
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baa8b022-73c6-3cc5-be61-8b9968a928df.roa
File: baa8b022-73c6-3cc5-be61-8b9968a928df.roa (raw, json)
Hash identifier: aG2bQWHMsIz/z7+xaFu2ESAJ9hm8F+ueUxT0G03mBl0=
Subject key identifier: 2C:3B:22:E9:C3:48:D7:94:D2:E6:74:76:71:6C:8D:C8:E8:24:6B:7B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CFDEA6D135538B4E2A9B03980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baa8b022-73c6-3cc5-be61-8b9968a928df.roa
Signing time: Thu 26 Feb 2026 14:00:40 +0000
ROA not before: Thu 26 Feb 2026 14:00:40 +0000
ROA not after: Wed 27 May 2026 13:00:40 +0000
asID: 33491
IP address blocks: 98.253.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:fd:ea:6d:13:55:38:b4:e2:a9:b0:39:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 26 14:00:40 2026 GMT
Not After : May 27 13:00:40 2026 GMT
Subject: CN=a7c86d58-1be0-471e-9fea-0a5f6e60d70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:aa:f8:50:75:8b:bc:e8:21:3f:94:d4:7a:02:
cd:4d:6f:21:cd:ad:df:69:d6:7c:8d:39:24:d5:c0:
83:83:b2:ec:cb:91:86:be:77:c7:be:47:53:97:66:
65:a3:ab:d9:b5:89:cb:f1:dd:ed:5b:91:07:9b:9b:
e7:63:0b:c7:74:31:cf:88:c6:bc:88:9b:6d:57:9f:
0f:15:fb:3f:23:68:7c:0a:97:c7:ce:78:06:ae:b7:
e1:f6:cc:93:c5:55:4d:60:0b:3d:b6:8b:8b:02:97:
e3:6b:4f:c0:69:35:05:5f:93:fc:ea:61:61:0d:84:
d8:3b:7f:db:30:79:72:f6:8e:05:ee:5c:0e:99:e1:
94:68:81:16:00:84:f1:d1:80:11:35:38:49:06:d8:
32:f0:2f:c5:d1:5e:2b:4d:cd:fb:be:a8:f0:c0:07:
bf:f5:b0:b9:c8:0b:62:77:ce:5a:c1:d9:e6:f0:b0:
7e:4a:c3:68:e7:48:13:b3:b9:e4:17:93:f5:6d:db:
36:61:35:a3:69:50:18:31:68:20:b2:2d:b4:1e:31:
3f:a7:c9:c1:a7:eb:fd:cd:a7:08:96:9d:ca:d0:d1:
5d:3d:d2:f2:4e:23:19:aa:05:40:a9:2a:e0:69:c5:
13:d3:83:d9:09:7f:c3:f2:83:d8:33:a6:79:b3:99:
59:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3B:22:E9:C3:48:D7:94:D2:E6:74:76:71:6C:8D:C8:E8:24:6B:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baa8b022-73c6-3cc5-be61-8b9968a928df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.253.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:0c:a5:99:14:b4:71:a7:d3:c1:64:85:24:65:e7:d9:cf:cc:
8d:e1:30:eb:58:3e:cd:c3:0a:ce:dd:9d:6c:d3:f0:29:cc:cb:
b4:30:63:c4:ed:29:f3:5d:55:46:69:70:1d:87:65:06:be:dd:
48:a1:31:ee:47:de:ab:7d:a3:10:e2:2e:8d:d8:e8:b1:54:8c:
aa:57:2f:61:cd:32:1a:9f:e7:d4:e4:8e:44:58:f5:0b:94:4d:
cf:25:7d:9a:3f:4b:70:8b:ce:24:97:aa:27:68:e4:fe:0e:bc:
ae:cb:85:51:91:59:60:dc:fc:fc:2a:c4:d5:81:fc:8d:26:dd:
b7:45:b0:ba:8d:ae:d1:d2:15:40:ed:bc:a5:dc:99:27:2f:35:
ef:05:14:43:5c:fa:a3:43:c8:9b:09:9a:af:29:1b:f8:4f:35:
b1:cf:92:be:fb:cb:39:5f:a3:b2:b4:fb:86:56:51:08:f0:04:
45:fe:0a:36:5d:e4:bd:05:c8:a1:5b:0a:6f:3f:78:0a:88:f5:
79:ac:ea:51:05:36:98:a1:51:8f:45:68:1b:49:02:2a:4e:7d:
88:8f:3c:80:4a:49:11:ed:af:5f:5b:0d:29:67:d4:de:0f:a1:
d5:1e:f6:a7:9e:80:7e:67:b9:0c:cb:32:b0:8e:95:86:8e:31:
16:58:c5:6f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEz96m0TVTi04qmwOYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk
YTdjODZkNTgtMWJlMC00NzFlLTlmZWEtMGE1ZjZlNjBkNzBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkar4UHWLvOghP5TUegLNTW8hza3fadZ8jTkk
1cCDg7Lsy5GGvnfHvkdTl2Zlo6vZtYnL8d3tW5EHm5vnYwvHdDHPiMa8iJttV58P
Ffs/I2h8CpfHzngGrrfh9syTxVVNYAs9touLApfja0/AaTUFX5P86mFhDYTYO3/b
MHly9o4F7lwOmeGUaIEWAITx0YARNThJBtgy8C/F0V4rTc37vqjwwAe/9bC5yAti
d85awdnm8LB+SsNo50gTs7nkF5P1bds2YTWjaVAYMWggsi20HjE/p8nBp+v9zacI
lp3K0NFdPdLyTiMZqgVAqSrgacUT04PZCX/D8oPYM6Z5s5lZywIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCw7IunDSNeU0uZ0dnFsjcjoJGt7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmFhOGIwMjItNzNjNi0z
Y2M1LWJlNjEtOGI5OTY4YTkyOGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAYv0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAsAylmRS0cafTwWSFJGXn2c/MjeEw61g+zcMKzt2dbNPwKczLtDBjxO0p
811VRmlwHYdlBr7dSKEx7kfeq32jEOIujdjosVSMqlcvYc0yGp/n1OSORFj1C5RN
zyV9mj9LcIvOJJeqJ2jk/g68rsuFUZFZYNz8/CrE1YH8jSbdt0Wwuo2u0dIVQO28
pdyZJy817wUUQ1z6o0PImwmarykb+E81sc+SvvvLOV+jsrT7hlZRCPAERf4KNl3k
vQXIoVsKbz94Coj1eazqUQU2mKFRj0VoG0kCKk59iI88gEpJEe2vX1sNKWfU3g+h
1R72p56Afme5DMsysI6Vho4xFljFbw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:02:37 2026 by rpki-client