
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25addf9f-09a9-34aa-bc82-81b05d68d7e3.roa
File: 25addf9f-09a9-34aa-bc82-81b05d68d7e3.roa (raw, json)
Hash identifier: 3GDUWYaEax/duJwCUEfTtu468+HFVsHHjXqCURhHm2Q=
Subject key identifier: BA:D8:1C:D2:E6:68:E0:BC:0B:8C:CF:BC:78:64:5F:0A:B0:7F:98:39
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE595878A9B5072BED6CE000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25addf9f-09a9-34aa-bc82-81b05d68d7e3.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33660
IP address blocks: 98.202.172.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:59:58:78:a9:b5:07:2b:ed:6c:e0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=c9c15a48-14d3-4cba-a0d3-d5a5ffd5afab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ea:b6:01:d1:98:55:19:32:66:0c:bb:5d:94:
87:9c:c9:0a:d1:ea:6a:9d:b9:26:16:ba:0d:1d:44:
78:2e:29:af:a1:6a:7b:2f:af:a7:94:92:cd:5a:db:
62:c4:77:5a:20:90:87:89:2a:44:c0:6f:cb:8f:ea:
2c:be:ef:e8:04:d7:4f:c5:a4:88:e8:dc:7d:ea:80:
e9:01:22:db:5b:51:32:dd:f3:72:30:99:14:78:17:
3f:13:bc:4c:af:7e:4c:43:97:75:1d:6d:b2:37:72:
2c:c5:3e:48:65:f7:70:35:12:4d:b0:00:3b:b6:93:
bc:bf:18:cf:af:93:8b:89:d7:a1:fc:7d:2a:e0:69:
6d:85:95:7f:56:4d:60:7f:cc:1b:e4:0e:b5:0c:43:
0d:5d:73:a5:4f:28:f8:ad:78:14:82:29:a5:92:a7:
cf:01:09:71:68:df:7f:03:fa:e8:26:33:2f:b0:ec:
d1:df:41:66:dc:31:e7:05:1e:f2:c1:22:79:d0:19:
40:de:fc:d0:1d:0c:d9:9a:db:1c:f5:a2:66:f8:90:
52:a3:1b:a7:c5:76:70:65:e1:f6:c8:e2:85:0b:39:
0b:64:5c:7c:69:b8:f5:27:31:ad:f8:3d:b5:61:97:
1c:d3:53:ac:1c:38:1d:16:be:f1:30:73:ec:fd:69:
a1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D8:1C:D2:E6:68:E0:BC:0B:8C:CF:BC:78:64:5F:0A:B0:7F:98:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25addf9f-09a9-34aa-bc82-81b05d68d7e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.202.172.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:6a:ae:4f:c2:5a:d8:42:32:2f:34:11:79:e2:ad:ce:c6:a0:
f6:bd:a0:f7:64:8a:1a:1c:82:48:94:58:30:eb:27:57:22:bf:
b5:47:26:e8:41:bf:0e:ab:90:a0:ab:69:e8:6c:d8:59:c8:b0:
1f:9c:df:fb:b0:2b:e7:f9:a8:09:da:ed:38:a3:8e:da:86:33:
60:6f:9e:a2:1c:dd:f3:42:97:86:23:69:0c:0e:f4:14:ac:2a:
82:d9:73:db:6e:43:08:43:a2:e8:fc:b4:dc:06:9c:86:19:65:
b4:c0:55:ca:78:e5:bb:d2:86:8d:c9:d9:68:9d:98:97:26:80:
38:1b:a1:60:db:74:32:0c:5d:10:1a:d4:d2:5f:c6:f9:29:d0:
77:b9:39:85:58:fb:9b:f4:9b:3d:44:99:c0:38:7a:36:3e:77:
3c:8f:25:52:15:3b:9d:06:29:61:c6:50:e4:2f:f0:54:5b:cc:
1e:94:d2:30:51:00:05:e1:44:6b:44:5c:d4:aa:4d:f5:3c:2f:
30:b1:e8:e3:e7:e3:81:e3:26:13:9c:31:91:18:c9:81:e5:7a:
a5:d7:f1:69:87:b0:3b:81:ea:da:1a:bb:cf:0e:9a:0e:e5:ff:
8d:1d:e6:a5:c1:e2:36:5e:fd:52:df:a4:56:b0:98:26:ac:65:
12:91:6d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:13:43 2026 by rpki-client