
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23a4b8f5-e39e-3050-acc4-a9e85c2a8ff1.roa
File: 23a4b8f5-e39e-3050-acc4-a9e85c2a8ff1.roa (raw, json)
Hash identifier: s1pp0tsQSVO0RNBQCrGhIahqZvOzYYEJ193hh59lZzE=
Subject key identifier: 47:1E:0A:FC:B8:8C:7A:E5:C3:87:4B:DD:8C:16:E6:B7:C8:DD:C4:7F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D8EF8340A9D618BB565625400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23a4b8f5-e39e-3050-acc4-a9e85c2a8ff1.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 33491
IP address blocks: 98.46.24.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f8:34:0a:9d:61:8b:b5:65:62:54:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=caaae438-c9e8-43b3-8d7a-11419c94f5f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8f:2b:a8:91:12:1f:25:53:ee:17:d0:00:5f:
3c:e1:a5:f7:68:8c:eb:e0:0f:65:90:65:ae:81:62:
79:76:4c:a4:72:0c:cc:e6:00:26:b9:e8:a7:c8:37:
8e:00:61:02:a6:3d:98:ce:16:f9:21:22:cd:41:d2:
98:e5:32:4c:de:d8:ce:c1:86:2b:54:0d:57:6b:34:
fc:f1:56:9f:fa:69:dc:03:b1:3c:a3:c7:16:4d:54:
b5:0b:38:9d:a2:0f:e9:ed:94:78:ec:81:64:0e:63:
e8:56:d2:e9:20:b0:dc:2a:c7:74:3c:ff:8e:2a:7a:
b1:31:e3:74:e1:cd:f0:53:80:8a:df:32:b7:22:23:
77:e0:3c:66:ae:97:10:54:ea:84:4f:cb:ec:17:94:
68:43:c2:87:3c:5e:60:7e:e5:a8:4c:f0:76:38:e0:
94:1f:9c:44:dd:11:cb:39:8b:8b:d1:bf:33:f8:f0:
d7:8c:d0:76:01:7f:72:06:3e:2d:56:87:6a:b1:d2:
18:9e:78:25:8b:80:97:4c:df:8b:cb:22:ab:cb:e3:
5f:47:44:84:ea:63:28:dd:9d:bb:82:ff:a1:1d:39:
4d:c6:6b:9b:a9:2c:0a:85:d6:56:6b:60:4f:c3:9c:
10:d1:02:0c:50:c0:34:d2:61:89:00:6b:51:e0:2a:
ff:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1E:0A:FC:B8:8C:7A:E5:C3:87:4B:DD:8C:16:E6:B7:C8:DD:C4:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23a4b8f5-e39e-3050-acc4-a9e85c2a8ff1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.46.24.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:2d:85:65:5b:8d:b2:44:e6:14:32:68:cc:fb:60:3c:2a:6f:
2c:c0:8a:55:58:7f:fa:78:7a:18:e3:2a:03:e1:70:cc:b8:b1:
92:8f:ae:5f:e5:0e:53:7f:ea:db:66:ae:4f:86:0d:d3:3e:51:
7e:89:6f:c5:d6:55:b1:ee:47:b5:6f:4a:07:89:4e:13:10:3c:
87:9b:25:76:a2:9c:09:7b:f4:89:79:33:76:a1:09:bc:18:d3:
cf:46:55:94:06:ac:ca:a6:6e:a3:48:5d:9b:d4:73:cf:50:88:
e1:13:da:19:59:f1:fb:6c:e9:48:44:96:49:1a:45:02:b2:8b:
c8:bb:0d:80:a7:b4:64:64:b4:56:b5:18:b2:a8:61:6a:a9:ee:
fd:ca:72:ba:dc:5a:c3:35:38:20:a0:1c:3c:6e:b4:1c:41:d1:
01:07:e1:90:37:08:26:a2:9e:d4:a6:6e:8d:33:86:62:c9:7d:
a0:2e:d4:9e:09:42:0a:e6:92:11:53:c2:b9:dc:fc:a8:3c:ad:
3e:c5:c2:d3:1f:90:02:c5:ae:62:f7:3d:01:cd:f0:13:b7:eb:
de:86:c5:cc:b5:14:d3:81:a4:5e:a9:6e:d2:60:4e:55:8c:7f:
f5:19:35:c2:e7:66:a1:5e:65:8b:1b:e8:ac:b4:d6:ee:ce:ce:
4a:fd:5e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 00:09:47 2026 by rpki-client