
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/98b687f8-5555-317b-883c-d05f50660cd6.roa
File: 98b687f8-5555-317b-883c-d05f50660cd6.roa (raw, json)
Hash identifier: srUlNsjRwAeKKYwfawqpGcfmDknN1CwhK2vKdIoDoUw=
Subject key identifier: C5:67:0C:4C:E2:92:39:F3:A4:56:B8:79:77:82:46:4D:FB:19:B9:C6
Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Certificate serial: 010D0C9F4328584CEA5CF32B85B63A45872E4A00
Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/98b687f8-5555-317b-883c-d05f50660cd6.roa
Signing time: Thu 19 Feb 2026 14:00:40 +0000
ROA not before: Thu 19 Feb 2026 14:00:40 +0000
ROA not after: Wed 20 May 2026 13:00:40 +0000
asID: 27321
IP address blocks: 149.20.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ea:5c:f3:2b:85:b6:3a:45:87:2e:4a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Validity
Not Before: Feb 19 14:00:40 2026 GMT
Not After : May 20 13:00:40 2026 GMT
Subject: CN=06609d24-1ea5-4edf-97c1-205993d36516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:85:a2:2b:29:5c:6f:da:7d:b3:09:21:57:80:
ec:5c:19:7e:7d:4e:fe:fb:50:f1:9c:33:51:68:32:
c4:f5:4f:63:7d:40:01:e4:a4:a6:4e:34:0a:32:ec:
72:40:8e:fa:27:94:2b:23:5f:ac:b3:d2:fd:5f:ee:
b3:e8:5d:62:1a:1b:5f:16:04:f7:82:ff:f4:58:82:
5c:92:f9:ee:3d:5b:29:c0:80:1a:64:11:52:5a:51:
ae:b6:d3:a2:6f:9e:8c:15:0b:04:99:14:7b:bd:df:
33:1d:6a:df:88:01:6a:0b:a1:6a:c3:75:f9:be:32:
26:e9:a6:25:0a:22:20:b2:3a:68:5e:6c:86:ae:ea:
ae:88:f0:b4:13:d9:80:75:26:f4:66:e3:b0:9f:36:
54:50:91:1d:1e:fd:f5:93:fe:46:4c:5d:fa:0a:f1:
95:73:21:c4:a7:e2:2b:84:2c:26:c6:49:9f:21:a0:
7a:50:96:e1:ca:e8:af:f9:0a:36:ae:ea:bc:62:65:
e1:5e:5b:f0:4a:36:48:78:2c:0f:99:76:b5:e7:36:
17:b6:ff:c8:ae:9e:67:13:60:02:0a:d8:f0:91:14:
de:88:f2:e6:86:11:cc:59:97:b7:d4:76:ff:bf:df:
6d:43:28:da:06:34:b7:7b:34:64:dc:58:9c:e4:ce:
c6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:67:0C:4C:E2:92:39:F3:A4:56:B8:79:77:82:46:4D:FB:19:B9:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/98b687f8-5555-317b-883c-d05f50660cd6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
X509v3 Authority Key Identifier:
keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
sbgp-ipAddrBlock: critical
IPv4:
149.20.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:84:b4:4a:bf:12:7a:a2:a4:7e:e5:e3:7c:3a:27:45:e0:07:
ca:d5:c0:ae:cc:28:d7:59:de:62:b6:f2:07:31:10:99:ea:64:
3c:6c:25:0a:c7:de:a1:0d:64:c7:01:75:61:a8:65:ca:9e:04:
65:7f:76:c7:71:ab:b9:93:ed:3f:92:ad:49:8d:a2:1d:c7:92:
65:98:b6:0a:57:37:73:fd:8e:77:75:c6:9e:bb:f0:97:92:74:
64:9e:dd:25:f9:40:15:27:0d:dd:9c:f4:1e:dc:c0:d5:7d:e3:
d7:dd:36:73:7c:45:a7:31:44:6c:74:b9:3c:72:82:98:70:13:
f8:9b:4c:fd:e9:a8:71:07:59:d7:23:bd:06:b2:1d:fa:a0:1e:
dd:f5:f8:c6:4f:39:dc:b3:fc:9a:9f:d2:e4:d7:b5:d3:92:25:
e0:86:b5:f8:76:ae:11:4d:0b:30:65:87:8e:66:84:5f:80:22:
04:41:fe:2c:ea:ab:33:ce:20:fb:df:4b:2d:2e:8a:a5:91:42:
06:74:d5:3a:a9:55:54:6f:f9:b9:4f:31:1a:90:32:ca:ef:c1:
aa:47:db:5d:ea:47:3e:1d:ce:57:7b:2a:7f:fa:00:ac:58:b7:
8a:15:ea:45:31:00:66:da:53:2b:bb:f5:9d:ba:e9:5d:fe:1a:
78:2e:fb:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzqXPMrhbY6RYcuSgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4
NTEwMB4XDTI2MDIxOTE0MDA0MFoXDTI2MDUyMDEzMDA0MFowLzEtMCsGA1UEAxMk
MDY2MDlkMjQtMWVhNS00ZWRmLTk3YzEtMjA1OTkzZDM2NTE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYWiKylcb9p9swkhV4DsXBl+fU7++1DxnDNR
aDLE9U9jfUAB5KSmTjQKMuxyQI76J5QrI1+ss9L9X+6z6F1iGhtfFgT3gv/0WIJc
kvnuPVspwIAaZBFSWlGuttOib56MFQsEmRR7vd8zHWrfiAFqC6Fqw3X5vjIm6aYl
CiIgsjpoXmyGruquiPC0E9mAdSb0ZuOwnzZUUJEdHv31k/5GTF36CvGVcyHEp+Ir
hCwmxkmfIaB6UJbhyuiv+Qo2ruq8YmXhXlvwSjZIeCwPmXa15zYXtv/Irp5nE2AC
CtjwkRTeiPLmhhHMWZe31Hb/v99tQyjaBjS3ezRk3Fic5M7GTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMVnDEzikjnzpFa4eXeCRk37GbnGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi
ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvOThiNjg3ZjgtNTU1NS0z
MTdiLTg4M2MtZDA1ZjUwNjYwY2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi
Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy
ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh
MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRQDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFqEtEq/EnqipH7l43w6J0XgB8rVwK7MKNdZ3mK28gcxEJnqZDxsJQrH
3qENZMcBdWGoZcqeBGV/dsdxq7mT7T+SrUmNoh3HkmWYtgpXN3P9jnd1xp678JeS
dGSe3SX5QBUnDd2c9B7cwNV949fdNnN8RacxRGx0uTxygphwE/ibTP3pqHEHWdcj
vQayHfqgHt31+MZPOdyz/Jqf0uTXtdOSJeCGtfh2rhFNCzBlh45mhF+AIgRB/izq
qzPOIPvfSy0uiqWRQgZ01TqpVVRv+blPMRqQMsrvwapH213qRz4dzld7Kn/6AKxY
t4oV6kUxAGbaUyu79Z266V3+Gngu+xU=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:37:20 2026 by rpki-client