
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/01d6a7f9-d1d6-3bb8-a77f-2ca61d72e052.roa
File: 01d6a7f9-d1d6-3bb8-a77f-2ca61d72e052.roa (raw, json)
Hash identifier: 8tdOwMfrIUG+YzWLShkaL2txJGYdSAlX3FEE901EHOw=
Subject key identifier: 49:A4:53:55:95:66:3D:36:C3:E1:2D:7A:34:D8:72:11:F9:86:28:22
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5D0503BBA41E74BD547280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/01d6a7f9-d1d6-3bb8-a77f-2ca61d72e052.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 98.32.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5d:05:03:bb:a4:1e:74:bd:54:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=71b85867-4cc7-4fef-b8c0-6f1a1ab9c4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:4f:df:46:19:e7:91:7d:76:b3:4a:e0:11:56:
74:f8:83:cc:d4:7d:83:16:48:b7:5e:49:3d:06:3d:
ae:09:3f:93:af:e2:a4:3a:2d:c6:44:b4:3f:50:27:
e1:ae:8e:ad:10:a9:e4:b0:f6:8a:e4:e7:fe:9b:68:
c4:61:4d:43:9a:44:10:06:a4:37:8a:53:4a:39:b0:
e8:30:a5:b2:5d:86:70:5f:8f:69:f7:39:4b:84:da:
ca:ad:0d:4f:ce:44:12:7e:5f:58:86:f2:ee:00:13:
f9:da:2c:8f:64:ab:71:a5:bb:f0:a4:c8:d5:3b:d6:
44:37:85:88:66:2a:e1:5d:b5:8a:ef:db:66:18:5f:
b5:b3:ce:66:49:24:61:dc:3b:1b:4e:8b:d3:93:99:
47:d1:17:cb:76:c0:c4:f4:b4:6a:1e:ec:29:36:66:
04:b8:14:9d:88:91:0a:fa:21:dd:39:3f:74:b0:dd:
0c:72:87:6d:3e:c8:bb:23:0f:86:43:63:77:5a:27:
df:7a:99:38:8e:2d:88:55:fa:fb:80:a4:97:a7:1a:
76:06:52:b8:61:6d:bd:fe:5c:44:6d:5a:14:2a:7e:
e3:8a:a0:0f:79:a6:b0:a5:7e:0b:39:96:82:3b:39:
d5:1f:2a:68:7a:31:9b:05:13:5a:2c:ae:9b:34:3a:
53:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A4:53:55:95:66:3D:36:C3:E1:2D:7A:34:D8:72:11:F9:86:28:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/01d6a7f9-d1d6-3bb8-a77f-2ca61d72e052.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.32.216.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:a6:46:f4:3d:f5:2d:b4:c3:c2:d9:8e:be:88:80:f6:c9:fb:
1f:81:54:8a:e7:f8:b8:ea:9f:49:37:8c:e1:6e:28:5f:00:ce:
f6:76:65:f7:2c:64:08:7a:b4:d9:01:30:ba:02:92:07:cc:de:
9f:c4:56:7c:5c:fa:d0:1a:92:8e:92:a1:5d:a3:66:90:d2:d3:
2c:1b:be:bc:41:b3:8d:f3:99:2d:4c:25:f4:d4:2d:a9:18:30:
59:40:d4:f9:ac:85:42:1b:54:56:34:17:9d:67:26:03:c6:82:
84:c2:02:29:df:6f:df:ac:21:ad:b0:97:9e:1e:c6:1a:07:dd:
db:36:b2:63:28:2a:99:54:53:09:c6:19:7e:03:97:ea:a9:09:
e3:a7:00:36:ef:4a:0c:e2:42:22:90:bc:23:eb:7a:85:b7:15:
e9:8b:50:41:2e:85:6e:59:ae:c5:fd:14:bc:68:a7:9a:b0:ac:
bf:db:c7:2b:c0:1e:69:ea:ca:53:83:c4:2c:c1:4c:a1:01:df:
e7:65:bc:ef:ab:9f:c0:d3:6b:49:fb:01:fc:d6:8b:58:9c:73:
fc:4f:77:be:ac:87:e9:a0:99:38:32:c3:1f:fa:8b:4d:8e:da:
6a:37:20:00:33:d2:7d:3e:13:b0:1b:d9:fa:82:32:3f:19:dd:
c9:89:af:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXQUDu6QedL1UcoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
NzFiODU4NjctNGNjNy00ZmVmLWI4YzAtNmYxYTFhYjljNGIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgU/fRhnnkX12s0rgEVZ0+IPM1H2DFki3Xkk9
Bj2uCT+Tr+KkOi3GRLQ/UCfhro6tEKnksPaK5Of+m2jEYU1DmkQQBqQ3ilNKObDo
MKWyXYZwX49p9zlLhNrKrQ1PzkQSfl9YhvLuABP52iyPZKtxpbvwpMjVO9ZEN4WI
ZirhXbWK79tmGF+1s85mSSRh3DsbTovTk5lH0RfLdsDE9LRqHuwpNmYEuBSdiJEK
+iHdOT90sN0McodtPsi7Iw+GQ2N3Wiffepk4ji2IVfr7gKSXpxp2BlK4YW29/lxE
bVoUKn7jiqAPeaawpX4LOZaCOznVHypoejGbBRNaLK6bNDpTcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEmkU1WVZj02w+EtejTYchH5higiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDFkNmE3ZjktZDFkNi0z
YmI4LWE3N2YtMmNhNjFkNzJlMDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYiDYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEamRvQ99S20w8LZjr6IgPbJ+x+BVIrn+Ljqn0k3jOFuKF8AzvZ2Zfcs
ZAh6tNkBMLoCkgfM3p/EVnxc+tAako6SoV2jZpDS0ywbvrxBs43zmS1MJfTULakY
MFlA1PmshUIbVFY0F51nJgPGgoTCAinfb9+sIa2wl54exhoH3ds2smMoKplUUwnG
GX4Dl+qpCeOnADbvSgziQiKQvCPreoW3FemLUEEuhW5ZrsX9FLxop5qwrL/bxyvA
HmnqylODxCzBTKEB3+dlvO+rn8DTa0n7AfzWi1icc/xPd76sh+mgmTgywx/6i02O
2mo3IAAz0n0+E7Ab2fqCMj8Z3cmJr7U=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:46:46 2026 by rpki-client