
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25d29af6-dac0-3bee-96f9-c6b429f43bba.roa
File: 25d29af6-dac0-3bee-96f9-c6b429f43bba.roa (raw, json)
Hash identifier: HCsFp4EJhvgSC+Fa7hwTqGkEhoRjvkEFviscuk1MbH0=
Subject key identifier: 8E:7B:64:2B:2B:2B:A2:DA:B6:C4:29:21:E3:BD:64:F5:40:F3:AC:1B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BB76133CACFD0881216E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25d29af6-dac0-3bee-96f9-c6b429f43bba.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 33662
IP address blocks: 98.201.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bb:76:13:3c:ac:fd:08:81:21:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=3cf45d8e-cbce-40c8-9e2a-c22849e493cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9e:34:03:e4:02:08:92:ee:22:1c:63:61:c5:
b1:fd:6b:07:ec:8c:06:d7:1f:95:1a:0b:35:65:1e:
23:70:fe:35:fa:87:b1:3b:82:25:9b:39:d3:85:cb:
c2:d9:d2:db:c4:12:33:28:29:a5:90:9a:bd:21:52:
30:cd:19:23:0c:a2:9c:2a:98:07:24:83:7b:b9:c7:
6b:45:33:6f:e7:4d:c2:ce:11:50:40:1c:f6:fb:af:
da:c9:ee:19:f3:92:4d:d0:56:87:da:11:00:2c:c7:
1c:b4:1f:55:c0:53:79:7e:72:be:1d:e7:67:28:28:
ab:6b:a1:2f:79:8f:21:48:9b:39:bb:7e:48:be:61:
21:60:41:59:f8:6b:56:40:c4:89:d0:23:4a:97:c8:
30:41:ba:1d:f1:d4:79:51:73:51:96:60:f2:78:cb:
89:f2:2d:d2:83:ff:8a:b4:c7:e0:ad:d2:13:fd:60:
7a:18:48:b8:ff:69:87:74:40:19:aa:93:31:d7:b5:
0b:7c:5b:2d:84:29:3c:f0:c6:2d:6f:61:82:dd:39:
b0:dc:7a:70:93:0a:5c:7d:8f:b7:19:56:bb:e4:0b:
f5:3c:96:fb:cc:7f:c1:4c:fa:2f:f3:57:80:48:c2:
5f:05:59:f2:56:b1:5a:7f:af:9c:88:fc:18:4a:76:
7a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7B:64:2B:2B:2B:A2:DA:B6:C4:29:21:E3:BD:64:F5:40:F3:AC:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25d29af6-dac0-3bee-96f9-c6b429f43bba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.201.13.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:c4:b1:17:26:c6:7d:44:20:43:5e:1b:15:59:76:3e:77:ac:
4f:cf:66:3e:de:f9:85:f7:18:99:7e:55:97:55:91:b6:75:66:
da:ee:92:2d:0d:6d:88:ef:5d:cd:89:68:f1:ff:6b:dd:56:aa:
6b:3f:61:c6:0f:5f:87:05:87:04:bc:18:a9:0e:20:f0:04:60:
80:3a:49:55:ef:77:cc:87:a1:b1:f7:b5:3b:4c:bf:8b:ad:bb:
ed:08:32:82:a1:69:d2:a8:6f:9a:83:f1:ab:05:86:4e:2d:9a:
ff:1d:f0:8b:25:82:e7:cb:ea:b3:f2:1e:e0:fc:ed:4c:62:95:
b3:19:b6:02:e4:18:4c:02:23:5e:9c:76:a0:f5:c1:32:77:2f:
28:60:6b:32:bb:81:52:60:85:a7:8f:aa:1a:5f:f3:a1:97:9f:
42:f0:83:2e:48:91:15:63:e9:67:55:7d:4a:ec:b0:2d:c4:e5:
f9:06:75:ad:2d:8d:ae:d7:77:74:15:29:1d:6b:e6:1f:73:8d:
d3:92:6c:af:f6:5e:fb:ce:eb:72:0b:20:02:55:a5:9c:b7:b8:
72:48:7f:e5:8b:11:73:b1:a6:d9:69:59:71:dc:49:c1:36:66:
a6:62:cb:28:18:57:46:c6:28:21:44:88:3b:fd:45:ac:0a:3e:
ff:f1:4f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:59:03 2026 by rpki-client