
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/63fefd2e-d7cd-3edc-82fb-7e894866c978.roa
File: 63fefd2e-d7cd-3edc-82fb-7e894866c978.roa (raw, json)
Hash identifier: EpFFv2K3abQKakzpCAVzWT0N9iAuIhl9//wjeFvbYlM=
Subject key identifier: 33:1F:A1:61:2A:0D:20:18:19:DE:EE:2A:F4:DF:67:6D:77:EB:B8:ED
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BB7FA9D30BC06A6B342BA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/63fefd2e-d7cd-3edc-82fb-7e894866c978.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 33662
IP address blocks: 98.57.102.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bb:7f:a9:d3:0b:c0:6a:6b:34:2b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=6dec922e-01f1-4077-817b-9522b61a0b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e9:d7:11:18:3f:33:8f:97:05:03:b1:40:6e:
20:b3:ef:87:32:17:25:75:6a:a2:c9:bd:e3:8d:7d:
73:dc:9f:82:ab:62:0f:b0:79:3a:f8:34:e1:61:2b:
d6:bb:75:60:f0:56:8e:3e:1b:ed:26:a5:bb:d0:f5:
c8:25:68:c5:d4:b6:ed:a7:28:6d:77:66:60:24:b3:
7c:e1:94:c1:c2:5e:e6:11:f6:d8:10:0d:3d:48:68:
bc:db:8b:3e:41:4c:fb:ec:f7:cf:35:7f:b3:9a:19:
da:45:03:85:48:3b:95:61:bb:bc:b5:e1:97:7d:61:
36:cc:17:f6:f4:74:75:d0:de:95:01:20:92:10:ab:
4e:78:78:72:52:08:64:ad:1b:a2:8f:87:ae:0a:b1:
e3:21:da:19:86:3b:db:ec:ab:5d:e3:1a:4a:1c:49:
6a:f2:8b:bd:ab:b7:7a:d3:e6:cd:c6:13:61:55:ba:
92:f5:44:ea:94:b8:33:cd:68:58:ff:bc:b4:3e:84:
8a:ac:2e:fb:af:87:12:b7:55:26:98:6b:fe:b9:86:
4b:8e:e1:d5:32:94:dd:05:2c:99:e2:18:6f:53:4b:
54:10:67:02:ef:5a:6a:02:96:fd:22:55:45:07:ff:
21:7c:e1:a1:1f:fd:fe:65:b7:1a:3c:dc:1a:7c:63:
5b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:1F:A1:61:2A:0D:20:18:19:DE:EE:2A:F4:DF:67:6D:77:EB:B8:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/63fefd2e-d7cd-3edc-82fb-7e894866c978.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.57.102.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d2:59:64:ea:14:e2:49:30:98:cd:c8:40:98:a5:b3:69:7c:2e:
59:0e:63:db:37:37:a2:3d:67:ef:36:3a:8f:14:46:5a:e3:71:
8c:14:46:94:a9:81:a2:31:e3:f2:42:3b:79:49:12:30:15:aa:
7d:63:53:00:e6:ef:55:84:11:a8:d7:3c:87:e2:6e:16:53:83:
c5:c1:84:ee:97:fb:c9:45:29:fb:a1:ef:e3:9f:31:31:e4:28:
ab:a1:d1:76:5e:c3:b6:ca:7b:31:5f:93:26:3a:0a:bc:bd:52:
57:e1:61:d6:11:4e:70:a8:34:c7:de:f0:c6:df:27:91:63:be:
85:28:38:36:46:cd:0b:b1:b6:7a:98:b3:2b:3e:23:3f:fa:e3:
0d:12:64:8c:f6:d0:e3:b8:da:e9:62:96:dd:2a:e8:4f:62:6d:
b6:9b:df:ba:5c:de:23:11:87:98:f6:f6:e0:63:c2:8a:57:2e:
e8:ca:6d:69:9a:05:53:5a:01:49:67:46:b8:4e:9f:33:5e:31:
99:65:b6:8d:05:f5:e4:1a:ad:47:84:3c:d8:a7:45:9d:8e:c8:
8b:91:52:0e:df:71:81:bb:35:ee:31:a0:e2:15:a0:e9:c5:4e:
50:9a:15:0a:b2:f3:6e:2b:01:2a:c3:4b:21:52:dd:52:3b:6f:
d6:ab:ea:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:13:02 2026 by rpki-client