
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72be6e5b-9193-3cc6-8647-50bfa9949382.roa
File: 72be6e5b-9193-3cc6-8647-50bfa9949382.roa (raw, json)
Hash identifier: 15sKla9egYicFyrksHCibaw9/xNCfttPc8UhxBOtO0k=
Subject key identifier: A4:C2:06:A9:62:F8:92:7E:29:54:5F:81:88:24:11:82:AE:CC:9E:5E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5E1E133337130EC87F7780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72be6e5b-9193-3cc6-8647-50bfa9949382.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33651
IP address blocks: 98.35.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5e:1e:13:33:37:13:0e:c8:7f:77:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=12be6dbc-27dd-4248-b486-ba1de18f6f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:74:58:e2:53:36:84:34:5f:55:b9:78:d4:ba:
8f:e7:da:62:82:fc:87:ab:65:06:95:cd:37:35:98:
f0:84:52:ad:74:e7:89:7c:d6:5e:90:7a:98:e0:b5:
a2:fd:fd:64:85:c5:fa:c1:e0:2a:42:0f:3b:a1:53:
72:cd:f6:19:70:b9:e5:7d:a2:b0:6e:cb:0f:5f:79:
52:ec:96:88:ca:b1:d8:20:d1:ee:07:60:5b:80:f7:
a6:e9:40:07:0a:cf:80:2e:b6:d1:a1:bc:32:74:22:
8a:18:d2:89:d1:8b:7e:b1:c8:45:42:a6:a2:59:f7:
2c:af:b0:22:84:e1:a6:b4:c6:a5:ec:34:2f:2d:20:
3d:b5:1f:84:cc:03:c0:85:f4:17:86:9a:b8:58:c3:
c4:8d:cd:85:a2:78:d3:7a:f8:dd:6d:a1:c8:20:f9:
34:f7:51:cc:1e:1e:08:0a:f6:ba:c8:b0:f6:6f:d7:
c2:42:f1:d9:44:62:80:c5:57:74:61:3a:c7:0a:30:
95:33:8b:ce:05:db:fd:19:b3:eb:fe:46:c4:f4:07:
c6:11:7f:74:22:8e:5d:1d:a8:d9:1d:68:62:d3:f6:
86:c5:23:b5:36:15:e2:73:4c:1d:42:79:76:df:3f:
5d:45:64:c2:26:0e:f6:ac:b1:c0:a2:33:67:e0:19:
8b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C2:06:A9:62:F8:92:7E:29:54:5F:81:88:24:11:82:AE:CC:9E:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72be6e5b-9193-3cc6-8647-50bfa9949382.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.35.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:21:63:37:36:42:17:68:3d:1e:06:02:ac:b6:fe:23:96:d8:
b0:f6:33:21:1a:aa:9c:51:f3:b0:a1:de:3c:2b:7d:3a:28:fe:
39:4b:c5:1b:ab:76:a9:03:f1:93:bf:82:f7:b2:ce:20:08:24:
6f:d6:2c:88:48:01:44:16:7c:e1:6b:7e:52:6c:04:50:d5:a2:
d5:7f:f4:05:0a:e5:12:79:80:62:34:2e:9d:6e:c7:fe:ef:f2:
4c:5c:71:3b:78:3a:93:03:cb:fa:bf:36:cc:46:5e:6a:75:0c:
4f:72:a7:66:2b:dc:a1:3a:2b:44:50:cc:33:57:28:5c:90:4d:
07:2a:78:21:cc:f9:2e:db:51:1e:7e:8d:88:62:6e:45:27:50:
cc:40:27:29:59:96:08:ec:d3:c4:f9:0d:2d:89:2e:c7:0b:a4:
8a:d4:f6:63:23:c7:72:bc:43:54:bf:b0:91:1b:ec:81:f2:e1:
55:7c:d8:23:a8:37:cb:77:bf:3d:6e:39:c9:6f:84:2d:fb:6f:
34:ca:53:4b:78:b4:9f:43:2a:e4:b4:19:34:7d:4a:70:6a:e0:
98:ec:b2:0f:0a:93:13:9b:60:74:71:fd:e5:df:05:5a:89:86:
0b:7d:12:fa:a1:5a:85:eb:43:50:43:47:7d:9e:55:0f:25:c2:
e3:80:93:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:02:56 2026 by rpki-client