
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/0a7f8c68-de6c-3488-b98e-1fd5ea0eebdd.roa
File: 0a7f8c68-de6c-3488-b98e-1fd5ea0eebdd.roa (raw, json)
Hash identifier: Dy9bi8waR7cwLbxHpSJmTqM9r+zeYbUnCoQyqH0MtTY=
Subject key identifier: AE:6F:DF:BB:24:E3:C1:41:3E:F4:6A:1E:7F:30:3D:09:2D:65:6D:77
Certificate issuer: /CN=023aff41-84dc-4808-a5d9-7e011d4c3e3a
Certificate serial: 010D0C9F4328584D03850A15A6E2258859E65B80
Authority key identifier: FC:30:F7:AF:E6:D1:07:33:BD:50:BF:0A:4F:D8:B6:56:37:20:00:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/0a7f8c68-de6c-3488-b98e-1fd5ea0eebdd.roa
Signing time: Sat 28 Feb 2026 14:17:03 +0000
ROA not before: Sat 28 Feb 2026 14:17:03 +0000
ROA not after: Fri 29 May 2026 13:17:03 +0000
asID: 13506
IP address blocks: 164.95.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/023aff41-84dc-4808-a5d9-7e011d4c3e3a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/023aff41-84dc-4808-a5d9-7e011d4c3e3a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:03:85:0a:15:a6:e2:25:88:59:e6:5b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023aff41-84dc-4808-a5d9-7e011d4c3e3a
Validity
Not Before: Feb 28 14:17:03 2026 GMT
Not After : May 29 13:17:03 2026 GMT
Subject: CN=f7710f48-ee2f-4584-93e9-685924f929fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8a:50:53:11:7d:22:90:68:0d:b1:6c:5b:6f:
01:8a:a1:26:93:45:ac:dc:f1:3f:33:57:e4:20:ac:
96:28:34:48:0d:54:31:1d:64:50:b2:26:38:80:a1:
73:d9:7d:0c:3c:25:51:6f:d6:7b:0d:c9:b7:1a:f3:
a1:b5:30:df:02:7a:62:3f:97:b8:35:dd:53:76:84:
a9:73:8e:85:b0:f6:9c:bd:f0:83:38:50:dd:ae:c6:
04:16:31:45:4b:30:cd:61:e7:58:dd:3a:ec:75:cb:
25:89:03:dc:6c:9c:07:18:a2:d3:71:8d:49:9c:c3:
7c:ce:6c:1f:4c:4c:36:f3:8e:d1:9d:4e:78:68:12:
4d:b9:32:6c:30:31:ae:ab:f0:db:8e:43:9c:38:a8:
e4:4e:14:38:bf:56:b1:d3:8a:02:0f:4c:94:e3:39:
73:d7:35:0e:06:01:18:f1:09:ee:0c:dc:22:1e:d2:
45:74:11:b4:22:7f:21:b1:05:3c:33:26:39:e5:f8:
de:f3:c6:8b:b0:05:3f:33:cf:9f:11:59:6a:6e:b3:
3d:2f:df:79:4b:e8:0f:a4:73:27:22:d5:ad:68:5c:
8b:09:2f:96:57:05:ad:33:cd:b6:75:84:10:8e:f0:
7e:8d:2c:e0:e8:09:60:a3:fb:ee:92:02:6d:09:14:
3c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6F:DF:BB:24:E3:C1:41:3E:F4:6A:1E:7F:30:3D:09:2D:65:6D:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/0a7f8c68-de6c-3488-b98e-1fd5ea0eebdd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/023aff41-84dc-4808-a5d9-7e011d4c3e3a.crl
X509v3 Authority Key Identifier:
keyid:FC:30:F7:AF:E6:D1:07:33:BD:50:BF:0A:4F:D8:B6:56:37:20:00:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a.cer
sbgp-ipAddrBlock: critical
IPv4:
