
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e072241-856f-3219-a30e-a6c13d0d90e1.roa
File: 1e072241-856f-3219-a30e-a6c13d0d90e1.roa (raw, json)
Hash identifier: 2kgbQ4B1QZk7y+PRvl/w6PZGLxYvavu/PR2nVEuirLQ=
Subject key identifier: 3A:24:DA:C9:2F:54:35:81:A3:D6:F5:B7:AA:A2:59:99:9C:5A:46:DA
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D8EF807660882BCCED35EC400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e072241-856f-3219-a30e-a6c13d0d90e1.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 33491
IP address blocks: 98.220.144.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f8:07:66:08:82:bc:ce:d3:5e:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=2c58a567-7acd-4e00-a423-9a7fcecdc7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:99:85:6d:52:1f:7c:7a:dd:c0:3f:fe:4d:e8:
f8:cf:43:06:7e:88:08:d5:f5:bf:d0:2f:7b:ac:99:
ec:67:79:5d:10:7f:5c:87:c9:29:c4:f3:03:6a:21:
d3:05:96:ce:f0:f8:08:cc:41:9e:a1:69:8e:b5:03:
49:26:d0:c0:f6:bb:c4:42:08:4f:f0:79:6c:d6:3d:
44:0d:83:32:b9:39:61:5e:6f:11:36:36:85:48:b5:
1f:cc:1d:23:e9:b8:33:c0:07:6b:22:bf:66:c2:0a:
c2:84:e8:b2:58:3b:73:73:87:dc:1e:4f:75:6e:7c:
88:56:37:5d:23:c5:b4:60:70:fe:00:68:a0:22:9f:
29:56:42:46:29:33:1a:2e:02:61:eb:19:99:2f:66:
86:58:b6:e4:99:00:f5:f7:14:18:02:e5:35:1e:19:
13:c3:e6:e1:75:80:47:e4:c8:3f:68:68:80:a3:e7:
de:df:bb:cf:45:31:4f:35:70:1a:31:92:f5:bb:f6:
5d:34:0f:0b:93:b2:b7:80:de:72:f2:1f:c6:a4:0d:
7d:6f:4c:13:84:3e:38:63:b8:06:c9:d7:a4:21:9a:
7c:d3:e9:3d:6e:57:fb:4b:b5:40:84:65:e1:01:22:
27:44:91:30:92:30:70:d9:d0:e0:8d:63:b1:8f:c3:
b9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:24:DA:C9:2F:54:35:81:A3:D6:F5:B7:AA:A2:59:99:9C:5A:46:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e072241-856f-3219-a30e-a6c13d0d90e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.220.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:c6:68:ee:d3:44:36:50:2f:71:73:1b:48:2b:69:e4:b8:d5:
90:dd:4c:8b:87:6e:3e:90:ce:39:59:b1:10:c0:3d:fb:05:89:
82:f3:c6:89:72:18:68:6e:39:f9:2a:f5:29:e1:b5:e4:3c:ac:
39:41:9e:55:21:be:27:8d:36:9a:e3:8c:ba:5e:d0:9b:29:6e:
c4:20:79:5c:33:c0:16:6d:4d:12:3c:95:ba:e2:45:0f:22:a8:
98:af:42:aa:fa:e8:5e:cc:25:79:9a:50:85:0e:9a:9d:33:96:
e2:6c:63:13:ad:6a:d8:d0:09:53:c0:6f:1f:f1:8a:a9:bc:20:
ae:4d:77:f2:7b:0d:f0:fa:93:64:f9:29:d8:55:df:c2:ce:e2:
7a:98:76:c3:b7:61:43:6e:e6:8e:94:5e:74:b1:6b:92:b0:c0:
31:12:e5:41:d3:12:f6:4a:e2:15:76:c6:a4:46:df:dc:e7:46:
0e:09:f6:ce:94:52:ae:7b:51:50:3f:d1:82:3d:46:f3:92:69:
f9:7f:b1:30:4c:33:99:2f:a1:a0:7e:15:37:a6:a4:03:24:bb:
aa:46:2c:3e:1d:7f:60:e2:0c:8c:3e:c8:b5:6c:d1:26:b3:35:
1a:4d:9b:11:be:d6:02:47:5c:cb:5e:3f:ad:00:25:43:7e:be:
14:96:34:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 20:34:01 2026 by rpki-client