
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ed110e4-bddf-31b2-9290-a2ffa9f0a346.roa
File: 3ed110e4-bddf-31b2-9290-a2ffa9f0a346.roa (raw, json)
Hash identifier: m+tl/WBC4bA2K7ccRknwuVcPpJOG0YbdN07P1Q1VHpQ=
Subject key identifier: B0:75:DF:E6:EF:6E:5B:67:4A:40:AC:ED:62:E7:17:2C:B4:56:24:DF
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D8EF681DE8922F716E661C140
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ed110e4-bddf-31b2-9290-a2ffa9f0a346.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 33491
IP address blocks: 98.215.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f6:81:de:89:22:f7:16:e6:61:c1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=b76c2f9b-cd72-4dea-9bd1-67523713d759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b8:5b:68:26:0d:3f:91:0b:12:43:40:03:e6:
72:09:52:c5:02:0c:f2:86:29:58:67:78:55:2b:b2:
f4:a5:5e:55:04:33:98:9a:2e:42:67:18:4d:79:9a:
30:a2:55:d0:12:5b:e9:72:01:2d:dd:26:99:b4:52:
69:97:e7:86:d8:e4:82:62:68:43:e1:f4:24:04:67:
b0:97:b8:50:c7:de:3b:8b:b0:ed:d0:29:bb:1c:d7:
be:51:c8:00:29:e8:ed:04:d5:aa:9e:3c:93:d8:44:
27:bc:73:b9:6a:aa:c4:91:a2:03:32:00:50:32:f5:
32:83:5e:6f:4e:e8:1e:7e:0b:30:22:af:99:10:b9:
74:b6:64:95:e5:ca:a3:7f:3a:17:d8:2e:58:9f:84:
6e:b5:36:81:de:05:76:dd:c8:fd:1f:92:c7:f2:2a:
f0:9c:0b:01:11:49:64:96:94:57:4c:fd:f0:f5:88:
e1:06:6c:fd:73:ab:11:8a:0f:ef:fc:6e:a3:0a:91:
f7:29:cc:8b:39:58:0e:1b:a5:ca:b8:46:66:47:a9:
af:de:37:52:b8:12:c9:25:6f:a6:f7:e3:eb:e5:a3:
02:46:ac:92:52:77:cf:cf:99:8c:c3:80:6e:bc:1e:
a4:f2:f7:d6:bf:a1:d4:e9:de:04:5a:5e:2f:d4:c6:
28:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:75:DF:E6:EF:6E:5B:67:4A:40:AC:ED:62:E7:17:2C:B4:56:24:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ed110e4-bddf-31b2-9290-a2ffa9f0a346.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.215.14.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:04:41:3b:89:6c:8a:fd:df:3a:4b:05:71:3e:99:a0:1b:25:
cc:85:6e:0a:d3:4f:61:9b:5b:f4:6c:97:41:b8:f9:41:5b:23:
9b:d7:6a:80:45:1e:b9:de:bf:cd:ec:68:c7:82:f3:f2:68:b8:
3b:04:08:08:51:64:8d:a1:3c:94:08:a9:8d:50:3d:b0:4f:06:
b9:89:bd:d5:aa:ec:c4:d3:6e:62:7c:fa:c8:5c:31:02:c3:8e:
d5:44:42:b6:b1:9a:64:a6:aa:9c:0d:2b:c9:90:70:f3:89:a2:
ac:60:ab:0a:ee:5e:62:e8:a2:f7:9b:eb:a4:59:ba:8b:53:b0:
0a:7a:0e:cc:fa:aa:80:ee:ef:a2:40:ba:99:c9:8c:35:d5:e1:
d0:8b:3e:bb:2b:91:75:01:f7:46:9d:67:56:7a:27:b3:a4:f1:
33:65:97:a5:18:5a:5e:33:9c:71:e7:b7:c7:53:a2:64:f4:93:
ac:f5:dd:11:04:67:29:42:af:e7:04:7c:06:a8:c2:2b:86:28:
92:de:71:33:48:61:b7:0e:d6:b5:47:b9:5e:98:15:ea:60:07:
da:27:a2:54:fa:95:98:fd:1a:b5:cb:37:c7:9b:6d:f4:f8:75:
60:63:42:f7:53:41:41:f1:03:dd:d9:25:fc:fa:9c:2d:ee:31:
d1:a8:bd:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:14:45 2026 by rpki-client