
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/893cd11a-4ad9-36c4-b18d-356af5c9936a.roa
File: 893cd11a-4ad9-36c4-b18d-356af5c9936a.roa (raw, json)
Hash identifier: qqPD9/0cwMgFeSP1AbZlJ8mKVFOpT8ZrY/cPqISpZPE=
Subject key identifier: 3F:2D:23:AD:32:7E:E7:21:6D:40:9D:0E:D4:D6:0C:87:AD:86:4F:6F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D524388CCE866C68F4CD22B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/893cd11a-4ad9-36c4-b18d-356af5c9936a.roa
Signing time: Sat 28 Mar 2026 19:13:19 +0000
ROA not before: Sat 28 Mar 2026 19:13:19 +0000
ROA not after: Fri 26 Jun 2026 19:13:19 +0000
asID: 22258
IP address blocks: 98.54.138.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:52:43:88:cc:e8:66:c6:8f:4c:d2:2b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 28 19:13:19 2026 GMT
Not After : Jun 26 19:13:19 2026 GMT
Subject: CN=785e1a9f-c9ec-4fbe-8d8a-026efd24fd0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e1:11:c1:4b:63:c7:b5:97:ee:e5:9d:e8:85:
6c:14:59:45:c4:24:c8:6a:71:95:c1:44:e8:91:c4:
3c:ec:a2:08:4c:65:32:21:60:7a:8b:91:7b:71:08:
8c:15:07:68:82:28:fd:0a:97:a1:dc:0e:10:5e:0c:
0e:97:aa:99:fd:26:7f:9e:11:e8:67:f6:2a:fd:8f:
43:dc:c3:4d:d4:33:4e:30:9a:3f:d9:1d:3c:42:7e:
fe:b8:e8:09:b9:44:cb:0d:ef:a0:1c:c4:1c:76:81:
21:8b:00:31:aa:19:86:86:a7:c8:91:f6:c0:12:aa:
c7:47:de:07:26:24:3f:9b:8f:77:e0:28:25:89:c3:
34:6b:63:96:a2:6e:99:38:e6:dd:05:e4:e3:18:a7:
86:2e:29:f0:41:93:75:13:60:5d:7e:aa:3b:1e:ba:
c0:a2:e1:c8:70:2f:9f:05:4a:6f:e3:c6:bc:53:65:
d8:62:72:b9:0d:4f:e2:53:95:42:ed:36:70:83:0c:
f3:96:2d:ce:46:a9:54:e0:3f:e3:7f:8b:57:88:e2:
d7:91:79:91:c2:86:57:0c:55:4d:09:6e:e5:96:80:
94:fc:b1:19:31:40:fb:be:9d:73:b6:22:cb:6f:19:
bf:7e:ae:29:d2:c2:f9:f9:e8:d4:f5:43:3a:8e:09:
53:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:2D:23:AD:32:7E:E7:21:6D:40:9D:0E:D4:D6:0C:87:AD:86:4F:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/893cd11a-4ad9-36c4-b18d-356af5c9936a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.54.138.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:b1:83:43:28:46:46:21:9a:71:a7:5d:88:d4:c1:92:c8:20:
be:3f:f3:dd:21:d1:1e:7f:b4:8a:12:aa:b7:12:1f:20:cc:90:
60:a2:61:83:94:ae:99:81:94:48:94:51:08:04:a1:c1:7e:f2:
a1:f8:83:6a:99:55:d6:de:38:a1:44:8e:eb:7a:bc:9c:f2:e2:
37:2c:43:ec:6d:cb:f4:dc:13:de:ec:8a:a0:bd:c7:24:0a:97:
de:a2:38:78:ae:f5:45:f3:65:84:24:f2:cc:15:18:94:73:0d:
9f:c0:de:bc:1c:e8:0d:1f:48:74:e8:6c:05:72:8b:3e:52:5f:
71:e9:fe:05:20:ce:a5:db:dc:10:c0:d7:23:3d:15:27:8a:66:
4c:8e:f5:2f:89:1b:a8:e0:00:9c:b9:2f:6f:22:3c:88:73:5b:
22:52:35:de:b3:49:82:7f:12:da:48:4f:56:a5:0d:e4:b6:15:
81:6a:86:ea:70:ef:24:3a:41:46:6d:03:c3:8e:71:b8:35:c3:
8e:0e:96:4e:91:67:06:5b:b0:56:f0:0f:17:97:d6:08:a7:19:
a7:d3:02:62:cc:3d:36:1e:16:07:22:c0:d1:b1:ac:ff:f5:db:
3b:14:08:71:df:5e:30:23:dd:86:74:51:0b:59:80:c9:62:a9:
64:49:d8:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ4jM6GbGj0zSKwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk
Nzg1ZTFhOWYtYzllYy00ZmJlLThkOGEtMDI2ZWZkMjRmZDBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneERwUtjx7WX7uWd6IVsFFlFxCTIanGVwUTo
kcQ87KIITGUyIWB6i5F7cQiMFQdogij9Cpeh3A4QXgwOl6qZ/SZ/nhHoZ/Yq/Y9D
3MNN1DNOMJo/2R08Qn7+uOgJuUTLDe+gHMQcdoEhiwAxqhmGhqfIkfbAEqrHR94H
JiQ/m4934CglicM0a2OWom6ZOObdBeTjGKeGLinwQZN1E2Bdfqo7HrrAouHIcC+f
BUpv48a8U2XYYnK5DU/iU5VC7TZwgwzzli3ORqlU4D/jf4tXiOLXkXmRwoZXDFVN
CW7lloCU/LEZMUD7vp1ztiLLbxm/fq4p0sL5+ejU9UM6jglTKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD8tI60yfuchbUCdDtTWDIethk9vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODkzY2QxMWEtNGFkOS0z
NmM0LWIxOGQtMzU2YWY1Yzk5MzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYjaKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIKxg0MoRkYhmnGnXYjUwZLIIL4/890h0R5/tIoSqrcSHyDMkGCiYYOU
rpmBlEiUUQgEocF+8qH4g2qZVdbeOKFEjut6vJzy4jcsQ+xty/TcE97siqC9xyQK
l96iOHiu9UXzZYQk8swVGJRzDZ/A3rwc6A0fSHTobAVyiz5SX3Hp/gUgzqXb3BDA
1yM9FSeKZkyO9S+JG6jgAJy5L28iPIhzWyJSNd6zSYJ/EtpIT1alDeS2FYFqhupw
7yQ6QUZtA8OOcbg1w44Olk6RZwZbsFbwDxeX1ginGafTAmLMPTYeFgciwNGxrP/1
2zsUCHHfXjAj3YZ0UQtZgMliqWRJ2Pw=
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:20:01 2026 by rpki-client