
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3320ffe5-b697-34e4-a5d8-5091a6cbb768.roa
File: 3320ffe5-b697-34e4-a5d8-5091a6cbb768.roa (raw, json)
Hash identifier: ef2MiytyUcU+OziyYBPpMZqsrQ2dymNurcAfie0xxLI=
Subject key identifier: E4:41:9B:9C:5D:98:34:24:7D:26:1B:FB:AE:3E:CC:67:70:32:14:72
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BCA119D3C7CF251387A9B0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3320ffe5-b697-34e4-a5d8-5091a6cbb768.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 33662
IP address blocks: 98.197.96.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bc:a1:19:d3:c7:cf:25:13:87:a9:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=8d3cabbe-ef99-44a3-a677-1c88b9d5c8e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2c:72:48:b2:57:30:7d:c7:79:56:f0:14:a9:
da:93:44:15:b0:ea:cd:36:fd:3e:38:4d:2b:33:56:
0c:69:eb:60:3c:ed:b8:5e:0e:ba:71:02:a2:ea:b1:
03:ea:47:4f:f2:4f:81:e1:f0:62:24:f4:5f:6a:c7:
69:63:4a:6f:00:7d:2f:5b:15:b2:11:a9:85:ba:4e:
19:0a:61:6e:91:4f:63:67:01:c2:c6:3a:50:bb:ea:
a1:9d:c6:9e:78:ee:e6:a7:89:f5:f1:e1:9a:a9:dd:
71:ec:f7:e7:7d:12:30:bd:3a:9b:44:d3:d1:81:d3:
36:da:71:e0:6d:63:38:93:de:98:32:2b:f7:a7:e8:
ca:3d:19:c1:a9:1d:45:13:95:8f:d4:a0:8f:ae:83:
c4:13:22:ec:64:e1:4f:1d:01:9f:80:b4:45:35:4c:
28:e4:89:a4:4c:cd:e0:41:58:02:b4:f0:9c:b1:b2:
a8:c0:dd:8e:9b:69:87:e9:06:58:6b:b5:da:91:e4:
49:c9:34:c5:f0:f6:53:9b:50:98:2c:dc:8f:ed:d2:
f7:d8:fb:c1:5d:69:2f:81:e6:8f:83:14:9d:e8:5d:
6f:36:5f:43:c0:f6:61:e3:35:14:fe:23:bc:8b:98:
ed:a0:67:e2:88:de:98:a5:e8:36:b6:92:c2:28:5b:
10:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:41:9B:9C:5D:98:34:24:7D:26:1B:FB:AE:3E:CC:67:70:32:14:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3320ffe5-b697-34e4-a5d8-5091a6cbb768.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.197.96.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:17:ee:e2:d7:d4:84:ce:8f:f0:8c:da:a0:b8:64:87:91:7f:
68:29:a1:75:c6:aa:89:1a:47:b9:60:ba:51:54:31:b6:c7:36:
01:47:fa:3b:ba:e5:e9:1b:15:22:de:29:2b:6c:ef:67:81:0d:
74:7f:0a:b6:2f:6e:c6:35:3b:6d:f4:2f:82:85:47:33:3e:39:
57:18:d2:bb:e2:4e:14:55:53:f6:33:c0:2e:31:d1:cf:e1:b1:
97:81:64:54:2f:e2:9b:da:25:86:a5:9d:65:c0:7f:57:84:a9:
5b:81:4c:7d:07:dd:21:fc:0c:26:c8:2d:f1:78:05:f0:fd:c5:
e3:a8:af:bb:92:be:67:6a:ba:69:aa:59:e9:b8:cd:04:17:69:
6b:a7:5b:af:6f:e9:c0:ca:52:38:1f:dd:0d:9f:c9:6c:f7:a0:
9b:6f:d8:96:de:af:96:eb:fd:01:54:b3:bf:12:b4:39:95:db:
fe:76:41:9d:db:17:d9:c9:d6:4d:dd:d1:e7:7a:16:64:f4:69:
fd:49:8d:c8:c9:48:56:1d:9c:f4:8b:d9:b0:66:90:d3:87:60:
c5:0e:b5:9d:a2:fa:84:67:cc:c9:10:89:09:c8:26:65:83:a8:
77:ef:78:61:b3:27:b5:95:c7:8a:0c:5d:20:2c:99:bd:27:1d:
9b:f9:4a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:46:58 2026 by rpki-client