
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3dd42f74-c1d7-3efe-9884-be7f13b642fd.roa
File: 3dd42f74-c1d7-3efe-9884-be7f13b642fd.roa (raw, json)
Hash identifier: MJg9G9vX+BuV3ByTNG8UaD1rHBRL30+jr1LDrm45v4E=
Subject key identifier: B1:2C:6D:41:1E:B1:BF:93:85:61:7C:0C:D6:C9:B1:33:41:C7:47:E0
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5CDD4A7429CB1159E4B9A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3dd42f74-c1d7-3efe-9884-be7f13b642fd.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 98.213.238.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5c:dd:4a:74:29:cb:11:59:e4:b9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=67b76c78-7011-4881-8b19-0c01bf31c679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:9a:fe:e5:da:d1:89:67:0a:79:8a:5d:e7:16:
c0:fc:db:d4:16:60:32:90:a8:3d:18:9d:55:8e:b7:
56:ff:87:84:d9:f6:ad:a2:64:ac:2e:f6:09:56:52:
b8:85:fc:3c:72:04:f4:da:11:24:b2:72:a4:ab:38:
1b:ab:03:40:35:5c:5a:d3:ba:96:4b:5b:9e:c8:9d:
d2:cd:49:c5:b7:b4:a6:dd:4f:e4:63:bd:65:6f:4b:
5a:20:36:ba:3e:aa:b5:21:a7:2c:b6:59:6a:5c:44:
ae:de:4a:ad:d5:ac:02:75:77:03:1b:c8:00:39:97:
71:7c:9b:ea:91:17:69:bd:02:75:1e:5e:18:58:56:
9e:9f:70:32:a7:42:88:ff:63:a9:8d:4d:cf:9a:cb:
de:38:72:0f:75:dd:1f:34:b4:49:3e:fd:3f:23:bb:
9d:51:3c:16:22:92:5f:8e:17:f7:9b:66:62:6a:ba:
cb:0d:ed:84:6f:77:7b:24:81:8b:dc:36:3b:b6:60:
2d:57:de:05:42:06:e3:2f:0f:c1:fa:33:b9:12:6b:
62:43:af:e4:f4:e5:e9:8f:f1:5f:d9:ec:d3:e5:e6:
16:19:2f:c0:e0:2a:96:48:4d:e8:2e:04:ea:e7:e2:
a0:47:be:67:9b:8e:38:64:bf:48:a6:92:04:f4:ed:
98:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:2C:6D:41:1E:B1:BF:93:85:61:7C:0C:D6:C9:B1:33:41:C7:47:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3dd42f74-c1d7-3efe-9884-be7f13b642fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.213.238.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:48:0f:14:b5:17:87:b2:4c:db:55:74:ed:79:ab:13:3a:e0:
27:ba:ca:b0:92:aa:55:b0:51:01:fc:71:52:92:b4:f0:ac:6e:
38:c2:5c:5a:15:7c:3e:b7:fc:ca:ac:dc:6f:e2:77:4a:55:1a:
b6:9d:cb:00:f3:2c:35:f5:d4:40:c5:47:0b:db:90:0d:a6:6d:
d4:ab:06:6f:82:4a:a8:65:25:d4:0d:62:37:45:2b:53:8c:4d:
ac:e7:98:c2:0b:5b:16:f3:ad:6b:84:6f:2d:eb:77:fc:4a:2b:
fc:cf:ee:22:18:e4:e3:bb:15:78:45:e4:f1:ba:a5:06:ee:b9:
7a:24:86:d1:f2:29:45:e8:25:3f:0b:e5:68:30:17:82:6e:6c:
a8:ff:4c:de:8f:eb:0a:b1:b8:f4:ad:c5:c8:49:bd:64:26:2b:
39:40:9e:ab:02:3b:43:ec:ac:15:3d:7b:ab:f8:5e:23:d1:f3:
b4:9f:d4:92:a6:75:28:2e:e8:2b:dd:84:09:b9:a6:ff:46:f0:
d4:3a:8d:31:1b:bc:c2:41:ab:e8:d5:db:e3:be:0d:cf:54:02:
fb:4d:81:cc:76:b1:4f:6a:a4:d2:db:70:1d:d4:59:e2:ce:f4:
d7:e7:df:91:ef:80:a6:f3:19:41:e7:27:70:4e:ce:55:cd:6b:
04:a6:f1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:56:09 2026 by rpki-client