
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/154c8b24-40fe-30fd-8c48-61534286a9a9.roa
File: 154c8b24-40fe-30fd-8c48-61534286a9a9.roa (raw, json)
Hash identifier: Vb4VmrvmZ+ELml83HbRF7Y/OE9sReuSwv3fbHLii6NU=
Subject key identifier: 83:66:4C:88:04:C0:E3:CC:47:00:18:A4:9E:69:12:48:7B:62:23:6B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE591B5B9DBFB1E761D8C8C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/154c8b24-40fe-30fd-8c48-61534286a9a9.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33651
IP address blocks: 98.47.88.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:59:1b:5b:9d:bf:b1:e7:61:d8:c8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=b52f7bb4-6070-4038-8128-477a67d17c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:08:59:b3:26:de:46:9d:74:cb:43:b4:cb:53:
4e:28:e2:c1:c6:c7:6c:d7:c3:12:79:c7:09:62:ce:
70:c7:e3:89:c9:4f:28:01:62:08:55:08:1a:9b:50:
b4:e1:0b:8b:02:a0:90:0f:8b:e3:0d:fb:7a:a2:9e:
03:14:01:43:46:b7:fe:53:77:c9:28:64:ac:dd:e3:
53:0f:62:92:40:b3:34:7c:52:17:76:0c:62:91:00:
4e:89:b4:74:ab:8c:a1:9f:94:ae:05:66:14:cb:04:
ab:e7:04:38:68:d6:b0:35:66:5f:4e:ce:3c:fb:ac:
ff:8b:1a:65:77:e5:1f:30:49:5d:c5:11:a8:59:d1:
45:4f:1a:7d:ae:06:8e:79:73:66:34:71:38:38:35:
5e:0f:48:bd:f4:3f:b8:ac:ec:a9:98:be:a4:e2:f9:
b9:fa:c2:36:6c:da:4d:a7:a3:83:3a:24:6e:72:3c:
76:30:e6:eb:96:da:a4:41:84:79:a2:e7:8b:e5:95:
af:92:77:ea:32:41:97:39:43:2a:fd:89:ca:1d:48:
c0:be:e5:b3:f0:2e:0e:a7:b9:48:02:f6:02:27:6a:
2c:b9:a4:f2:fb:3f:79:59:ec:67:b8:43:cb:e6:9a:
8f:f1:ab:2b:7d:2b:76:ac:16:d9:bd:7e:df:3a:8a:
44:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:66:4C:88:04:C0:E3:CC:47:00:18:A4:9E:69:12:48:7B:62:23:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/154c8b24-40fe-30fd-8c48-61534286a9a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.47.88.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:68:0f:c5:2b:99:94:bb:ed:b4:f4:de:d2:28:54:a5:38:eb:
7d:da:01:41:70:db:b6:46:d6:06:39:8e:a2:01:a5:72:e8:0d:
a2:04:17:21:7b:f6:0e:c3:5b:f0:51:84:ab:1e:6f:e3:9f:7f:
2b:fd:78:d9:83:0e:0c:1d:54:d1:88:16:f3:34:de:97:d5:dd:
08:db:9e:6e:8c:94:c4:ee:23:c1:17:4c:7f:6a:b7:6e:26:02:
11:e4:c2:eb:fd:27:ff:37:48:e0:6d:36:8e:14:97:20:aa:ed:
d6:a3:34:ba:2f:5a:1d:a9:ae:f1:e8:bc:e7:de:ba:2a:d4:29:
e6:27:0e:a3:7a:fb:56:7b:c0:1c:5c:8b:53:d0:6d:ff:31:e8:
dd:d6:39:58:5a:38:1e:72:fe:23:0b:46:e6:08:9b:e3:54:12:
7d:21:9e:96:4b:59:13:82:61:bd:69:73:2e:1e:b4:54:4c:fa:
0d:58:a5:92:a9:84:c1:97:c7:6a:f6:39:97:25:ec:7f:c9:97:
68:86:e7:01:e7:01:4b:89:1f:7b:fb:15:31:3d:e1:96:a7:d9:
08:af:48:d9:bc:cb:1d:d1:76:3a:b0:d0:47:34:42:b8:c3:fa:
e0:20:ba:54:1f:32:62:12:44:69:02:eb:90:fe:9b:d9:b0:e8:
52:0f:fc:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWRtbnb+x52HYyMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
YjUyZjdiYjQtNjA3MC00MDM4LTgxMjgtNDc3YTY3ZDE3YzQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwhZsybeRp10y0O0y1NOKOLBxsds18MSeccJ
Ys5wx+OJyU8oAWIIVQgam1C04QuLAqCQD4vjDft6op4DFAFDRrf+U3fJKGSs3eNT
D2KSQLM0fFIXdgxikQBOibR0q4yhn5SuBWYUywSr5wQ4aNawNWZfTs48+6z/ixpl
d+UfMEldxRGoWdFFTxp9rgaOeXNmNHE4ODVeD0i99D+4rOypmL6k4vm5+sI2bNpN
p6ODOiRucjx2MObrltqkQYR5oueL5ZWvknfqMkGXOUMq/YnKHUjAvuWz8C4Op7lI
AvYCJ2osuaTy+z95WexnuEPL5pqP8asrfSt2rBbZvX7fOopEywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFINmTIgEwOPMRwAYpJ5pEkh7YiNrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTU0YzhiMjQtNDBmZS0z
MGZkLThjNDgtNjE1MzQyODZhOWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYi9YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL1oD8UrmZS77bT03tIoVKU4633aAUFw27ZG1gY5jqIBpXLoDaIEFyF7
9g7DW/BRhKseb+Offyv9eNmDDgwdVNGIFvM03pfV3Qjbnm6MlMTuI8EXTH9qt24m
AhHkwuv9J/83SOBtNo4UlyCq7dajNLovWh2prvHovOfeuirUKeYnDqN6+1Z7wBxc
i1PQbf8x6N3WOVhaOB5y/iMLRuYIm+NUEn0hnpZLWROCYb1pcy4etFRM+g1YpZKp
hMGXx2r2OZcl7H/Jl2iG5wHnAUuJH3v7FTE94Zan2QivSNm8yx3Rdjqw0Ec0QrjD
+uAgulQfMmISRGkC65D+m9mw6FIP/DU=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:24:16 2026 by rpki-client