
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/57779bec-c941-3e55-a943-a3c4b4a8e033.roa
File: 57779bec-c941-3e55-a943-a3c4b4a8e033.roa (raw, json)
Hash identifier: 8iMJfWRHl9Xht1bBOz37A7Qx1XdzecevGLcFqp6tYhs=
Subject key identifier: DC:15:59:55:62:D2:AA:4B:9C:B8:38:37:FA:0E:32:D7:C5:23:5D:9F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE58A477E58DEA041E0A8B40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/57779bec-c941-3e55-a943-a3c4b4a8e033.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 98.34.0.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:58:a4:77:e5:8d:ea:04:1e:0a:8b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=b12765f4-6626-47db-9006-d9cb027f0d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8e:3b:63:46:3d:5a:e6:33:b2:f2:14:93:ea:
e9:69:ab:35:13:7f:48:ed:bc:33:d5:40:4a:63:fd:
a7:5e:42:f3:0c:75:9a:b8:a3:26:d5:78:4e:85:75:
74:74:b5:63:39:a9:2b:c5:af:79:d6:19:6a:56:66:
b0:04:fb:4d:fe:00:8c:46:2d:52:c1:be:af:3b:b3:
a3:93:65:0f:c9:9a:be:1b:8e:fb:bd:cf:16:4d:fb:
43:ae:30:79:a5:79:78:9c:71:05:59:cc:04:0b:8a:
19:9d:5e:a5:76:d9:cb:50:0e:f9:16:e9:3e:c9:b3:
5e:6d:46:35:b5:17:6e:10:ca:2f:d0:dd:0b:06:46:
56:23:93:82:d9:3a:21:c6:e4:a8:37:e3:fa:1b:4b:
30:90:f7:44:dd:c4:f7:e8:1a:cb:42:77:81:0d:33:
1b:c7:83:0f:bb:1f:12:67:3c:a3:9e:5e:77:d0:1f:
3d:27:d5:9c:95:20:11:21:5b:34:a0:23:d2:27:1f:
f1:93:08:28:25:45:30:c6:2d:a2:5f:ed:57:f2:7b:
34:6b:48:83:a5:f8:66:e4:ef:35:07:4a:eb:ab:24:
7f:3e:89:0a:52:50:77:fb:24:e6:07:46:26:ca:84:
16:59:fe:2b:f7:35:0f:3d:a5:d0:b6:dc:f8:0c:6b:
12:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:15:59:55:62:D2:AA:4B:9C:B8:38:37:FA:0E:32:D7:C5:23:5D:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/57779bec-c941-3e55-a943-a3c4b4a8e033.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.34.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:d2:01:7c:cc:fb:19:25:a7:4b:6a:83:20:a1:54:3d:f4:f9:
a3:71:22:07:4e:26:0a:e1:bc:3c:de:89:79:40:54:9e:5a:6f:
76:60:33:ee:1c:2c:9c:09:13:fa:2b:c5:bd:fd:97:e4:f2:7b:
3d:0c:04:02:ea:2c:72:6e:08:4b:d6:52:69:36:cf:44:e6:2e:
a0:f7:9c:18:7b:8b:33:ff:31:01:1e:50:8c:db:f8:42:08:43:
4b:31:b3:65:1e:b2:68:ce:d5:fb:4e:d2:07:90:87:13:f3:da:
30:28:eb:58:07:ac:7f:14:63:30:99:0d:9d:c7:22:e3:7c:4d:
45:48:0e:9a:a4:f7:cb:47:ba:6e:a4:09:d8:ce:f4:11:29:66:
e1:7b:0b:1f:12:8a:20:c3:dd:af:90:96:9b:4c:42:5c:d8:46:
57:b7:08:19:31:3b:07:52:97:a6:26:6b:c6:8d:d4:d6:69:45:
50:13:15:c4:88:25:64:30:02:ac:43:33:ce:9a:c4:62:cd:b8:
34:b9:41:ba:db:fb:05:bd:dc:e3:ee:d5:85:50:d0:45:0e:25:
52:fb:12:17:35:2e:42:26:35:fa:8d:a8:82:2b:f3:ca:48:19:
12:c5:de:59:6b:06:de:4f:9c:b4:02:b1:a1:86:11:15:fe:aa:
8c:5a:25:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:18:00 2026 by rpki-client