
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c88dc9da-6e27-377b-8e1b-6df3d0c030ef.roa
File: c88dc9da-6e27-377b-8e1b-6df3d0c030ef.roa (raw, json)
Hash identifier: YPLgr8mm1fO6b/QJS7ngM1q18tOfLbS/gVdJBEFILdY=
Subject key identifier: 91:6C:AF:14:4D:01:D2:94:30:C2:B2:CB:98:EC:51:E7:D4:59:69:EE
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CFDE9BBF8B5C5504F995BCC00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c88dc9da-6e27-377b-8e1b-6df3d0c030ef.roa
Signing time: Thu 26 Feb 2026 14:00:40 +0000
ROA not before: Thu 26 Feb 2026 14:00:40 +0000
ROA not after: Wed 27 May 2026 13:00:40 +0000
asID: 33651
IP address blocks: 50.238.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:fd:e9:bb:f8:b5:c5:50:4f:99:5b:cc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 26 14:00:40 2026 GMT
Not After : May 27 13:00:40 2026 GMT
Subject: CN=401d69df-2d84-4103-a5ff-338e47639830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6b:e5:49:83:68:ea:b7:ba:f6:2b:27:1e:b7:
47:5a:ac:75:86:8c:0f:e2:45:80:b4:c8:cf:c8:0a:
cc:99:36:d2:6a:85:62:fb:49:91:a6:14:49:b0:ac:
f4:cd:77:f5:c5:b3:62:1b:a5:c0:52:1e:78:ae:5f:
24:1b:94:1d:5f:5e:11:2e:8f:f6:f2:99:62:0e:2c:
dd:ff:e2:e7:54:60:9d:8a:55:10:dc:1b:16:33:e7:
2b:93:86:85:8c:26:34:69:f7:fb:00:e5:0a:d8:6c:
04:c0:92:74:6d:91:cb:f0:33:12:fd:b0:a7:2f:e4:
53:55:6e:07:3e:f4:6d:cc:d6:d3:d6:93:d6:29:20:
2f:3c:d1:d1:93:1d:ba:a3:1a:6e:37:da:d9:2c:b1:
d8:6b:f9:19:58:ea:33:32:e6:2f:39:43:d3:d6:6d:
a7:48:1c:c2:53:9a:b0:67:c8:b6:00:0f:ad:ab:95:
9c:4b:8d:6f:ab:04:70:a7:fe:20:e0:18:5f:d8:fb:
ce:26:68:47:04:d7:17:19:06:62:e7:35:bc:00:ee:
8c:66:28:94:09:14:2b:fc:fc:d8:2d:78:ec:62:54:
0a:b8:38:d1:6e:0a:10:be:f2:18:a5:28:29:a2:18:
ea:6e:c9:fd:c1:81:7c:b2:6f:32:fa:05:1d:a8:d3:
a0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6C:AF:14:4D:01:D2:94:30:C2:B2:CB:98:EC:51:E7:D4:59:69:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c88dc9da-6e27-377b-8e1b-6df3d0c030ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
50.238.98.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:9b:33:d9:e3:46:7c:bb:d2:fc:9b:0f:72:67:b6:a2:1f:c5:
4d:e4:df:0e:ad:9a:0b:37:53:0e:df:47:45:87:5b:4e:0e:63:
38:d7:af:5e:8d:49:fd:ad:de:2f:2c:50:3f:a6:32:d5:75:bc:
82:c6:b5:00:25:15:90:8b:d0:69:14:a7:56:48:70:e3:44:aa:
88:5e:0a:a2:de:37:f2:65:09:d0:09:b6:e1:29:96:9a:1d:5f:
cb:af:8a:20:4b:72:d3:3d:9c:c6:c3:27:b9:2a:47:c4:12:b7:
ce:5d:6b:1b:d9:0c:ad:70:80:80:41:25:ef:1b:ba:b1:ed:28:
93:71:3e:d2:66:f7:8d:e1:27:f0:c9:47:cc:26:18:34:db:92:
7f:c3:55:b0:9b:1c:5b:1c:1f:97:19:48:de:90:ad:fc:07:f9:
25:5c:f2:3c:b8:93:b3:a0:63:d1:1b:e6:65:b4:9b:de:9c:40:
41:8b:9a:a4:64:ac:8a:ab:d2:ba:6f:28:91:9f:dd:e1:8f:3b:
79:a5:30:06:7f:46:56:7c:d1:c4:81:2d:3a:84:90:3e:01:fe:
c0:03:c4:6f:f6:28:0f:2c:b6:f1:aa:cd:4b:31:58:23:78:48:
83:5d:dd:30:a5:6f:83:7f:34:fb:07:60:ab:eb:24:33:b1:6a:
9c:38:f9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:38:54 2026 by rpki-client