
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb03a424-9384-39a9-8775-4a4cb6f83789.roa
File: cb03a424-9384-39a9-8775-4a4cb6f83789.roa (raw, json)
Hash identifier: IyPvxmZEJNyToEyVTf78FiS1dn0t64bywvBdNQ8aMPw=
Subject key identifier: FC:CB:14:73:37:B0:F7:5B:B9:57:28:98:C2:9B:5F:C3:98:9E:A4:0F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D8EF6E8A68251091E87CC3900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb03a424-9384-39a9-8775-4a4cb6f83789.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 33651
IP address blocks: 98.33.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f6:e8:a6:82:51:09:1e:87:cc:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=dcaff621-440c-46c1-86ce-bfe28f04a458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2b:ac:50:c6:ac:8b:7f:4d:f5:18:8a:7a:fd:
f2:b5:cd:6f:54:e4:fb:aa:87:c7:74:68:b1:0e:32:
0c:91:55:bc:7c:2c:08:f6:3c:e8:da:cf:16:e4:b8:
aa:35:a7:5d:be:20:5f:ae:7b:c8:24:3e:e2:de:d4:
b8:3a:f9:ff:8a:f0:55:13:5e:fd:37:15:c5:3b:df:
45:a5:7d:34:4e:bd:8b:1c:30:23:9a:78:a7:f8:58:
b4:65:4d:b0:84:65:1c:e3:f8:c2:1e:47:7f:bc:cb:
59:24:b1:17:a6:c3:e3:a3:dc:7c:36:33:c3:af:95:
94:79:3c:5b:ad:80:5c:a7:b5:8b:35:3c:ce:96:fc:
16:43:22:01:73:09:f9:f9:c6:49:8c:03:dd:9d:a1:
d1:d4:e6:54:2a:b2:03:ce:31:d2:b6:49:28:88:6f:
0d:57:79:b7:e4:74:bc:b1:36:d2:aa:f3:a5:c7:cc:
e3:d6:e7:1f:69:47:44:92:47:88:ba:7f:b3:48:f5:
db:63:33:35:c9:61:c8:a4:e6:dc:05:1c:7c:1f:a8:
93:f6:89:56:cf:46:6e:ef:1d:27:2a:1c:19:64:f8:
c6:35:91:db:1b:c8:37:41:a5:a7:2c:58:1a:6c:60:
4b:68:c9:b8:eb:0c:85:ec:b0:d7:1a:f2:29:8f:b0:
80:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CB:14:73:37:B0:F7:5B:B9:57:28:98:C2:9B:5F:C3:98:9E:A4:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb03a424-9384-39a9-8775-4a4cb6f83789.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.33.95.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c4:c0:d7:26:af:97:a0:b2:a3:14:ac:15:b6:26:91:ad:2b:6b:
1e:93:8e:cd:71:c7:98:84:db:91:83:33:ae:8d:dd:52:83:d8:
0b:2c:75:7d:22:a3:11:10:b9:87:49:35:8e:49:9d:fd:6b:0b:
dd:2f:c7:cc:d3:e8:c7:d9:ca:eb:df:99:ee:11:67:fc:4a:51:
d0:0e:4a:f9:24:48:08:84:b2:85:43:b9:25:7b:eb:5b:04:ff:
01:67:b6:a4:29:ce:97:e9:61:ae:dd:40:f3:d2:a2:fe:bd:6d:
94:03:be:bd:2d:34:64:c6:f4:10:c9:22:36:e4:ee:f8:42:7c:
d0:44:67:2c:68:56:72:cd:43:0e:e9:a8:ed:63:0c:3a:dd:c9:
68:47:e5:2e:08:5e:d1:a8:e2:3f:c9:fa:47:31:4e:d0:87:a9:
04:f5:45:72:e7:80:19:41:a4:38:fc:b2:18:29:ae:de:a7:36:
63:8c:52:4c:fd:28:16:90:79:73:69:02:39:84:48:cd:74:e3:
81:d6:1f:cd:2c:bf:da:79:e3:b1:75:f7:61:7b:a1:ff:80:1c:
b6:af:55:29:42:76:74:9b:74:a2:5e:13:51:98:e2:2c:92:21:
39:d7:ee:6a:1b:15:0e:29:b1:22:40:57:c6:c1:ac:77:46:bd:
49:ed:21:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9uimglEJHofMOQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
ZGNhZmY2MjEtNDQwYy00NmMxLTg2Y2UtYmZlMjhmMDRhNDU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6SusUMasi39N9RiKev3ytc1vVOT7qofHdGix
DjIMkVW8fCwI9jzo2s8W5LiqNaddviBfrnvIJD7i3tS4Ovn/ivBVE179NxXFO99F
pX00Tr2LHDAjmnin+Fi0ZU2whGUc4/jCHkd/vMtZJLEXpsPjo9x8NjPDr5WUeTxb
rYBcp7WLNTzOlvwWQyIBcwn5+cZJjAPdnaHR1OZUKrIDzjHStkkoiG8NV3m35HS8
sTbSqvOlx8zj1ucfaUdEkkeIun+zSPXbYzM1yWHIpObcBRx8H6iT9olWz0Zu7x0n
KhwZZPjGNZHbG8g3QaWnLFgabGBLaMm46wyF7LDXGvIpj7CALQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPzLFHM3sPdbuVcomMKbX8OYnqQPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2IwM2E0MjQtOTM4NC0z
OWE5LTg3NzUtNGE0Y2I2ZjgzNzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYiFfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMTA1yavl6CyoxSsFbYmka0rax6Tjs1xx5iE25GDM66N3VKD2AssdX0i
oxEQuYdJNY5Jnf1rC90vx8zT6MfZyuvfme4RZ/xKUdAOSvkkSAiEsoVDuSV761sE
/wFntqQpzpfpYa7dQPPSov69bZQDvr0tNGTG9BDJIjbk7vhCfNBEZyxoVnLNQw7p
qO1jDDrdyWhH5S4IXtGo4j/J+kcxTtCHqQT1RXLngBlBpDj8shgprt6nNmOMUkz9
KBaQeXNpAjmESM1044HWH80sv9p547F192F7of+AHLavVSlCdnSbdKJeE1GY4iyS
ITnX7mobFQ4psSJAV8bBrHdGvUntISc=
-----END CERTIFICATE-----
Generated at Tue Apr 21 20:46:35 2026 by rpki-client