
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86991e5b-a2be-34be-8461-f525d99e11a5.roa
File: 86991e5b-a2be-34be-8461-f525d99e11a5.roa (raw, json)
Hash identifier: dfZAG0AXxuw8pwMnVXF2TJ7hExkszjdv5SaNQ50KceM=
Subject key identifier: CC:6C:2A:C5:EF:B9:A4:A4:F2:F5:7D:23:73:3F:1D:CF:96:39:37:AB
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D143D3C11817A18A05DE572A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86991e5b-a2be-34be-8461-f525d99e11a5.roa
Signing time: Fri 06 Mar 2026 14:00:40 +0000
ROA not before: Fri 06 Mar 2026 14:00:40 +0000
ROA not after: Thu 04 Jun 2026 13:00:40 +0000
asID: 33491
IP address blocks: 98.212.90.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 08 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:14:3d:3c:11:81:7a:18:a0:5d:e5:72:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 6 14:00:40 2026 GMT
Not After : Jun 4 13:00:40 2026 GMT
Subject: CN=9cfb911f-e78a-4f62-bb11-a1ea72e00055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c1:e1:47:6c:27:47:a3:82:6d:e8:72:32:e2:
6f:e4:07:33:b2:4e:e6:48:f1:69:9f:cb:6d:f3:ef:
07:6e:f8:ad:3f:98:09:4a:b6:ed:1e:19:51:dd:85:
dd:b9:79:48:be:7e:19:1f:b4:b4:e9:09:17:cf:e0:
84:04:8a:d9:ef:a6:18:a7:d0:f1:ae:35:e7:92:f6:
81:e4:27:5c:69:ac:fa:f0:76:a0:ab:55:a2:84:30:
61:21:02:26:e0:ad:83:60:d4:2b:9a:84:d7:9c:d6:
f3:0d:c8:ee:da:eb:e0:b9:fd:c7:e5:bb:7f:43:51:
a7:b4:be:cb:c1:58:5c:fe:3a:a8:92:d9:6f:49:11:
8d:36:50:19:30:42:4f:05:2e:20:78:18:4e:36:4c:
6f:42:99:de:4e:a2:23:32:fb:04:8b:f3:62:0d:c6:
b9:2e:33:dc:f4:5c:13:68:ce:cd:90:9e:6b:13:85:
6a:3c:2c:60:4d:df:82:2d:07:71:d3:4f:95:29:7b:
42:21:1d:fc:b4:30:dd:76:8e:74:57:53:ba:62:a8:
7d:a7:81:c2:61:41:f8:52:44:73:03:74:01:44:48:
95:77:58:33:68:67:fe:2d:3f:f6:b5:31:91:d0:2d:
37:ea:42:4c:e9:81:5d:99:4e:9a:88:31:83:8a:be:
90:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:6C:2A:C5:EF:B9:A4:A4:F2:F5:7D:23:73:3F:1D:CF:96:39:37:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86991e5b-a2be-34be-8461-f525d99e11a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.212.90.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:51:6e:1d:97:44:22:9e:7e:e7:5a:48:66:17:37:88:e7:5c:
5c:2c:d8:22:47:19:08:39:5c:ab:d4:55:3b:6f:9c:e2:26:13:
0f:75:44:20:09:8e:4a:44:d6:fe:23:fd:49:ca:7e:d0:eb:3f:
e0:2f:b2:ec:e3:25:fe:4e:5c:28:e7:11:c4:25:96:31:c5:8d:
00:d7:7d:da:99:53:3c:93:e1:35:0c:f8:de:2a:d6:dd:f9:6e:
0a:fd:b0:72:76:b5:aa:4f:2b:5b:63:8a:8a:0a:32:ba:23:3e:
3f:2f:16:f3:28:fc:96:5b:43:7a:69:14:00:ef:1f:2a:07:8d:
c2:af:08:99:e0:8f:5a:b6:3b:cf:0a:00:d9:12:55:3b:f5:d3:
f5:c2:21:51:70:23:0d:c7:26:99:17:37:0a:c0:a4:12:7a:87:
3d:41:86:91:33:89:84:a6:cd:80:e4:b4:36:f0:d2:39:cf:ae:
14:f8:30:9a:40:e7:89:58:31:63:d9:2e:b9:30:ac:46:fe:fb:
d6:6a:1f:5c:c3:4a:0c:57:e0:91:ae:aa:07:c0:fa:56:b0:8b:
4f:50:9c:34:c1:29:4b:1c:bf:de:5c:ed:1b:b8:2f:be:1f:de:
37:65:06:79:a0:6f:ae:3c:20:35:da:f2:ef:ae:c4:db:c3:a1:
22:d5:24:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPTwRgXoYoF3lcqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk
OWNmYjkxMWYtZTc4YS00ZjYyLWJiMTEtYTFlYTcyZTAwMDU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcHhR2wnR6OCbehyMuJv5Aczsk7mSPFpn8tt
8+8HbvitP5gJSrbtHhlR3YXduXlIvn4ZH7S06QkXz+CEBIrZ76YYp9DxrjXnkvaB
5Cdcaaz68Hagq1WihDBhIQIm4K2DYNQrmoTXnNbzDcju2uvguf3H5bt/Q1GntL7L
wVhc/jqoktlvSRGNNlAZMEJPBS4geBhONkxvQpneTqIjMvsEi/NiDca5LjPc9FwT
aM7NkJ5rE4VqPCxgTd+CLQdx00+VKXtCIR38tDDddo50V1O6Yqh9p4HCYUH4UkRz
A3QBREiVd1gzaGf+LT/2tTGR0C036kJM6YFdmU6aiDGDir6QmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMxsKsXvuaSk8vV9I3M/Hc+WOTerMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODY5OTFlNWItYTJiZS0z
NGJlLTg0NjEtZjUyNWQ5OWUxMWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYtRaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL5Rbh2XRCKefudaSGYXN4jnXFws2CJHGQg5XKvUVTtvnOImEw91RCAJ
jkpE1v4j/UnKftDrP+AvsuzjJf5OXCjnEcQlljHFjQDXfdqZUzyT4TUM+N4q1t35
bgr9sHJ2tapPK1tjiooKMrojPj8vFvMo/JZbQ3ppFADvHyoHjcKvCJngj1q2O88K
ANkSVTv10/XCIVFwIw3HJpkXNwrApBJ6hz1BhpEziYSmzYDktDbw0jnPrhT4MJpA
54lYMWPZLrkwrEb++9ZqH1zDSgxX4JGuqgfA+lawi09QnDTBKUscv95c7Ru4L74f
3jdlBnmgb648IDXa8u+uxNvDoSLVJP0=
-----END CERTIFICATE-----
Generated at Sat Mar 7 12:16:49 2026 by rpki-client