
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac0eb08b-e940-3897-a1a2-c92aa0a3f2ad.roa
File: ac0eb08b-e940-3897-a1a2-c92aa0a3f2ad.roa (raw, json)
Hash identifier: Mw7XUZQzKjtYy32SAmh0W+BElOKXSa9/xOZF8bJ3sD0=
Subject key identifier: 33:59:BE:09:6D:21:4C:24:64:49:1B:1F:C5:DB:1B:E3:24:85:39:35
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE59153A444C3A9413F2EA00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac0eb08b-e940-3897-a1a2-c92aa0a3f2ad.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33651
IP address blocks: 98.37.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:59:15:3a:44:4c:3a:94:13:f2:ea:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=baa434cb-5fc5-4a98-bfe8-2f9f5ad2a166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:07:01:f0:b1:a2:24:d0:e9:91:02:a8:a5:e0:
f0:80:72:24:c6:37:3d:5e:7f:b2:39:03:15:27:3c:
46:bc:24:c4:13:9e:f1:5d:ce:8c:90:56:89:64:85:
fc:be:47:fe:e9:5d:ed:e6:a9:24:ef:3d:f4:23:55:
bf:23:d4:c9:eb:97:2b:62:1a:c4:f1:41:77:07:7e:
02:c8:ee:9e:b9:67:e1:d0:fc:7c:0e:de:d5:02:9a:
12:9e:de:b3:43:e6:40:18:63:84:e1:7c:e6:ff:77:
ef:cc:8a:30:d3:09:2e:bc:6e:66:7b:7f:93:05:ff:
df:26:19:61:c1:1d:13:1c:02:fc:97:db:64:26:10:
4a:99:9a:da:3f:42:ad:9a:b8:00:66:5a:2f:33:b4:
90:59:09:43:db:42:38:be:d0:98:a4:0a:ad:e7:be:
fe:56:f0:81:6f:19:bf:4b:d5:cb:db:43:fb:c2:69:
8d:65:ea:a5:f3:74:73:bb:56:6c:a8:77:ef:df:6c:
7b:55:11:5c:49:b0:bd:77:cf:ac:06:48:04:22:56:
80:9b:6c:1b:b8:84:4c:06:b6:a3:f2:ba:4d:c5:4f:
9f:d6:1d:04:07:e1:c7:6c:49:03:a1:c2:b7:4e:39:
76:3a:55:75:60:b8:9b:4c:05:97:86:f3:f3:5e:8c:
8c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:59:BE:09:6D:21:4C:24:64:49:1B:1F:C5:DB:1B:E3:24:85:39:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac0eb08b-e940-3897-a1a2-c92aa0a3f2ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.37.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:38:d9:7d:66:56:0e:7b:53:c7:56:e1:6c:94:89:53:b9:7a:
f2:1e:c7:e6:82:77:36:51:a7:b4:e6:9d:23:7c:57:a7:15:21:
fe:62:68:87:11:bc:79:20:dd:08:10:01:e4:c5:fa:db:32:57:
02:fa:74:75:d2:46:dd:cb:6f:b8:64:23:80:a0:c3:27:ac:16:
cd:38:85:7f:dd:13:a3:01:d7:ae:84:52:70:77:bf:3b:1b:ba:
60:4f:fc:c1:6c:ff:01:a6:97:e7:a8:c0:bb:90:d9:2b:4a:6f:
3c:f5:be:fa:a2:9c:00:f5:ac:7b:53:a1:cc:44:6d:91:50:ba:
6f:74:11:59:42:ee:74:90:3e:4e:bd:5d:62:d0:c3:ca:e0:27:
0a:8f:4b:86:e5:87:48:ba:a6:23:8c:ec:06:a1:bc:52:31:eb:
f6:d5:8c:e5:6c:bb:06:4b:eb:25:85:c5:8b:a7:9f:eb:ea:e2:
c7:f1:36:7a:d1:aa:be:fa:45:03:0f:ef:b6:75:b0:40:72:b7:
be:e7:97:67:31:75:dd:34:72:7b:46:66:39:98:70:02:7b:e2:
80:0a:a6:6e:49:ae:32:d0:19:30:9f:c1:22:b5:25:0d:b0:21:
f0:7e:30:93:45:17:bd:71:7f:c0:5b:81:6d:4a:f5:0e:b5:36:
5f:9a:e6:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWRU6REw6lBPy6gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
YmFhNDM0Y2ItNWZjNS00YTk4LWJmZTgtMmY5ZjVhZDJhMTY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQcB8LGiJNDpkQKopeDwgHIkxjc9Xn+yOQMV
JzxGvCTEE57xXc6MkFaJZIX8vkf+6V3t5qkk7z30I1W/I9TJ65crYhrE8UF3B34C
yO6euWfh0Px8Dt7VApoSnt6zQ+ZAGGOE4Xzm/3fvzIow0wkuvG5me3+TBf/fJhlh
wR0THAL8l9tkJhBKmZraP0KtmrgAZlovM7SQWQlD20I4vtCYpAqt577+VvCBbxm/
S9XL20P7wmmNZeql83Rzu1ZsqHfv32x7VRFcSbC9d8+sBkgEIlaAm2wbuIRMBraj
8rpNxU+f1h0EB+HHbEkDocK3Tjl2OlV1YLibTAWXhvPzXoyMhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDNZvgltIUwkZEkbH8XbG+MkhTk1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWMwZWIwOGItZTk0MC0z
ODk3LWExYTItYzkyYWEwYTNmMmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYiVYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKk42X1mVg57U8dW4WyUiVO5evIex+aCdzZRp7TmnSN8V6cVIf5iaIcR
vHkg3QgQAeTF+tsyVwL6dHXSRt3Lb7hkI4CgwyesFs04hX/dE6MB166EUnB3vzsb
umBP/MFs/wGml+eowLuQ2StKbzz1vvqinAD1rHtTocxEbZFQum90EVlC7nSQPk69
XWLQw8rgJwqPS4blh0i6piOM7AahvFIx6/bVjOVsuwZL6yWFxYunn+vq4sfxNnrR
qr76RQMP77Z1sEByt77nl2cxdd00cntGZjmYcAJ74oAKpm5JrjLQGTCfwSK1JQ2w
IfB+MJNFF71xf8BbgW1K9Q61Nl+a5tg=
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:30:17 2026 by rpki-client