
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25c4d5c0-8d21-3775-ace7-e6c791ed3c66.roa
File: 25c4d5c0-8d21-3775-ace7-e6c791ed3c66.roa (raw, json)
Hash identifier: WS1nn6fIDgYJCuCva9nLGdcxhPIVL3KauGCiVqNDNeY=
Subject key identifier: 56:CA:F5:0D:95:A8:0D:58:19:7F:F2:0B:F6:18:6D:FD:4E:F9:C5:47
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5892E7BD3B21976B7E7E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25c4d5c0-8d21-3775-ace7-e6c791ed3c66.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 98.213.220.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:58:92:e7:bd:3b:21:97:6b:7e:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=04e7efbb-2b9b-46ef-94e3-04bc7cb2eb0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5a:0e:43:66:8b:b7:61:ce:64:86:92:38:95:
d2:37:67:9e:28:02:61:84:14:e8:dc:93:8d:04:ce:
5e:1d:f0:18:b8:21:16:8a:ea:14:70:1b:cf:ed:b5:
2b:7f:b1:72:21:7a:c0:0a:b1:1a:44:5e:b9:52:a7:
77:47:c5:cd:b4:4b:50:0e:ef:53:5e:9b:c1:c4:2e:
8b:b9:47:96:87:79:e5:bb:45:48:96:06:99:5f:ea:
54:0d:ac:03:fd:1d:72:0b:43:20:59:9b:e5:cb:81:
eb:e8:d2:4a:b7:cd:34:d1:cb:93:6b:3b:45:cd:09:
a2:fd:7c:5e:cb:85:14:cc:72:3a:8e:47:0b:b6:69:
1e:f2:6f:f5:b7:cf:fa:5a:8b:70:c2:b2:8f:3f:c9:
9d:eb:2e:30:65:7c:c9:3d:b0:fb:62:c4:08:ba:b1:
7f:8a:97:7b:ed:62:99:20:a8:b4:45:60:ad:eb:a0:
80:ed:40:03:ef:2b:9a:2b:d8:d4:26:f5:1c:b7:68:
c6:bf:26:b9:9f:b1:54:26:a5:f8:5b:53:d8:24:71:
fc:b2:55:06:cf:83:66:8b:f2:8a:47:9d:ab:9c:5e:
1f:44:b1:cb:7c:b8:c4:b3:a5:36:be:c2:84:99:3d:
95:c0:7d:de:13:e6:c0:44:f8:fa:e3:3e:72:25:f2:
a1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:CA:F5:0D:95:A8:0D:58:19:7F:F2:0B:F6:18:6D:FD:4E:F9:C5:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25c4d5c0-8d21-3775-ace7-e6c791ed3c66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.213.220.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:85:7f:2e:ed:18:af:9b:4f:d3:07:2b:79:7c:1d:9d:7c:77:
4a:25:5b:60:6b:a4:4f:c4:87:94:32:52:72:ce:02:cb:74:1b:
54:d6:7d:64:4f:27:4c:3d:a1:9f:10:43:2c:5e:82:61:77:8b:
f3:ad:08:78:6b:2a:85:20:bf:8c:2c:be:9f:96:b5:63:04:d7:
cc:52:9b:bb:b4:c6:fa:22:89:9d:4c:0b:d8:f8:61:fe:64:f3:
1a:5e:6f:e3:9b:9d:02:ff:33:e4:ce:e6:cd:a6:88:d8:01:48:
50:2c:b8:2a:7d:af:ba:c2:bc:8f:23:08:c2:f6:62:28:e5:d2:
0f:74:38:d7:2d:ce:5c:2b:46:dd:41:fc:56:fc:cf:4d:5c:30:
ed:83:2e:85:ad:31:5a:cf:ed:8f:d9:6a:2d:f5:6a:20:25:b4:
69:4f:bd:9f:6c:64:38:32:2f:52:c0:c0:a2:d0:88:82:83:72:
68:e0:41:ba:92:80:67:e9:f4:38:55:fe:b5:dd:05:99:43:5c:
9d:02:9e:44:65:9c:64:59:f9:75:65:dc:ee:21:df:d5:16:4f:
7b:4f:23:f3:10:3a:5b:79:0a:44:88:a9:ab:1b:a1:aa:66:55:
47:d4:c5:26:f6:75:09:0c:79:54:83:0c:c1:4c:4a:43:d8:47:
95:5e:ce:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWJLnvTshl2t+foAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
MDRlN2VmYmItMmI5Yi00NmVmLTk0ZTMtMDRiYzdjYjJlYjBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFoOQ2aLt2HOZIaSOJXSN2eeKAJhhBTo3JON
BM5eHfAYuCEWiuoUcBvP7bUrf7FyIXrACrEaRF65Uqd3R8XNtEtQDu9TXpvBxC6L
uUeWh3nlu0VIlgaZX+pUDawD/R1yC0MgWZvly4Hr6NJKt8000cuTaztFzQmi/Xxe
y4UUzHI6jkcLtmke8m/1t8/6WotwwrKPP8md6y4wZXzJPbD7YsQIurF/ipd77WKZ
IKi0RWCt66CA7UAD7yuaK9jUJvUct2jGvya5n7FUJqX4W1PYJHH8slUGz4Nmi/KK
R52rnF4fRLHLfLjEs6U2vsKEmT2VwH3eE+bARPj64z5yJfKhKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFbK9Q2VqA1YGX/yC/YYbf1O+cVHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjVjNGQ1YzAtOGQyMS0z
Nzc1LWFjZTctZTZjNzkxZWQzYzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYtXcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAASFfy7tGK+bT9MHK3l8HZ18d0olW2BrpE/Eh5QyUnLOAst0G1TWfWRP
J0w9oZ8QQyxegmF3i/OtCHhrKoUgv4wsvp+WtWME18xSm7u0xvoiiZ1MC9j4Yf5k
8xpeb+ObnQL/M+TO5s2miNgBSFAsuCp9r7rCvI8jCML2Yijl0g90ONctzlwrRt1B
/Fb8z01cMO2DLoWtMVrP7Y/Zai31aiAltGlPvZ9sZDgyL1LAwKLQiIKDcmjgQbqS
gGfp9DhV/rXdBZlDXJ0CnkRlnGRZ+XVl3O4h39UWT3tPI/MQOlt5CkSIqasboapm
VUfUxSb2dQkMeVSDDMFMSkPYR5VezkQ=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:54:17 2026 by rpki-client