
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ceccb65-acb7-319b-a127-941274112c6a.roa
File: 3ceccb65-acb7-319b-a127-941274112c6a.roa (raw, json)
Hash identifier: PMgVTA1EKQSE1YFd3HjiSwM6T8kSiCh+sa8ozdhx210=
Subject key identifier: 31:C8:DD:E9:71:5C:EF:8D:5A:C6:CF:AA:4F:EE:FE:99:6C:30:EA:EA
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D8EF7C15D2179FD509ECA7740
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ceccb65-acb7-319b-a127-941274112c6a.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 33491
IP address blocks: 73.246.98.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f7:c1:5d:21:79:fd:50:9e:ca:77:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=476a68fb-93bc-47b8-acc4-9c6f199c3627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e4:8d:30:9d:17:f7:52:af:9e:98:4c:fb:2b:
6e:06:3d:3c:5e:f5:9d:c1:7e:11:08:7a:13:e5:17:
bc:83:42:47:89:dc:c5:0b:20:9f:e4:9c:c9:db:f6:
f3:20:e1:98:35:38:b4:7e:5b:c7:3b:47:59:86:cf:
11:eb:0e:45:bc:62:b5:e6:af:92:70:c2:00:73:f5:
5a:55:7d:df:46:32:aa:06:7e:ed:fd:fe:77:ff:d2:
bc:f8:35:0d:67:5b:60:fc:7f:bd:57:3f:d7:ad:47:
e9:06:8f:9f:8d:a8:5c:12:43:08:68:df:f9:94:a5:
8e:0c:fa:61:83:6d:b8:80:ab:20:96:0f:8e:0b:82:
3c:64:98:34:5a:25:b8:b6:f8:3c:16:73:3b:17:04:
2e:53:33:64:f8:18:a6:07:b4:bd:6b:9b:d7:59:0c:
e8:c9:f3:fd:03:9f:9a:21:9d:b0:cb:8d:7d:8e:d3:
06:38:3a:7e:05:fa:a1:e4:07:0d:56:45:54:83:6b:
1a:5a:55:cb:3f:5e:27:96:d9:20:b3:d5:e2:bc:57:
05:4d:51:5f:6b:70:94:99:26:7c:90:0d:67:c5:de:
18:04:31:4e:61:37:e9:31:d5:5c:df:a6:01:ef:4a:
67:b2:9d:d7:a1:bb:48:9b:4e:b7:63:d6:ed:0d:06:
eb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C8:DD:E9:71:5C:EF:8D:5A:C6:CF:AA:4F:EE:FE:99:6C:30:EA:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ceccb65-acb7-319b-a127-941274112c6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.246.98.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cf:2d:a2:fe:22:c2:31:e9:91:f7:5f:85:28:be:92:3b:99:51:
07:53:6a:f3:df:ce:c9:25:65:27:ee:bb:18:fd:04:19:ab:f1:
bd:cf:8b:44:04:90:11:39:65:18:15:e0:a4:c7:e5:d9:b8:d2:
b7:fd:ea:a4:2d:c4:c2:22:a3:12:7b:29:43:77:a0:23:b9:32:
87:04:97:6b:7a:00:1c:3e:91:27:a4:4f:80:b9:ab:0a:89:bc:
39:52:f2:d8:b0:ed:41:b3:8e:76:41:9a:19:49:7e:95:8d:8a:
05:2d:80:84:2e:19:bd:e7:03:a7:d8:e5:5e:8b:83:e4:37:26:
98:07:25:ce:f1:bf:9c:67:b8:f9:3e:04:7b:71:c7:72:97:43:
5b:22:83:8f:5d:05:a3:ab:64:99:39:a1:3d:9b:54:1c:15:59:
fb:d0:3f:e7:82:18:7e:52:32:07:83:63:6b:4d:f4:8b:39:65:
1f:54:55:33:b5:5e:b0:5a:1c:48:53:c5:df:7b:89:30:96:7b:
c2:6b:cf:d2:64:53:e2:ac:5d:5e:58:b7:f7:a0:35:bc:a0:de:
65:f6:b0:2b:e2:dc:fd:e3:dc:69:a4:29:7b:a1:1a:b8:3e:54:
ec:cf:b1:dd:9c:eb:eb:8b:97:be:95:3d:10:03:54:49:b9:26:
4d:67:48:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:29:43 2026 by rpki-client