
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/571f4a3c-4988-3adb-9e39-1e0a487adfb1.roa
File: 571f4a3c-4988-3adb-9e39-1e0a487adfb1.roa (raw, json)
Hash identifier: UAf4XnAZVHRJF7wdswPdbadaBzLpDkV7xIzUTApHkqk=
Subject key identifier: ED:F7:2E:8C:A5:EE:66:CE:7E:A1:98:9A:48:CF:0C:94:D9:E7:F2:F7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE58ABCDB9A07C4545924920
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/571f4a3c-4988-3adb-9e39-1e0a487adfb1.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 98.63.36.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:58:ab:cd:b9:a0:7c:45:45:92:49:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=408fecab-5184-4d9c-9720-cd6729cd0e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0a:93:ed:df:2e:a5:ed:2b:6c:b6:83:36:91:
64:0e:89:83:a3:c3:08:9d:45:2d:2b:7f:b3:5c:ad:
d6:b0:b5:d6:21:8b:9c:16:1a:57:57:61:33:34:21:
6e:2b:0b:0a:e6:f7:2a:13:f3:57:fd:ae:e5:09:27:
82:eb:dc:39:43:bf:ab:c3:3b:3b:a7:15:04:bd:52:
40:44:ab:2e:8d:2f:8b:6f:ba:60:4d:ed:40:a1:d6:
0e:9a:5b:02:e3:d0:60:63:73:32:7d:63:40:aa:2e:
8c:55:5e:e5:16:03:3c:ab:95:66:6c:55:77:16:7b:
c2:3c:b6:4e:07:72:57:15:97:2b:3b:79:5a:b7:c2:
e8:f9:a0:c9:b1:1d:25:81:9a:e6:8e:59:60:14:88:
e3:93:85:b8:98:fb:ff:29:40:e2:9d:16:d3:bc:af:
ef:66:c9:80:75:21:84:09:0b:39:14:69:bb:af:92:
96:2f:43:28:b0:eb:f4:60:26:0d:91:a3:1d:b0:6e:
0b:53:5c:c6:29:0f:8a:a3:45:90:65:a5:6f:78:22:
e8:a3:aa:8e:48:c7:ff:5b:62:c3:7a:7d:ca:24:92:
82:5e:bf:30:2f:2f:ec:bc:4e:e3:75:ee:06:69:f4:
88:8d:fc:33:29:c2:a3:32:80:d3:5c:98:0d:f0:a2:
b6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F7:2E:8C:A5:EE:66:CE:7E:A1:98:9A:48:CF:0C:94:D9:E7:F2:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/571f4a3c-4988-3adb-9e39-1e0a487adfb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.63.36.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:ab:99:92:a9:43:b6:64:3f:d8:30:58:73:51:29:20:a2:7a:
4d:17:80:0f:53:bc:32:cf:77:11:44:d8:73:02:17:11:44:a2:
c3:62:bf:8f:ff:58:6b:14:34:f9:9c:f8:43:a0:b5:ad:f9:62:
37:b3:92:bb:af:1e:fd:06:89:1e:ef:23:fd:f3:60:8c:92:92:
db:88:8b:9b:f7:72:ee:3f:a0:da:e8:95:a4:cc:68:3c:95:44:
9b:0e:36:fa:af:1e:95:0b:78:ad:55:85:80:d3:06:d2:aa:ed:
28:8e:2c:76:f8:9d:1d:b9:12:38:e8:67:6d:c4:8d:29:08:eb:
31:c0:5a:c2:95:8f:8a:79:58:12:22:e6:b4:cc:77:99:19:9a:
0d:b9:26:d1:89:bb:9f:7e:cd:2d:ad:10:26:13:cf:ee:d4:00:
d4:de:13:a7:b6:71:ea:57:d9:31:df:42:d5:b3:44:72:c8:98:
a7:5f:54:60:bd:1a:a0:78:5a:f5:fc:5f:f8:b8:7e:e6:f6:dd:
f1:a6:1b:5b:14:fd:ef:72:4b:7f:e5:a4:30:47:d4:6f:0b:8c:
db:a2:42:20:9b:b0:b0:c9:20:cb:14:7d:64:2a:86:fb:48:88:
f7:f5:f0:68:a2:1e:c9:50:37:72:b8:f2:90:8e:f5:51:12:43:
ce:56:79:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWKvNuaB8RUWSSSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
NDA4ZmVjYWItNTE4NC00ZDljLTk3MjAtY2Q2NzI5Y2QwZTAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogqT7d8upe0rbLaDNpFkDomDo8MInUUtK3+z
XK3WsLXWIYucFhpXV2EzNCFuKwsK5vcqE/NX/a7lCSeC69w5Q7+rwzs7pxUEvVJA
RKsujS+Lb7pgTe1AodYOmlsC49BgY3MyfWNAqi6MVV7lFgM8q5VmbFV3FnvCPLZO
B3JXFZcrO3lat8Lo+aDJsR0lgZrmjllgFIjjk4W4mPv/KUDinRbTvK/vZsmAdSGE
CQs5FGm7r5KWL0MosOv0YCYNkaMdsG4LU1zGKQ+Ko0WQZaVveCLoo6qOSMf/W2LD
en3KJJKCXr8wLy/svE7jde4GafSIjfwzKcKjMoDTXJgN8KK2pwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO33Loyl7mbOfqGYmkjPDJTZ5/L3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTcxZjRhM2MtNDk4OC0z
YWRiLTllMzktMWUwYTQ4N2FkZmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYj8kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFermZKpQ7ZkP9gwWHNRKSCiek0XgA9TvDLPdxFE2HMCFxFEosNiv4//
WGsUNPmc+EOgta35YjezkruvHv0GiR7vI/3zYIySktuIi5v3cu4/oNrolaTMaDyV
RJsONvqvHpULeK1VhYDTBtKq7SiOLHb4nR25EjjoZ23EjSkI6zHAWsKVj4p5WBIi
5rTMd5kZmg25JtGJu59+zS2tECYTz+7UANTeE6e2cepX2THfQtWzRHLImKdfVGC9
GqB4WvX8X/i4fub23fGmG1sU/e9yS3/lpDBH1G8LjNuiQiCbsLDJIMsUfWQqhvtI
iPf18GiiHslQN3K48pCO9VESQ85WeYY=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:50:53 2026 by rpki-client