164.95.95.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:96:5a:15:71:8b:17:21:bd:9b:0f:88:3a:8b:5a:cc:42:2c:
15:c8:aa:41:4e:8c:c5:8b:98:27:90:57:7c:6d:4b:1a:3b:88:
31:2b:b3:08:86:5d:d6:4d:14:f3:67:85:88:88:65:21:34:c8:
89:5d:25:56:28:fd:ca:8d:a1:4d:06:13:36:6a:31:18:06:92:
85:51:06:87:e9:9c:ee:3c:a9:fd:1d:34:20:44:7a:00:63:c1:
3d:5a:17:8e:ee:6b:71:a5:dd:ad:42:cc:15:96:08:69:c6:a1:
b0:06:0f:e0:10:3b:c2:b7:76:27:62:12:66:05:25:14:1f:7b:
a9:93:c0:e2:8d:15:dd:90:7c:d1:c5:83:3a:41:39:37:67:34:
a3:6b:ea:c5:e3:49:cb:78:19:e7:0a:54:52:1d:37:c0:4a:75:
ae:43:9e:4e:f5:ca:b8:81:67:59:e0:62:1e:de:a3:a4:63:cf:
52:14:46:ba:b5:98:58:46:8b:a9:b4:eb:2d:2a:b1:2f:12:49:
bc:58:3f:1c:f3:79:d3:f1:40:a2:ca:ea:d1:6f:9f:f0:d4:c7:
a3:4b:f2:a6:fe:11:ae:50:d3:c1:e4:18:63:e8:fa:cc:0a:da:
7c:18:ec:dc:ce:61:26:64:5a:3c:d9:e6:22:6a:5d:eb:bc:e9:
99:d2:74:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DhQoVpuIliFnmW4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDIzYWZmNDEtODRkYy00ODA4LWE1ZDktN2UwMTFkNGMz
ZTNhMB4XDTI2MDIyODE0MTcwM1oXDTI2MDUyOTEzMTcwM1owLzEtMCsGA1UEAxMk
Zjc3MTBmNDgtZWUyZi00NTg0LTkzZTktNjg1OTI0ZjkyOWZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhopQUxF9IpBoDbFsW28BiqEmk0Ws3PE/M1fk
IKyWKDRIDVQxHWRQsiY4gKFz2X0MPCVRb9Z7Dcm3GvOhtTDfAnpiP5e4Nd1TdoSp
c46FsPacvfCDOFDdrsYEFjFFSzDNYedY3TrsdcsliQPcbJwHGKLTcY1JnMN8zmwf
TEw2847RnU54aBJNuTJsMDGuq/DbjkOcOKjkThQ4v1ax04oCD0yU4zlz1zUOBgEY
8QnuDNwiHtJFdBG0In8hsQU8MyY55fje88aLsAU/M8+fEVlqbrM9L995S+gPpHMn
ItWtaFyLCS+WVwWtM822dYQQjvB+jSzg6Algo/vukgJtCRQ84QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK5v37sk48FBPvRqHn8wPQktZW13MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wMjNh
ZmY0MS04NGRjLTQ4MDgtYTVkOS03ZTAxMWQ0YzNlM2EvMGE3ZjhjNjgtZGU2Yy0z
NDg4LWI5OGUtMWZkNWVhMGVlYmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDIzYWZmNDEtODRkYy00ODA4LWE1
ZDktN2UwMTFkNGMzZTNhLzAyM2FmZjQxLTg0ZGMtNDgwOC1hNWQ5LTdlMDExZDRj
M2UzYS5jcmwwHwYDVR0jBBgwFoAU/DD3r+bRBzO9UL8KT9i2VjcgAB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8wMjNhZmY0MS04NGRjLTQ4MDgtYTVkOS03ZTAx
MWQ0YzNlM2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApF9fMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACOWWhVxixchvZsPiDqLWsxCLBXIqkFOjMWLmCeQV3xtSxo7iDErswiG
XdZNFPNnhYiIZSE0yIldJVYo/cqNoU0GEzZqMRgGkoVRBofpnO48qf0dNCBEegBj
wT1aF47ua3Gl3a1CzBWWCGnGobAGD+AQO8K3didiEmYFJRQfe6mTwOKNFd2QfNHF
gzpBOTdnNKNr6sXjSct4GecKVFIdN8BKda5Dnk71yriBZ1ngYh7eo6Rjz1IURrq1
mFhGi6m06y0qsS8SSbxYPxzzedPxQKLK6tFvn/DUx6NL8qb+Ea5Q08HkGGPo+swK
2nwY7NzOYSZkWjzZ5iJqXeu86ZnSdEU=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:12:54 2026 by rpki-client