
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6af28d9f-3880-31f0-99c9-298dca464572.roa
File: 6af28d9f-3880-31f0-99c9-298dca464572.roa (raw, json)
Hash identifier: CqIZLc9x7EyjeIuK6yvn+I/zc+Hml5WoVK38nkWCprM=
Subject key identifier: 23:C7:34:5D:26:55:BB:86:50:98:D1:7F:DB:BC:96:D2:4F:42:B7:95
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D8EF804B8CDBCB85C4B92C3F0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6af28d9f-3880-31f0-99c9-298dca464572.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 33491
IP address blocks: 98.214.48.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f8:04:b8:cd:bc:b8:5c:4b:92:c3:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=0edc8d70-6cec-4532-b323-0f539d8003b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:22:f6:6a:e2:d2:2f:9c:a5:dc:51:e7:12:42:
0d:92:a6:d3:00:f5:19:99:5d:c0:90:4d:98:e2:dc:
18:a0:07:14:f0:d7:47:33:2d:68:56:e7:c5:22:20:
aa:bb:58:5f:12:8c:62:f7:ba:c3:f2:21:28:e2:4d:
5a:6d:93:77:e2:33:15:b4:98:54:3f:c4:3f:1a:d2:
c2:c3:ce:53:2b:3a:96:75:b0:99:66:c8:1a:e7:f9:
33:d1:83:9e:b2:5d:23:cc:a6:66:db:4e:0c:f9:cc:
f3:26:97:c7:91:4b:69:da:cc:9f:c3:b6:7a:8a:b4:
19:9c:f6:af:79:07:e0:de:a1:c5:c6:0a:d9:d5:d0:
5d:bb:46:22:45:cc:2e:eb:6c:29:82:86:ff:f4:38:
de:da:17:d0:df:fd:1e:2e:98:79:b3:df:0b:d2:27:
9a:8c:92:b4:d2:a6:11:c1:91:17:d7:9b:e6:31:56:
d3:c7:64:6e:ac:dc:26:24:44:d1:97:4d:3b:61:69:
8b:9f:c3:e0:84:f5:cf:b4:45:1f:bf:bf:16:6c:f5:
73:b2:1d:ea:6a:3a:0c:fe:ff:65:1d:ae:3d:67:d9:
89:14:bb:66:5d:35:a0:b5:c1:08:1e:8a:8e:8f:13:
41:04:5e:9b:13:d9:e5:fc:b2:47:53:de:e7:2e:0f:
2b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C7:34:5D:26:55:BB:86:50:98:D1:7F:DB:BC:96:D2:4F:42:B7:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6af28d9f-3880-31f0-99c9-298dca464572.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.214.48.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:fd:8a:b1:5b:6e:be:25:f9:30:5a:0e:31:44:90:05:03:db:
da:0e:9e:f0:36:d6:3e:50:e8:aa:53:c9:8f:0b:0b:8a:c6:2c:
30:32:d4:23:f4:f5:6a:f3:e5:b0:7a:cc:d3:11:2b:38:de:61:
c5:03:e2:e0:0f:c6:04:b1:75:67:ad:4c:dd:f0:22:eb:2c:57:
f8:c5:55:97:f7:07:ec:e5:28:e0:d9:8a:33:55:f6:39:98:ac:
8d:78:87:8a:83:d1:10:72:c1:8f:95:ff:ca:07:e1:9e:94:3d:
2e:99:8f:a1:15:29:b7:d8:f0:0d:02:ad:ea:63:d2:c8:93:81:
16:07:58:c0:ae:97:ae:f4:73:54:7b:0d:1c:52:9f:04:6c:f7:
35:22:53:b5:dd:5f:9d:d5:b3:c6:1c:a5:39:92:de:30:4b:16:
2a:ce:e1:ff:87:d3:f9:d0:53:8a:dc:82:96:bc:6d:46:50:4b:
4c:27:90:85:77:73:3c:cb:04:0d:3d:50:37:d0:1f:86:74:bb:
07:fd:3a:24:01:5f:e2:46:41:d2:5b:84:5a:a5:14:f6:0c:36:
51:74:ed:8d:eb:b3:57:68:49:54:51:a8:9d:50:43:fb:ea:3b:
b0:3a:b2:a9:91:47:cd:b9:2d:fa:d4:ba:5d:3a:9a:36:37:d9:
16:26:0c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 20:49:32 2026 by rpki-client