
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be7918b8-f28f-345a-a386-c2cc49fd1404.roa
File: be7918b8-f28f-345a-a386-c2cc49fd1404.roa (raw, json)
Hash identifier: GQTPcip1qODOnpavflzncdChoYWa8iJjKqq2q1Uv9vc=
Subject key identifier: DA:B3:20:B4:09:73:3E:76:E1:29:33:AB:A7:F3:26:96:9E:02:35:76
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BCAAB6744BAA518222CA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be7918b8-f28f-345a-a386-c2cc49fd1404.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 33662
IP address blocks: 98.34.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bc:aa:b6:74:4b:aa:51:82:22:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=4a2a7097-bf59-41a7-82b8-6e4d227a24ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:da:1a:a9:f9:4d:f6:35:86:16:ca:3b:53:31:
f9:86:96:bc:f5:2b:5a:1b:6f:a5:b2:57:b0:86:c9:
3c:10:ee:d8:dc:d1:ba:ad:af:1d:d0:21:cd:0a:02:
2a:0d:e1:d3:ee:cf:a3:35:d8:98:d7:1f:59:ce:28:
67:60:c6:05:a3:47:73:b1:17:bb:8d:91:c8:8b:5d:
cb:59:2c:15:5d:f0:a6:f5:6b:d9:0c:42:8d:7c:48:
4f:12:7d:51:6f:c0:e9:9c:4f:8a:1f:21:c9:03:40:
08:0a:0f:25:5e:41:7c:1c:d8:00:3f:18:25:7c:52:
18:52:5a:2d:99:60:8f:b7:c0:35:3d:1a:1b:2c:3c:
ea:45:a6:5d:51:64:27:78:88:9e:df:5a:8f:02:9a:
85:c9:80:44:18:2c:e0:73:8b:f0:c6:df:ec:31:13:
a4:31:c0:dd:b1:29:14:03:2d:1f:a2:c3:d5:66:00:
27:dc:e4:b5:38:a3:59:96:4f:42:1b:94:6f:51:2c:
2b:5a:66:aa:0a:f1:47:ce:ef:19:0d:1d:51:e0:97:
41:4f:95:d2:87:1f:8a:22:df:50:e0:1e:d2:e3:57:
4d:93:c7:5e:c3:83:da:af:d1:bc:98:67:49:51:47:
dd:02:5f:2b:70:f2:c9:7f:2f:c2:d7:52:7c:19:d1:
ff:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B3:20:B4:09:73:3E:76:E1:29:33:AB:A7:F3:26:96:9E:02:35:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be7918b8-f28f-345a-a386-c2cc49fd1404.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.34.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:5f:8a:23:c2:d6:c7:89:b4:a5:87:61:fc:71:d0:e6:01:17:
aa:5a:1d:d1:59:61:62:ab:97:81:58:0c:4d:15:a1:41:29:02:
c4:13:b8:14:cd:77:ea:de:88:e6:9d:dd:cd:b0:04:71:d0:3b:
a4:46:db:c5:b6:69:a8:c3:19:8b:79:a2:31:f8:73:e4:21:34:
8b:91:fa:ca:33:0d:16:df:5c:12:38:0c:16:58:c0:08:ca:f7:
e1:80:8b:c8:68:c7:45:58:fd:a4:02:7a:91:dc:13:8a:97:29:
9f:3a:c9:14:84:47:75:94:dc:cc:a9:27:49:19:47:e7:72:b4:
65:b5:e7:90:45:f9:36:e3:c8:e3:15:6a:ba:c2:5a:05:f2:ef:
7b:f0:24:af:80:78:16:82:c8:d4:ad:5e:2e:e3:a2:a5:5f:22:
02:5f:52:24:70:9e:4a:ea:9f:be:92:f3:89:d2:53:83:89:07:
00:ac:15:62:c4:09:04:fb:22:31:ea:36:ca:61:35:4c:04:e2:
f6:1e:ff:8a:f7:a3:20:2f:b9:47:2f:fe:76:68:a0:79:e1:aa:
0a:d3:1b:0e:66:ea:ab:ad:63:7b:df:69:ad:c0:5e:56:fa:0b:
b4:54:57:6d:d7:37:77:cc:a4:b8:e0:c2:a2:fe:85:58:b5:5a:
70:af:c2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:37:10 2026 by rpki-client