
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9faff11f-4770-3484-a599-38d54f544db4.roa
File: 9faff11f-4770-3484-a599-38d54f544db4.roa (raw, json)
Hash identifier: NeKqqraLUjV7ou6Ed6c0ymiyJ94nmbz1dm/3eICcryA=
Subject key identifier: E6:7C:43:4D:22:83:2A:0B:97:4A:64:01:4A:78:34:B2:89:78:96:51
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE59123F85A9628C9B9E9D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9faff11f-4770-3484-a599-38d54f544db4.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33651
IP address blocks: 98.35.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:59:12:3f:85:a9:62:8c:9b:9e:9d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=9e2b6c88-1815-4b8b-8b93-03e7c9637db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bf:e5:0c:43:49:7b:3e:dd:94:0d:ab:79:4f:
5c:2f:39:16:3a:24:3a:13:4b:8a:d3:93:f1:08:26:
22:25:23:1e:4a:10:4d:12:b4:cd:3e:88:c4:bd:79:
08:67:94:c8:1a:73:b0:37:80:a5:d8:13:4d:71:d3:
66:61:12:a1:9a:8a:1c:15:a8:c2:d9:5e:24:0f:03:
76:eb:7c:34:33:23:2c:18:6b:65:64:40:36:f3:2d:
e6:b1:cd:b8:2a:b6:ec:a7:2d:15:31:15:22:d7:df:
2f:b2:26:e5:b5:1f:dc:55:9c:ed:76:a9:e0:43:de:
2c:18:a5:63:04:3b:67:79:68:3d:1e:29:19:05:4e:
35:36:69:f7:74:67:a6:b7:48:b0:e5:15:c9:00:bd:
69:0f:aa:56:95:2a:5b:43:44:1c:64:bc:bd:fa:59:
cb:ef:00:ad:14:4a:81:39:d0:ac:8b:2e:9e:01:26:
6a:f1:81:be:7a:bd:9b:5c:f7:44:ab:4e:d6:a5:ca:
57:a2:f0:6f:6c:db:58:e9:9d:44:d2:34:21:c2:a0:
f0:18:a6:af:2c:2f:db:d7:da:61:b1:da:e9:29:89:
ca:35:68:c0:3b:dd:92:d6:06:82:2d:00:db:94:10:
48:c7:4a:4a:2b:62:4a:fd:ed:0e:fc:79:a1:3e:c9:
c5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:7C:43:4D:22:83:2A:0B:97:4A:64:01:4A:78:34:B2:89:78:96:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9faff11f-4770-3484-a599-38d54f544db4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.35.92.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:5d:dc:10:16:df:12:66:54:9b:bd:54:5e:6b:1c:b4:ee:ba:
d2:bd:64:19:23:32:a5:58:a6:01:72:50:e9:fd:2c:11:3c:a6:
6f:74:95:d6:8e:18:98:fb:ae:d4:20:93:f5:b9:18:e6:86:c1:
7a:f8:0c:b5:94:2b:70:49:5a:df:e5:b8:d3:40:c7:f6:d5:f3:
2b:d8:d0:2f:51:77:fc:e6:bd:7b:56:1e:ad:bb:b2:5b:a3:a7:
45:94:1c:d9:36:16:a0:ac:c5:d1:ba:17:39:19:7b:e4:0a:2e:
b2:44:d4:19:48:4a:76:94:7c:da:3b:7b:5d:cb:2e:c5:7b:56:
8d:79:c5:3d:d2:78:09:0b:ee:d8:e0:e0:ae:90:2c:b5:e2:b6:
ee:1d:75:d6:ec:bc:40:29:74:b5:dc:2d:be:80:88:3b:e9:37:
ac:c1:60:c4:1b:8c:79:21:f8:51:35:95:98:04:2d:72:d8:17:
16:82:83:32:09:18:7a:13:3c:91:11:03:d4:34:76:00:12:69:
9b:0c:1c:b7:c3:92:de:54:35:2c:70:dc:df:28:7a:d5:61:6b:
fe:20:0a:0b:12:f6:4f:fd:4a:9d:ea:f0:18:8f:57:65:2c:27:
d8:05:a3:c1:af:d1:4b:7c:e1:e2:52:3f:26:79:2d:6a:72:8c:
bf:6f:b0:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWRI/halijJuenYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
OWUyYjZjODgtMTgxNS00YjhiLThiOTMtMDNlN2M5NjM3ZGIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvL/lDENJez7dlA2reU9cLzkWOiQ6E0uK05Px
CCYiJSMeShBNErTNPojEvXkIZ5TIGnOwN4Cl2BNNcdNmYRKhmoocFajC2V4kDwN2
63w0MyMsGGtlZEA28y3msc24Krbspy0VMRUi198vsibltR/cVZztdqngQ94sGKVj
BDtneWg9HikZBU41Nmn3dGemt0iw5RXJAL1pD6pWlSpbQ0QcZLy9+lnL7wCtFEqB
OdCsiy6eASZq8YG+er2bXPdEq07WpcpXovBvbNtY6Z1E0jQhwqDwGKavLC/b19ph
sdrpKYnKNWjAO92S1gaCLQDblBBIx0pKK2JK/e0O/HmhPsnFMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOZ8Q00igyoLl0pkAUp4NLKJeJZRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWZhZmYxMWYtNDc3MC0z
NDg0LWE1OTktMzhkNTRmNTQ0ZGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYiNcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJVd3BAW3xJmVJu9VF5rHLTuutK9ZBkjMqVYpgFyUOn9LBE8pm90ldaO
GJj7rtQgk/W5GOaGwXr4DLWUK3BJWt/luNNAx/bV8yvY0C9Rd/zmvXtWHq27sluj
p0WUHNk2FqCsxdG6FzkZe+QKLrJE1BlISnaUfNo7e13LLsV7Vo15xT3SeAkL7tjg
4K6QLLXitu4dddbsvEApdLXcLb6AiDvpN6zBYMQbjHkh+FE1lZgELXLYFxaCgzIJ
GHoTPJERA9Q0dgASaZsMHLfDkt5UNSxw3N8oetVha/4gCgsS9k/9Sp3q8BiPV2Us
J9gFo8Gv0Ut84eJSPyZ5LWpyjL9vsIE=
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:06:00 2026 by rpki-client