
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afeb701e-b6e9-3f99-8365-88e71c5a5370.roa
File: afeb701e-b6e9-3f99-8365-88e71c5a5370.roa (raw, json)
Hash identifier: AxnUddgZH46TJDLG9UcKj01xZp4Rk7J709EmOsblWeo=
Subject key identifier: 81:C5:F0:6C:F0:EE:6A:11:97:EB:0E:EA:75:97:D8:04:4C:EA:EC:ED
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5E21898340F0CD8C573500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afeb701e-b6e9-3f99-8365-88e71c5a5370.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33651
IP address blocks: 98.37.198.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5e:21:89:83:40:f0:cd:8c:57:35:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=642c2b60-825b-4f94-b46b-fb92d98edd18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ed:25:49:d0:2b:c4:28:97:46:fa:4e:aa:ae:
c5:a9:ef:bc:61:c2:ec:90:f5:87:65:98:34:9f:f1:
4b:51:65:9b:03:e5:6b:23:5d:3f:28:f9:7d:bb:28:
d2:aa:95:ea:6c:e1:bb:ee:ae:0d:8f:c6:be:4d:92:
0d:f3:cd:a2:4f:07:37:02:d7:49:ba:5e:e4:39:95:
62:a5:35:d3:8f:7c:d8:9e:4a:6f:84:f2:c4:e2:35:
e2:8a:df:67:e6:b0:b2:c6:89:e4:8a:6b:9a:80:76:
62:e9:51:23:32:b5:8c:ac:08:d7:a9:75:f2:ed:64:
e6:2f:8a:ba:42:1a:7e:e2:30:a0:a6:13:86:cd:a2:
93:a0:0a:80:fa:03:93:81:99:c5:a8:47:2a:8d:e9:
35:c3:c9:4c:63:1e:1a:10:05:32:db:48:7a:61:63:
57:42:76:c3:0a:e2:7d:c2:7c:aa:59:77:a4:db:11:
d2:94:a4:be:fe:cf:4d:02:e0:41:0f:2b:b8:8a:e0:
db:7b:49:21:b5:34:5c:cf:a9:5b:7b:f4:d4:3a:c1:
f3:4f:52:f9:10:2c:f8:3d:e7:6d:0c:b0:b7:77:4a:
31:c6:d2:c2:32:d6:da:58:63:80:20:7d:a1:46:a5:
23:4e:07:e9:80:ba:d0:51:14:72:4c:61:f2:86:d8:
3b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C5:F0:6C:F0:EE:6A:11:97:EB:0E:EA:75:97:D8:04:4C:EA:EC:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afeb701e-b6e9-3f99-8365-88e71c5a5370.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.37.198.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d5:3d:6b:ad:ab:22:a4:ca:e2:2f:70:4b:68:50:dd:e1:56:cb:
31:32:e7:d0:44:a5:97:08:b2:7a:a4:24:2e:cf:f1:80:46:6a:
07:e5:d2:eb:1b:f5:71:f2:1f:8c:29:c2:4d:f3:e2:d4:3b:05:
54:f3:b2:a8:50:62:1b:da:56:62:77:d7:86:64:75:da:c5:23:
74:b4:98:18:e7:b2:85:8f:e4:2c:5f:82:4b:b6:2b:83:0a:30:
69:c0:40:6d:07:fb:6a:83:66:4c:d6:27:92:79:07:63:08:4b:
6e:2c:17:a0:a1:fa:66:4a:6c:e7:0d:e4:c3:09:c9:6f:35:d9:
ae:62:1a:f7:41:03:f5:ea:3d:a6:10:f0:4f:be:8c:f1:06:35:
6a:54:23:b6:81:0f:f1:96:ec:3d:73:e1:a5:f3:88:77:8c:e1:
e8:db:3f:1d:cf:87:2e:06:b0:46:c5:4d:a0:41:04:7c:81:5a:
5e:5f:b5:54:45:7b:5f:51:ae:0a:4b:cd:84:92:45:a5:1a:2c:
9b:cc:2f:6b:a8:d0:a6:0b:7a:c5:76:30:37:0c:36:38:37:39:
0d:88:6a:34:2f:e8:ab:6a:72:33:3d:a4:6d:aa:cf:42:a2:b5:
52:27:36:0d:6a:4b:46:25:92:11:f4:1a:c1:09:f4:90:29:28:
d1:de:8d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:54:19 2026 by rpki-client