
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0df3e9cb-4e22-3553-8fb7-0ce2f93d860e.roa
File: 0df3e9cb-4e22-3553-8fb7-0ce2f93d860e.roa (raw, json)
Hash identifier: KCY6I8GOOguldPEhirapIrvK/7zGYV95f0FVNO0Njlw=
Subject key identifier: 25:B2:59:D2:2B:54:EC:45:DE:90:BC:33:B9:B2:B5:6C:17:74:AF:BC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BC65D244FE528DADE49B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0df3e9cb-4e22-3553-8fb7-0ce2f93d860e.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 33668
IP address blocks: 98.209.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bc:65:d2:44:fe:52:8d:ad:e4:9b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=8b5d30b1-bfa4-4ffa-a904-e5f8e8f1b189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cc:35:f4:3b:90:3a:fa:f0:a7:71:73:f3:2d:
64:37:1c:04:eb:0a:63:ae:2e:1f:e3:39:5d:be:3c:
01:81:98:10:41:3f:c2:a3:d0:b8:76:97:d0:1f:4f:
08:e8:c3:4c:4f:5d:bc:de:13:fa:2f:ac:eb:7b:c9:
c2:6a:6f:52:c8:ed:54:ec:96:00:36:c9:db:38:b7:
84:21:c0:20:e9:72:9b:00:c4:b0:d5:21:2f:4f:f3:
7d:90:a2:ba:7f:c7:26:b1:a1:39:8e:08:07:f0:b2:
60:86:9e:f6:84:7a:27:54:2e:f3:be:ee:dc:ba:7e:
d5:00:5d:d4:b9:86:1b:ad:e6:01:46:bd:7d:f1:19:
05:49:b7:f3:f3:75:e1:36:ba:4f:4e:9a:9e:52:d1:
e9:f9:38:b8:67:52:13:83:35:df:35:90:0f:f9:f8:
ec:b6:17:8e:e8:6f:60:cb:72:f7:be:17:00:ae:9f:
68:68:6e:d7:ff:e7:fd:34:79:72:1d:39:cd:55:1d:
15:85:f8:5d:0e:f2:02:cd:84:4c:5f:f0:a5:4c:cf:
57:ed:6f:6d:af:78:ad:67:80:9b:e7:1d:35:88:c9:
ed:8b:a3:82:63:d3:08:68:f2:de:fe:98:1f:f7:7b:
dc:aa:ca:06:19:60:79:c5:89:a7:db:8a:be:59:08:
75:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B2:59:D2:2B:54:EC:45:DE:90:BC:33:B9:B2:B5:6C:17:74:AF:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0df3e9cb-4e22-3553-8fb7-0ce2f93d860e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.209.243.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:94:ce:6d:34:e4:7a:9a:4b:2c:fe:3a:3d:bb:4c:7e:f6:78:
6c:6d:97:f4:4f:5f:4f:51:63:54:1c:c9:fd:40:e1:63:89:04:
73:f5:b2:c9:90:b1:18:4a:9c:17:c4:37:25:9f:bc:25:3e:ba:
8b:2a:15:aa:a4:c7:6c:cd:4b:8f:e4:61:3d:2b:bb:01:bf:65:
1f:38:a5:3e:91:0e:6b:5f:b1:d2:71:46:18:00:26:9e:fa:f2:
50:a0:e4:ea:75:9b:e3:11:84:30:2b:3f:a6:00:fd:06:d4:4c:
74:b0:54:70:53:85:5a:13:1b:5b:0e:8e:ac:ed:ea:71:06:47:
cf:f6:db:a1:96:a1:e9:14:9a:bf:dc:23:61:9a:fe:87:0e:0b:
2a:dd:4a:29:d2:be:50:29:e4:fa:8b:56:de:7f:69:2d:6f:54:
94:28:b4:25:1b:33:ac:9f:d1:8e:03:ba:00:82:d3:e0:a2:01:
54:b3:ab:96:b2:e4:b4:c4:04:d7:04:49:d2:61:d7:86:2a:54:
92:1b:7b:a2:dd:c1:e3:87:38:4b:76:14:a1:be:7f:f4:3e:54:
29:99:9b:29:b3:67:2a:01:bd:80:19:1d:9b:0d:02:b2:b3:de:
fb:af:4b:3d:f8:0a:06:bc:3b:e2:73:77:5b:a5:4b:85:9a:6a:
0e:a9:d3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:14:02 2026 by rpki-client