
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d8e65b9-e854-3516-a25d-1f1356cb2a07.roa
File: 0d8e65b9-e854-3516-a25d-1f1356cb2a07.roa (raw, json)
Hash identifier: nRW1ANwfAijEGt4p5T/qjZXfTN+nr40AEMdazZANRWI=
Subject key identifier: E8:6A:DD:63:9F:39:45:38:1C:BA:BC:4A:81:42:01:12:1B:E7:90:DF
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE58AB7F1F047129518F0DA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d8e65b9-e854-3516-a25d-1f1356cb2a07.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 98.63.244.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:58:ab:7f:1f:04:71:29:51:8f:0d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=7ca10806-ce35-4ab7-971e-26e2e58cdd41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:db:22:d5:71:d5:a2:4d:47:e6:7e:be:01:72:
7f:f1:e7:ec:46:e3:80:f0:ed:72:f0:a5:eb:04:32:
0a:fe:df:8c:87:70:f9:1b:25:86:31:db:02:32:86:
ea:d3:e1:05:a9:69:25:4f:2d:27:62:44:03:2a:23:
cc:06:a1:5f:74:3a:b1:91:d4:f9:32:69:55:f1:ba:
81:da:11:67:b0:a5:9e:15:00:b2:01:18:c8:cf:04:
ae:1d:33:b3:65:2c:a0:2c:93:15:db:30:cb:65:73:
6b:7a:d0:76:21:f7:9d:3d:7f:f0:f5:99:c4:3f:2b:
db:cd:3d:db:48:65:7b:f0:56:fa:08:10:8a:9d:16:
ce:00:c5:ac:9a:9f:2a:fb:54:03:0f:83:89:60:81:
87:fb:02:3f:63:53:2c:ce:ea:cb:bb:0d:9d:84:1e:
b2:6f:67:a4:e9:1b:e9:22:9d:9c:90:e8:7e:5b:b7:
af:e2:2d:ec:2a:8b:3d:b4:cd:43:b2:3d:a5:8a:ec:
0c:46:d0:c3:41:ec:53:86:c5:3b:06:74:21:ca:25:
78:35:95:70:7a:fa:88:ec:eb:2b:a2:2e:02:63:79:
c3:66:af:a7:8c:d9:7d:76:32:dd:75:ff:fc:13:5e:
37:bf:36:ec:f6:98:7e:91:93:50:57:60:5d:2a:df:
e3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6A:DD:63:9F:39:45:38:1C:BA:BC:4A:81:42:01:12:1B:E7:90:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d8e65b9-e854-3516-a25d-1f1356cb2a07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.63.244.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:80:b2:a8:63:09:27:bc:b3:4f:91:d9:0b:89:14:20:82:7a:
c9:56:35:50:36:66:c1:80:46:72:fa:28:b1:90:02:66:e0:a2:
a8:d3:74:92:0e:2a:fe:c3:3a:cb:50:85:37:40:eb:6a:2b:a9:
30:f9:f4:5d:3b:c3:97:9b:a7:84:ad:f6:eb:5d:c4:ab:d2:05:
e6:cb:64:b7:ec:ae:b4:5b:1d:ab:50:60:15:51:6f:c4:ee:7d:
f5:98:c6:5c:4b:f1:01:3a:e2:eb:78:a1:ba:42:51:f6:cf:56:
0e:72:2a:61:ef:60:0a:1d:e7:57:2c:cb:28:61:88:b0:49:12:
f7:bd:32:57:02:5a:96:64:7b:b7:77:b6:66:e5:ef:d6:e2:30:
da:86:2e:6c:3f:8c:81:3a:0f:34:46:c0:7c:16:a8:fb:d9:06:
d0:2c:f6:90:df:95:99:fc:e4:61:d4:82:1d:ac:b1:e8:5f:d8:
5b:34:12:36:88:dd:70:d9:b4:ca:dd:d2:2f:0b:89:8f:14:5d:
75:8b:4c:e4:a3:d0:27:99:fd:ca:28:1a:b3:77:80:50:27:77:
03:2d:14:af:62:8b:a1:10:7e:c8:2c:ce:91:9b:af:5c:0c:10:
9a:14:06:ff:dd:c8:ab:a0:7b:b5:9a:e8:e8:51:d4:bd:24:a3:
af:f1:ff:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:29:11 2026 by rpki-client