
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6027b80e-13ab-33bd-8b70-376a7a024443.roa
File: 6027b80e-13ab-33bd-8b70-376a7a024443.roa (raw, json)
Hash identifier: Pu3eSxOtA6H3d/8hlIUIYtLjlbAKhVQ89jOBsNuk7G8=
Subject key identifier: 13:76:90:39:33:B5:1D:C8:88:FF:CC:40:20:DC:37:DE:39:39:1F:53
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BCAA3A4D3C24D86C3EEB80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6027b80e-13ab-33bd-8b70-376a7a024443.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 33662
IP address blocks: 98.34.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bc:aa:3a:4d:3c:24:d8:6c:3e:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=6feb12bd-4ed3-48d3-a92a-dee71392ddcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:65:e9:43:ed:d1:91:62:e7:30:61:74:68:b6:
3d:a7:de:55:8b:54:54:f1:8a:32:dc:d7:7c:a7:b5:
10:fc:3a:2c:f5:89:d3:85:30:54:37:27:38:85:68:
07:3b:19:93:06:18:e7:d4:18:e7:8d:88:89:a8:0c:
5e:f2:74:8c:0c:b2:c0:b1:a3:87:f2:ae:cf:1d:51:
61:08:67:3d:09:ab:0e:36:2e:dd:25:93:0a:0a:da:
32:c6:ba:b9:fc:4d:f6:d0:09:ce:02:d3:15:63:67:
d6:44:c6:54:7a:c3:2e:9b:86:8b:6d:0f:bd:5c:78:
f8:00:45:e6:3e:6f:39:8c:c1:d1:aa:c6:9e:1b:bc:
da:78:9c:47:a3:45:00:02:ff:4d:67:62:2b:53:20:
21:14:16:3c:f3:e1:d1:6f:c9:17:88:10:80:90:84:
7c:9b:90:53:ff:63:43:e0:77:9a:8d:0e:11:cf:47:
13:14:0d:99:3d:48:6e:e1:86:aa:a2:4f:68:a6:41:
f3:4a:78:ab:0b:21:d7:12:23:4d:17:e7:2f:8f:d5:
f3:df:35:c7:55:8a:65:ee:f6:97:ca:7f:fa:6b:05:
60:25:34:57:b6:fd:bd:56:fe:96:2e:44:20:1d:b2:
9e:a3:66:67:ec:68:8b:42:38:06:30:91:89:20:43:
1d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:76:90:39:33:B5:1D:C8:88:FF:CC:40:20:DC:37:DE:39:39:1F:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6027b80e-13ab-33bd-8b70-376a7a024443.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.34.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cf:60:1a:cc:82:9a:cf:f6:53:0f:a7:83:59:5b:33:46:fb:42:
24:91:30:ff:f7:c2:fb:b8:8c:fa:b1:e7:06:53:68:05:fd:13:
9e:60:e3:0a:09:47:1f:28:28:16:73:ac:44:a2:43:d4:9e:57:
2b:9d:20:b5:8c:d4:c6:50:c2:66:dd:9f:72:ab:65:80:e1:97:
3f:c6:de:eb:f9:62:95:68:b0:94:ba:b1:73:af:35:44:58:52:
0f:f4:97:80:3a:3e:57:03:6a:27:ff:86:86:fe:43:a2:27:0b:
87:db:16:f0:a0:a6:99:cf:28:65:5b:26:16:2d:53:c6:55:88:
a6:9e:62:2f:0f:d8:0e:ca:08:34:90:9d:ff:71:75:30:6f:f1:
80:70:3c:9e:9d:87:f3:18:57:be:41:c6:23:b9:ce:aa:bf:fb:
b8:59:3f:75:d4:a0:87:0e:60:c8:c7:7a:6e:d3:82:1a:0a:05:
26:7f:ed:50:ba:ec:d0:d4:0d:a1:a7:89:56:9c:ef:7d:22:22:
b5:56:e2:c5:0b:bb:96:60:f7:64:18:a2:80:03:c6:12:60:9b:
3e:36:78:86:b1:bf:bb:72:bc:b9:a5:50:a2:91:70:97:aa:e6:
ae:65:85:38:a2:0d:3a:67:64:14:10:92:24:ba:9c:be:59:b0:
eb:4e:93:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvKo6TTwk2Gw+64AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk
NmZlYjEyYmQtNGVkMy00OGQzLWE5MmEtZGVlNzEzOTJkZGNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7mXpQ+3RkWLnMGF0aLY9p95Vi1RU8Yoy3Nd8
p7UQ/Dos9YnThTBUNyc4hWgHOxmTBhjn1BjnjYiJqAxe8nSMDLLAsaOH8q7PHVFh
CGc9CasONi7dJZMKCtoyxrq5/E320AnOAtMVY2fWRMZUesMum4aLbQ+9XHj4AEXm
Pm85jMHRqsaeG7zaeJxHo0UAAv9NZ2IrUyAhFBY88+HRb8kXiBCAkIR8m5BT/2ND
4HeajQ4Rz0cTFA2ZPUhu4Yaqok9opkHzSnirCyHXEiNNF+cvj9Xz3zXHVYpl7vaX
yn/6awVgJTRXtv29Vv6WLkQgHbKeo2Zn7GiLQjgGMJGJIEMdRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBN2kDkztR3IiP/MQCDcN945OR9TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjAyN2I4MGUtMTNhYi0z
M2JkLThiNzAtMzc2YTdhMDI0NDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYiKBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAM9gGsyCms/2Uw+ng1lbM0b7QiSRMP/3wvu4jPqx5wZTaAX9E55g4woJ
Rx8oKBZzrESiQ9SeVyudILWM1MZQwmbdn3KrZYDhlz/G3uv5YpVosJS6sXOvNURY
Ug/0l4A6PlcDaif/hob+Q6InC4fbFvCgppnPKGVbJhYtU8ZViKaeYi8P2A7KCDSQ
nf9xdTBv8YBwPJ6dh/MYV75BxiO5zqq/+7hZP3XUoIcOYMjHem7TghoKBSZ/7VC6
7NDUDaGniVac730iIrVW4sULu5Zg92QYooADxhJgmz42eIaxv7tyvLmlUKKRcJeq
5q5lhTiiDTpnZBQQkiS6nL5ZsOtOk5g=
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:18:03 2026 by rpki-client