53:81:2f:32:5f:0c:c8:f0:57:e2:75:e2:42:
ae:95:97:33:f3:4e:95:7c:2a:d8:3b:70:cd:5b:ab:
92:ec:2d:0e:c5:65:20:19:b5:ae:45:d5:cb:77:a7:
13:55:2a:77:55:4e:a6:2b:92:a8:4f:5a:55:7e:f5:
97:3e:60:18:61:81:0b:77:6b:5a:26:57:d7:7d:8c:
92:64:5b:f6:a4:76:17:d1:79:85:7d:81:61:e0:7a:
a6:18:32:d9:b7:4d:a7:c8:cd:29:f2:47:26:37:e7:
71:97:29:3f:63:b6:0a:12:bf:e8:00:2f:6c:b4:ec:
0f:35:4e:b0:6a:f3:e3:9b:86:3c:74:d4:f7:7e:0c:
8f:66:6f:ac:ef:47:56:ec:10:4e:1b:00:c8:0d:80:
49:dd:37:1f:d0:27:bc:91:e0:5a:16:12:87:51:ae:
90:10:98:6e:3c:b2:cd:7b:1b:b8:6b:bc:42:6e:7f:
1e:f8:76:ba:37:ec:8e:2a:51:b5:a5:80:2c:46:33:
7a:47:97:d6:4f:3f:c5:b2:17:95:d1:57:53:f5:a4:
94:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:4F:96:75:5D:51:B1:A2:A1:4E:A5:68:01:FB:6E:99:A0:0F:8F:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/9c14bd55-5125-3910-a0b2-c13956384c3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
98.98.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:36:2f:04:9f:e9:47:7a:80:cd:86:e0:f4:74:2c:57:23:45:
1c:85:ce:9a:f1:d1:80:28:62:29:6d:32:37:6b:00:46:63:1a:
ca:df:53:f7:b9:24:3b:9b:45:6b:02:8d:3d:78:de:1c:b3:30:
3e:23:a9:d1:d7:93:4b:a7:5c:c5:96:ad:2f:81:83:42:47:e3:
43:bd:ff:e6:e5:f9:6b:b2:c0:a3:8e:82:8f:d2:15:45:4c:60:
c5:97:63:08:5d:4b:cb:64:bc:12:92:3b:55:2a:3b:3c:73:b8:
5f:18:09:b0:a1:ee:db:92:c3:c7:f7:15:81:19:92:16:8d:ae:
fd:3d:c4:70:41:49:a1:2a:16:57:db:c5:36:21:b2:3f:70:a4:
70:d8:dd:63:89:74:e7:76:2f:96:c5:50:5a:2b:f4:eb:a8:12:
8f:38:8e:ea:9b:d3:c4:0e:11:27:2e:82:b9:41:d2:ae:82:45:
2c:cf:a4:67:21:f6:ce:bc:d1:a0:36:f1:97:6f:a8:34:4d:f7:
77:84:f1:e7:28:3b:4a:25:28:12:ee:5f:bc:82:4d:32:45:35:
58:9d:71:7a:fa:b9:07:36:45:f8:19:96:36:a0:c9:bd:63:04:
2b:46:d4:fa:d1:3e:c4:bf:ab:1c:f7:e3:26:f4:31:13:46:29:
5a:e9:cd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:55:55 2026 by rpki-client