
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c5067b9-eeb6-3baf-bc62-785bacf6fc50.roa
File: 0c5067b9-eeb6-3baf-bc62-785bacf6fc50.roa (raw, json)
Hash identifier: jLo3RnBpqPlCXM6KQu2RWdrQpmZTNX+AJUGer4DPSlM=
Subject key identifier: 4C:0F:EA:E3:4E:65:D0:AA:2D:E7:88:D0:02:1C:95:33:A4:15:65:42
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE575C828A03AE45C67BD280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c5067b9-eeb6-3baf-bc62-785bacf6fc50.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33660
IP address blocks: 98.202.8.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:57:5c:82:8a:03:ae:45:c6:7b:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=d6823e04-e1c5-4419-8bfd-9aad59edf3eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b3:e5:f2:3e:ea:02:2f:f1:5b:80:76:56:99:
f7:78:28:99:5f:c4:db:a8:b3:0e:af:47:d6:81:f8:
cc:fb:52:59:a2:5f:d3:e3:c8:e2:7b:d7:f7:67:53:
a6:dd:a6:55:44:f8:7e:ea:58:11:ae:5c:39:44:34:
a6:9c:84:55:52:c2:7a:05:c8:81:f7:0a:8e:f0:bf:
a5:02:a6:41:a5:b5:bf:f5:7e:59:2e:94:19:0a:46:
a0:5b:f3:16:3b:0c:b7:8e:98:cc:e3:a3:c8:8f:cc:
0e:b9:e3:be:f4:bc:df:cc:98:d5:18:9a:43:a6:c2:
63:7e:32:e8:3a:63:40:f1:41:e6:83:8a:a9:17:37:
3a:74:8e:8b:22:3d:d1:ca:87:97:de:88:7c:7c:79:
d7:6e:e8:eb:ca:a5:6e:ed:d8:9a:59:0a:c1:0a:59:
58:af:05:f4:24:a5:f8:24:39:1c:cd:8f:fb:f2:0c:
e8:fe:18:f8:e7:a8:4b:6b:f2:f5:69:68:3c:1f:5b:
37:29:34:ea:c4:1e:54:a6:1b:96:3d:8c:57:9e:43:
be:b2:53:7f:4c:d1:b6:4b:0c:53:52:e8:c5:36:f1:
22:cb:48:08:cd:b4:a4:7a:63:2e:8a:2b:81:3d:64:
b0:23:2a:8b:46:70:f0:fa:32:04:f4:f1:8a:48:4a:
5f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0F:EA:E3:4E:65:D0:AA:2D:E7:88:D0:02:1C:95:33:A4:15:65:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c5067b9-eeb6-3baf-bc62-785bacf6fc50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.202.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cb:56:28:2b:27:e0:9e:8a:c3:34:27:fc:f7:01:99:91:23:f6:
26:f7:ea:af:fe:29:59:32:a5:d9:b2:92:b6:50:93:04:02:ca:
59:af:8e:3a:6e:25:3a:57:34:ac:e3:dd:d7:5d:07:be:8e:13:
f7:87:d2:e2:b9:ba:04:9a:a1:05:52:20:7c:49:3f:62:de:5f:
d7:9b:f7:58:e2:9f:c3:17:7c:f4:49:4a:38:06:04:61:91:a2:
fd:1a:49:bb:63:af:bd:c9:7c:3b:c0:9f:bf:52:9c:df:61:b8:
ee:ea:78:db:3c:7a:d8:4c:5b:e2:93:94:c9:c8:c4:5b:c8:35:
c1:9d:f2:87:1e:f4:9d:a2:4c:0d:13:1d:f6:42:55:48:a3:42:
e9:04:a9:d0:cc:85:11:f1:be:70:3f:cf:d2:a6:9d:b8:a5:21:
d7:c4:85:e4:23:73:73:3a:f7:ff:63:62:7b:0e:40:23:61:f0:
ec:6d:5c:98:b1:e4:46:9b:c8:04:e0:b0:fa:f1:87:69:72:89:
8d:b3:6b:9c:81:f5:3a:0c:c1:97:c9:96:6f:51:51:10:26:fb:
94:3c:35:5c:cd:b9:1e:4d:b8:97:50:ef:b7:80:2b:b1:eb:8f:
aa:e7:23:89:d4:00:4d:cf:3d:06:36:b7:32:56:bb:cf:e0:b2:
29:37:6f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:53:28 2026 by rpki-client