
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1caaba3a-e8c6-3a0e-9f41-617735aaa7d0.roa
File: 1caaba3a-e8c6-3a0e-9f41-617735aaa7d0.roa (raw, json)
Hash identifier: AqSVTr1s2YK/LgX29WG361k+Bc+tKDW4ijnJ5woy69k=
Subject key identifier: 5C:C8:B4:95:A1:C0:3D:BE:04:45:FE:4A:A7:BB:BF:86:5D:A6:A4:35
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D8EF8140586CBBF54B6D42200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1caaba3a-e8c6-3a0e-9f41-617735aaa7d0.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 33491
IP address blocks: 98.226.176.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f8:14:05:86:cb:bf:54:b6:d4:22:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=1672655d-33a8-4d83-adf8-842b9dbe40de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:be:e8:82:da:28:cd:6a:b5:9c:f6:3c:a4:d3:
5f:d2:d2:d8:4f:39:de:9c:d6:d9:e1:3b:14:0b:2f:
af:29:9f:86:af:b4:cc:77:40:06:aa:23:6d:93:4e:
e1:e5:3d:59:01:da:74:d7:ae:39:89:07:ee:d1:c7:
9e:18:11:2c:59:1d:94:9f:23:5d:8d:66:96:7c:fc:
b8:2b:06:62:08:3e:81:4b:ee:f3:5f:ca:ec:ab:55:
6c:9a:98:7f:f8:7f:f8:a2:8e:93:3e:db:1b:17:b4:
6f:07:db:0f:86:3a:fa:75:99:f8:f8:b8:9d:e1:69:
a9:63:f4:9c:a2:ce:1f:86:13:ba:d2:0d:de:1b:39:
d5:7b:25:40:86:6b:06:58:e4:26:5f:c3:fe:d7:55:
d0:bb:03:ef:7c:c9:dd:28:95:3d:d5:4b:af:a4:61:
30:1b:85:0d:68:a9:59:12:6f:de:07:35:9e:7a:ec:
05:39:6a:8c:33:a6:c7:75:31:5f:48:83:2e:6b:a4:
5d:6d:10:5b:08:86:ac:29:c0:30:78:70:bb:0e:9a:
bc:4c:fd:99:b7:83:7f:bb:60:b6:a6:01:69:b3:d6:
27:9e:17:89:58:c8:98:10:63:6d:5f:1b:fb:fe:c9:
bf:39:27:93:0a:83:c5:50:69:c8:99:82:0f:aa:e5:
75:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C8:B4:95:A1:C0:3D:BE:04:45:FE:4A:A7:BB:BF:86:5D:A6:A4:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1caaba3a-e8c6-3a0e-9f41-617735aaa7d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.226.176.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:99:9a:dc:4f:0c:e5:5f:ee:b9:f6:a9:11:7d:29:12:9f:af:
02:5a:38:96:ad:3e:21:71:39:f5:34:a4:52:8c:9c:75:ed:d4:
09:b1:a0:80:5f:c1:68:07:ae:61:8d:fe:46:b8:28:45:16:4a:
1e:8f:f9:ef:34:a6:a2:c8:df:01:23:fc:ea:2b:75:36:62:4e:
8c:ea:34:67:13:e2:71:e2:83:d1:e1:f8:75:40:5b:24:e6:57:
7f:e1:d0:f7:30:c7:b9:79:f3:0d:08:fc:62:c1:7b:f7:f4:ec:
21:b5:ff:8f:36:3a:47:ef:7a:2b:d4:56:4a:5c:56:47:a8:47:
f6:5a:53:7e:cb:d2:c2:32:a4:54:d8:f0:a9:a9:9e:50:9e:b4:
74:42:cc:eb:e3:98:6f:f7:e6:b2:dd:2d:1b:65:fb:a1:31:01:
d8:b2:0b:f1:46:26:a1:c9:2a:53:b9:5b:7e:e2:04:db:bd:54:
01:bc:0f:71:5c:ea:70:71:e6:cc:ae:9b:5c:2c:64:72:36:44:
c9:45:12:d9:24:e4:95:18:1f:0a:b3:8d:17:c1:25:3d:4a:e9:
98:89:dd:1c:bb:b7:27:18:d5:cf:ec:12:42:35:d1:d9:ca:21:
1a:1b:1b:4f:ff:7d:0d:6d:7f:be:56:97:56:83:ba:33:0d:1d:
7c:4b:26:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 20:16:45 2026 by rpki-client