
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b55e3eb-5ed7-36e8-a06b-65d69bc8b9da.roa
File: 3b55e3eb-5ed7-36e8-a06b-65d69bc8b9da.roa (raw, json)
Hash identifier: M3ufn5TkARFyHQkaHkWVH3hGg6zcLHgrAH3OcbE5zSk=
Subject key identifier: 78:B1:A0:E8:85:21:45:6F:37:0F:95:2F:5C:14:69:82:38:2C:E7:60
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5D027451468E603A01407C
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b55e3eb-5ed7-36e8-a06b-65d69bc8b9da.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 98.253.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5d:02:74:51:46:8e:60:3a:01:40:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=89661682-08b1-4c9d-a34f-e038f6a9add1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3c:b8:1a:75:78:e0:66:18:1a:cd:46:d7:51:
8c:76:90:ff:5f:27:ef:51:15:c5:29:0e:88:fc:29:
1d:66:60:0a:36:43:96:2e:ae:c3:74:66:15:04:0c:
98:dc:25:08:06:14:1c:4a:ff:09:a3:55:c1:54:2c:
60:e6:b2:34:7f:92:f6:12:13:50:13:9a:54:5b:13:
07:4c:db:ae:d0:1e:10:19:9d:84:80:56:a4:34:4e:
dd:66:04:f4:ac:28:29:fa:59:eb:ea:e9:33:4c:cb:
3e:dc:9d:0d:89:ea:cc:e7:37:9c:28:79:a4:c8:07:
fa:f7:58:7b:11:b0:79:71:ea:4a:5c:63:24:2a:ac:
bc:0b:22:40:7a:3b:c7:87:60:aa:8c:f7:99:c5:15:
04:cd:46:d3:ef:79:09:61:98:92:45:c3:bc:c8:55:
c9:a0:2a:42:46:5e:fd:d8:f6:fa:21:c1:58:3f:56:
34:38:c5:e2:fd:0d:d6:ed:07:b5:cf:19:57:a1:d5:
9b:18:8f:c2:f0:b7:ef:2f:c4:ed:a5:98:49:3b:b0:
f7:71:e6:27:13:84:e1:b0:36:d4:78:f0:b3:00:89:
04:29:a6:91:c1:f3:c6:c6:93:e3:02:81:2d:62:a2:
81:94:28:d5:6c:2a:2b:39:f9:16:5c:93:6f:af:06:
87:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B1:A0:E8:85:21:45:6F:37:0F:95:2F:5C:14:69:82:38:2C:E7:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b55e3eb-5ed7-36e8-a06b-65d69bc8b9da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.253.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:3d:f7:b0:da:77:0e:51:32:c0:ad:1f:d9:17:45:ce:fc:0d:
f7:45:41:fe:c6:4a:f2:e1:dd:2e:7a:d7:21:fb:c7:b9:4b:f5:
3f:77:b7:5f:b7:36:73:10:b3:a9:51:31:67:18:e2:cb:1e:ae:
08:4c:63:ab:a6:2e:a1:4a:54:44:1c:ce:88:aa:6e:36:93:88:
07:50:01:0b:3d:5c:85:37:93:3a:cc:d4:10:1b:31:9a:58:c6:
f5:3c:95:97:a8:4f:87:9a:01:7e:de:9b:b9:50:58:6b:1c:08:
cd:29:13:9a:d1:2b:55:d6:7d:27:35:7b:6e:26:04:eb:b3:6d:
be:9c:72:7d:26:27:a1:bb:e4:2d:76:0b:7b:3a:49:fb:59:64:
59:74:53:49:3d:f0:65:0d:a0:3a:59:7a:19:fe:ae:92:7a:5e:
75:5e:c9:7e:cb:77:b9:e1:55:29:51:30:30:d0:ae:eb:2e:c2:
b9:be:b6:01:f4:81:02:14:07:e9:44:75:77:82:1c:31:70:bc:
79:6d:b8:e7:54:11:b5:7d:b3:8e:5f:25:9b:b7:b2:dc:94:ae:
d3:00:44:df:a7:87:99:d3:86:0f:55:95:af:e5:e1:ca:92:82:
5e:64:06:3b:e3:41:04:26:17:a8:a7:80:08:3f:f3:61:ce:4a:
c1:78:e8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:45:11 2026 by rpki-client