
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9152a252-f49d-3551-bb1f-1c7b43b3f7a5.roa
File: 9152a252-f49d-3551-bb1f-1c7b43b3f7a5.roa (raw, json)
Hash identifier: 24MrPNrbsQc/FuJ/o58sqiL2yCksV6jDhXUau+Anr54=
Subject key identifier: DD:A0:52:37:C8:E7:F4:2F:1F:33:74:D8:AA:42:08:87:66:7A:9C:BA
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5CEC7A662342EE7D962DA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9152a252-f49d-3551-bb1f-1c7b43b3f7a5.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 98.223.80.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5c:ec:7a:66:23:42:ee:7d:96:2d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=0d28c796-e86a-4f46-9348-fdbdd5b01af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6e:26:2a:72:44:13:4b:45:6d:b7:1c:5b:67:
bb:a6:c1:fb:7f:d0:3b:cd:3c:48:91:66:61:01:8b:
d0:88:5f:f2:94:97:f9:06:73:86:b8:af:79:b6:7f:
1d:fb:80:d0:b5:51:58:8f:38:b5:c3:6f:51:8f:65:
8c:bf:44:7e:0e:e8:e3:2d:d3:c6:fc:91:16:fb:1f:
7e:91:5e:01:a7:6f:bf:b2:af:94:67:bb:5d:69:2f:
d2:98:f5:6f:31:a2:09:ef:a2:0a:36:69:d6:7d:ca:
33:c3:bd:09:c9:5a:4a:74:30:d1:b0:90:59:4c:38:
29:eb:1c:8a:37:22:ba:9e:b4:92:77:22:a0:ee:65:
15:76:9a:04:71:db:26:70:9c:96:2c:a2:03:30:31:
a5:40:7e:fb:c2:c0:7e:34:20:51:73:30:f2:56:c2:
de:d2:30:04:b7:fb:bd:bf:7e:b7:79:9d:10:d7:a7:
25:39:fd:59:29:38:0e:ea:83:a6:f1:6d:37:de:20:
8b:ff:7e:42:b0:71:cd:ed:87:f7:fb:7e:8e:af:ab:
31:99:d2:f4:43:ff:40:13:f1:21:77:f7:54:65:72:
93:17:3c:80:2d:c3:ca:56:ba:f9:b2:24:40:27:ca:
ef:39:3f:aa:16:9a:61:7f:8f:ab:cc:11:9d:4d:e3:
af:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A0:52:37:C8:E7:F4:2F:1F:33:74:D8:AA:42:08:87:66:7A:9C:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9152a252-f49d-3551-bb1f-1c7b43b3f7a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.223.80.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:ff:99:9c:ad:55:83:30:1f:bf:67:e4:93:1d:0a:dd:ba:81:
e7:28:a0:dc:3b:bc:bb:03:38:01:27:67:cb:86:34:dd:cb:00:
e2:b2:b7:31:bb:71:8f:e0:72:f4:48:a3:c7:10:86:f0:b2:60:
d6:ca:f0:c6:b0:e0:18:57:70:68:3c:9e:0c:c5:45:0f:61:9d:
4a:30:5e:85:8f:d8:be:55:8d:53:19:c9:94:bd:a8:db:fb:47:
9a:08:17:31:c7:9a:2b:e8:51:dd:cc:5d:e6:93:c6:c4:61:42:
ae:30:3b:b5:47:83:56:41:18:38:17:ec:02:59:e5:73:53:5e:
6a:18:99:bb:70:a8:60:02:a9:63:51:f9:04:60:ce:52:a3:86:
71:cf:10:db:ec:90:bb:73:a0:3e:80:88:95:0c:76:d9:98:e5:
c3:75:7d:6e:68:37:bc:f1:60:19:69:6d:bd:ae:08:20:29:aa:
ed:26:47:65:ad:22:b8:b6:25:c1:a4:54:24:31:f6:06:36:27:
ad:54:52:14:d5:01:93:9a:4e:ff:5c:a8:f2:47:68:d9:68:66:
14:50:56:49:56:c9:f2:41:16:b7:b0:1b:3c:9d:8a:cd:76:a5:
df:57:c8:d0:69:a9:38:77:49:74:af:ce:62:a2:6b:5e:66:a2:
a7:10:46:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:00:14 2026 by rpki-client