
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3b285901-6d53-3cff-8677-f7213be85322.roa
File: 3b285901-6d53-3cff-8677-f7213be85322.roa (raw, json)
Hash identifier: CFhbNMqclWI+jdZKfos1DTosCUXS+nUTXdRfjoMk94U=
Subject key identifier: 06:C4:F9:73:54:72:33:39:70:49:53:FE:F1:C0:07:C7:76:E4:6B:89
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F4328584D40CA64A03D3CBB9F9A3C44C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3b285901-6d53-3cff-8677-f7213be85322.roa
Signing time: Sun 22 Mar 2026 13:00:41 +0000
ROA not before: Sun 22 Mar 2026 13:00:41 +0000
ROA not after: Sat 20 Jun 2026 13:00:41 +0000
asID: 10796
IP address blocks: 98.157.112.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:40:ca:64:a0:3d:3c:bb:9f:9a:3c:44:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Mar 22 13:00:41 2026 GMT
Not After : Jun 20 13:00:41 2026 GMT
Subject: CN=89a0358e-f695-4341-af67-311509648b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:84:f4:fb:b5:30:16:62:88:bb:07:50:8e:97:
b0:0a:10:68:bb:bc:93:05:3e:3a:37:45:b6:28:b4:
41:99:a3:1f:fe:30:55:56:82:a4:2c:75:64:c1:67:
60:ee:c9:7e:60:cd:c1:43:1f:0c:14:4f:fc:ea:64:
10:ab:d1:62:c5:ea:60:7b:be:ab:17:25:c5:66:91:
6a:c1:9f:ef:3a:dd:4b:b2:0a:56:11:b5:fe:c3:ee:
48:59:74:e6:d9:a5:8b:ff:9a:96:92:2a:b8:3c:25:
a5:2e:88:03:ef:e7:a2:98:ce:10:8b:09:0b:bc:b6:
47:b1:1d:28:d9:64:63:54:f1:c6:f8:78:5a:9d:dd:
5a:57:27:78:9d:96:1f:d3:fc:4c:0a:4f:ee:7b:50:
5f:99:3f:30:75:2d:a7:ef:1c:5d:a7:04:9c:7a:30:
ca:52:3a:40:78:05:91:e7:47:84:ae:fb:27:03:3f:
de:5a:a3:48:3f:42:fc:8d:9a:d9:55:c1:cc:e9:fd:
be:35:41:c7:e4:63:8d:6d:c3:1f:28:d8:88:d5:41:
8f:33:0f:cf:28:40:66:9b:a9:87:74:3b:0e:e1:ae:
cc:05:f9:bd:fb:e0:33:da:7a:b9:33:ad:69:36:ab:
c7:a9:f4:72:06:66:65:b2:fb:91:93:e1:5a:a8:24:
5c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C4:F9:73:54:72:33:39:70:49:53:FE:F1:C0:07:C7:76:E4:6B:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3b285901-6d53-3cff-8677-f7213be85322.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
98.157.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:f2:66:40:08:e3:a5:ef:bc:9d:d5:02:fb:13:13:d8:18:1a:
d1:9d:58:8e:40:d3:38:1f:b0:aa:6d:2b:17:3b:7a:8e:fe:f1:
3e:48:49:df:3c:74:cb:2b:45:e2:6e:b9:09:0c:e1:91:60:f6:
e7:52:70:0a:76:24:41:d6:ff:22:e6:52:23:9b:0f:cb:2b:23:
a6:73:46:51:84:ee:b6:89:11:62:bd:5e:78:1b:fb:82:8b:03:
28:42:51:3d:3a:98:d4:35:bc:cc:a6:bc:be:bd:5c:97:71:a2:
d5:4a:fc:59:c1:71:85:08:9b:61:51:bc:17:e8:b6:63:6b:c1:
cc:d0:ea:58:bd:91:40:ce:00:f9:9a:e0:03:33:07:3a:ce:2c:
a8:25:c8:50:f1:db:27:d2:41:03:c0:60:20:d8:cd:05:c7:a5:
45:55:1d:8d:42:da:f4:93:61:1d:fa:6d:78:94:cd:e3:b6:1b:
a2:41:60:b7:8f:33:2f:d6:25:33:cc:13:55:a5:96:98:54:7d:
86:cd:c6:4d:f9:ad:f6:a7:05:14:f4:ee:d8:13:09:57:06:e1:
ee:7c:3a:13:03:d1:93:ad:5a:7a:36:77:54:1a:6e:20:a9:3b:
ba:e5:b6:61:32:af:f8:3d:58:d2:94:89:ef:0b:48:3f:0e:f4:
a7:fe:bd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:15:09 2026 by rpki-client