
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/ceaf2de1-b23e-39d9-87b6-5c722c950c8f.roa
File: ceaf2de1-b23e-39d9-87b6-5c722c950c8f.roa (raw, json)
Hash identifier: CT45KW+x9Tb19nbU0tEBveo+SdkIM69Y34qyHB4a5Dc=
Subject key identifier: 56:DD:88:34:BA:A7:A3:68:06:AD:F7:57:F7:16:07:37:A9:4E:48:0F
Certificate issuer: /CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8
Certificate serial: 010D0C9F4328584CDB01FDC40601795B02EFCE80
Authority key identifier: 4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/ceaf2de1-b23e-39d9-87b6-5c722c950c8f.roa
Signing time: Sat 14 Feb 2026 02:00:32 +0000
ROA not before: Sat 14 Feb 2026 02:00:32 +0000
ROA not after: Fri 15 May 2026 01:00:32 +0000
asID: 7057
IP address blocks: 98.143.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:db:01:fd:c4:06:01:79:5b:02:ef:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8
Validity
Not Before: Feb 14 02:00:32 2026 GMT
Not After : May 15 01:00:32 2026 GMT
Subject: CN=4bb427be-9b91-4969-adef-d821f686f981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f3:c6:df:df:ba:6b:fa:a1:38:81:57:f5:45:
f8:f1:a9:49:26:1b:be:5b:58:69:ac:87:1c:e4:28:
ef:57:3c:eb:e7:56:aa:89:06:b7:f6:3d:14:4f:20:
05:fc:8c:6f:04:d6:4f:57:e0:15:13:78:3c:fb:3e:
f3:b1:71:16:e3:dc:19:99:4f:ce:8c:ed:5d:75:d4:
db:84:14:a0:73:21:0d:82:bb:9b:f6:ae:8e:e7:7b:
22:a4:51:85:9f:bc:b2:b8:50:d5:95:b4:a9:99:83:
4c:90:02:65:ad:8b:fe:66:8c:6e:2c:f9:b1:44:a1:
06:80:9b:1a:5b:f2:a8:ee:59:31:56:d1:ea:04:fb:
8c:d6:d3:ac:a7:1f:85:ec:df:03:90:44:ac:88:ee:
cd:82:45:36:67:d4:56:6a:99:26:c0:e8:a1:fb:f7:
b4:4b:66:83:64:35:5e:45:6d:2b:ff:b0:fd:cc:68:
a7:da:ec:cc:fd:30:3b:bd:fb:a1:f1:34:fa:82:1e:
f1:f3:be:91:00:1c:8a:01:e1:e5:ef:fa:99:a7:41:
5b:a7:65:53:3c:cd:79:b1:37:94:91:b2:5c:1a:ce:
8e:26:b6:5f:b5:4b:4e:f5:78:fe:4a:51:26:9f:31:
a0:78:98:a2:32:70:45:c4:c9:45:cb:60:9b:ea:f0:
41:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DD:88:34:BA:A7:A3:68:06:AD:F7:57:F7:16:07:37:A9:4E:48:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/ceaf2de1-b23e-39d9-87b6-5c722c950c8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl
X509v3 Authority Key Identifier:
keyid:4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer
sbgp-ipAddrBlock: critical
IPv4:
98.143.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:14:a9:12:ac:4e:fb:16:57:de:0f:88:f7:3f:c5:cc:93:b0:
e2:2f:13:4a:70:f3:90:73:a1:26:4d:8b:ae:73:52:da:cf:de:
5f:95:5d:36:dc:0d:49:40:a3:a6:ca:c7:92:fa:0e:6e:29:9f:
d0:b9:bb:d0:11:9d:d4:68:62:4b:85:73:a1:be:a4:45:8a:4d:
64:7e:4c:39:b8:5c:8f:c4:dd:3a:73:3d:b9:d0:08:83:7e:f1:
52:50:62:c2:a6:78:f2:cc:d8:b5:5d:2f:a7:da:51:c3:d9:d7:
54:29:aa:bd:a7:83:95:66:17:1e:05:1d:5f:99:e3:49:0c:6f:
c2:3b:b7:2f:29:c8:93:76:a3:5b:4f:e0:3d:a5:4b:de:af:e0:
15:e7:a6:42:97:df:9c:9b:8a:ee:ab:25:28:db:0e:fa:2f:7d:
d2:a3:da:17:50:a9:d3:07:b4:b1:c2:20:c9:fa:bf:57:4d:12:
b6:15:d1:84:e8:dc:7d:ca:93:31:3b:68:d9:f0:70:ca:83:40:
82:29:b9:d5:ad:80:37:d1:5e:12:67:68:b3:36:0c:21:16:40:
6b:20:99:c9:e0:78:97:f3:d8:c7:25:ee:67:bf:da:9f:44:78:
4f:7e:8b:41:18:39:d2:69:b5:20:90:3c:e4:cb:5c:c0:6e:72:
9f:5e:d0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 10:01:17 2026 by rpki-client