
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fae86c7a-96f7-3cf4-b84d-ff909912717b.roa
File: fae86c7a-96f7-3cf4-b84d-ff909912717b.roa (raw, json)
Hash identifier: GVVd1KNgZq677lSRu65rcSY+bVhOA6y8pF6VCvhKqIc=
Subject key identifier: 64:5F:CA:4F:93:3B:C2:5D:EC:C4:D3:5F:EB:C6:39:9A:9C:40:F4:08
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5915836A9C0FDA95E6A1C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fae86c7a-96f7-3cf4-b84d-ff909912717b.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33651
IP address blocks: 98.37.96.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:59:15:83:6a:9c:0f:da:95:e6:a1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=533a9cc0-98cf-42e2-9e55-244e667b2cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:37:06:2e:6c:55:16:39:b6:51:e1:7c:f0:c9:
e0:40:46:eb:c6:f2:d7:87:28:29:82:9d:26:b6:ae:
b7:89:9c:3b:54:78:71:9b:b0:4e:55:f5:15:ff:2d:
24:28:ab:1b:aa:2b:4e:65:dd:76:89:d0:10:f1:0f:
d2:04:b8:79:bf:15:21:c2:25:0e:27:e8:b3:b8:b1:
b0:6a:42:6a:eb:33:e6:a2:57:c6:b5:ae:9e:ad:ad:
36:5c:ad:0d:da:1a:9a:68:59:9d:db:5c:6f:bf:17:
0a:a9:e1:25:c4:9f:8a:5d:e0:31:21:00:e8:7e:88:
82:82:eb:09:b9:41:6c:91:d1:e6:df:8b:ae:5e:76:
ab:8a:1c:7f:6b:74:d1:e6:04:0b:8a:ec:48:21:61:
90:37:93:f8:74:7b:fc:9f:5d:5d:44:fd:f0:1d:cd:
b8:e7:c0:6d:83:6c:90:29:ed:fa:b6:82:ff:8a:96:
e4:84:97:ac:e1:61:7f:5c:c7:b4:f0:5e:2f:41:45:
58:ee:be:9f:ab:65:fd:3f:f3:a1:92:64:2a:38:9a:
82:92:06:d5:67:25:a8:8b:88:9c:5f:f3:5c:12:cd:
94:cb:24:a7:5c:1e:1f:a3:7a:a8:90:13:22:ab:8e:
ce:95:3a:c9:0e:6e:b3:41:0e:22:a2:70:b7:0c:1e:
bf:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5F:CA:4F:93:3B:C2:5D:EC:C4:D3:5F:EB:C6:39:9A:9C:40:F4:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fae86c7a-96f7-3cf4-b84d-ff909912717b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.37.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:21:7d:d9:88:d8:d2:2b:36:64:90:64:f6:81:90:15:11:44:
4c:e4:81:c2:10:f3:90:9e:75:c8:6e:e1:bd:15:bc:15:f7:28:
da:1d:4b:03:7e:e5:ee:4a:af:03:21:a6:a4:69:f6:a6:c9:7b:
2f:9f:3e:4c:8c:b9:e5:f0:03:88:b4:0b:42:86:b5:9b:d8:d0:
91:1d:a4:d0:d6:b8:7d:ab:06:ce:15:8b:0c:f4:56:52:75:8a:
48:4e:2d:01:ce:b3:b5:58:d3:fa:d9:33:60:c5:43:c1:12:d8:
f4:3c:dc:1b:04:6c:5d:1c:10:ed:f3:50:59:78:7e:6e:0c:a7:
78:a8:68:3a:6c:8f:4b:c1:17:81:bf:65:1f:f6:db:bc:f8:14:
0c:20:21:4e:50:63:f0:7b:2c:7b:11:9a:75:0c:66:b4:60:38:
5d:00:c7:15:f7:d3:9f:fb:33:ea:05:eb:ef:ff:b6:42:19:96:
73:3a:21:4c:ce:2b:ec:7a:b3:9a:0b:8f:c5:69:e4:37:53:c3:
38:e3:f7:b2:71:0c:15:e7:71:82:d2:5c:77:83:e2:62:26:51:
35:1f:1f:21:04:5f:ae:3f:2a:95:8b:4f:ff:ac:32:8a:23:0e:
8c:1b:fa:f7:ac:83:af:51:06:75:22:31:e3:73:d5:da:35:19:
a8:79:c0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:34:45 2026 by rpki-client