
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/859b42f2-ea09-391a-99b3-6b56b53bc476.roa
File: 859b42f2-ea09-391a-99b3-6b56b53bc476.roa (raw, json)
Hash identifier: kl/Hlil8CVwx50ofGX+PXD/uPZ2rg5FLpO/OfafjBwI=
Subject key identifier: 23:68:60:94:11:C3:82:D2:E9:38:6B:C5:75:55:79:6A:DA:1B:34:D9
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D8EF687CA3F7BCC5952112180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/859b42f2-ea09-391a-99b3-6b56b53bc476.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 33491
IP address blocks: 98.223.0.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f6:87:ca:3f:7b:cc:59:52:11:21:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=0fd281a0-feee-4392-b946-6d24635021fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:22:52:08:df:e6:c5:0e:aa:02:34:fa:c1:47:
cb:c6:e0:2e:c0:9c:76:51:ca:20:cd:6f:6c:f2:0f:
68:14:71:b3:4a:a5:f8:5e:e1:f3:22:e1:31:23:2e:
22:b7:27:50:ec:9f:3f:ce:50:f4:8d:1e:74:54:37:
85:da:78:df:71:10:19:1b:83:1a:0c:30:81:20:3e:
77:ab:1e:d7:83:bd:6f:59:51:19:f8:fc:e2:33:f9:
70:f2:30:93:03:45:77:a1:dc:4e:c5:f5:a9:c2:37:
3e:af:2b:54:3a:44:e6:81:56:0c:66:1c:93:16:9b:
e5:00:b3:ff:bb:7f:68:bc:63:ff:e0:bb:dd:6f:e1:
8b:f7:b4:16:95:b6:b8:42:5a:b8:ac:98:17:f0:eb:
cd:3a:2a:33:66:72:67:f0:e7:b0:90:1a:8f:17:be:
dc:00:14:06:8d:ad:1e:c2:6a:9f:28:1d:b1:29:f5:
be:ed:26:49:eb:98:b9:1a:44:ae:16:00:b7:f2:67:
6d:2a:01:b8:09:99:ab:12:0b:9a:3e:08:31:b5:3d:
f1:2b:39:fd:4c:a8:bc:bd:dc:3c:16:c6:28:90:a7:
59:60:e8:2a:03:bc:e7:c9:52:95:e5:3b:ed:a4:00:
b3:48:27:2d:e2:f9:22:6c:11:5f:8b:d2:15:5b:63:
3b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:68:60:94:11:C3:82:D2:E9:38:6B:C5:75:55:79:6A:DA:1B:34:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/859b42f2-ea09-391a-99b3-6b56b53bc476.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.223.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:d7:7d:46:bf:da:82:43:c0:ee:58:cd:ae:aa:b7:78:02:d1:
ee:75:66:99:ca:1e:89:21:c8:22:ec:f4:7b:e4:35:dc:be:17:
08:db:22:f3:66:0d:5e:44:3b:d0:f7:b0:d8:59:5b:f3:79:7c:
2d:e3:ff:01:90:d5:9b:5a:db:f1:df:3f:23:8d:3b:fc:f3:59:
64:ba:31:89:81:e8:07:69:9f:78:3c:a0:fd:00:e4:6e:c6:52:
fa:42:e3:68:77:fd:03:1e:90:5f:c8:e9:f8:43:78:06:72:46:
f3:55:b8:e3:85:66:d3:c3:7d:07:ae:56:17:49:b4:4e:86:88:
0f:6b:00:ac:8d:0b:c2:cd:5d:a6:a2:c9:bb:db:ae:06:52:0f:
b6:eb:10:af:c8:4f:3f:3e:d6:6d:bb:05:12:90:73:b4:29:c9:
eb:46:a3:e8:17:bd:4f:bf:92:f8:fd:d2:73:21:90:83:cc:58:
25:75:99:ad:7f:8a:b8:8c:22:e3:dd:c7:15:25:a6:9a:b4:e8:
2f:d1:e1:32:59:57:57:45:49:7b:f6:3c:ed:26:6b:39:21:b3:
0b:19:fc:6a:7d:84:57:f1:c6:09:63:a8:c6:d5:f4:5a:31:f4:
e1:d8:c3:95:d7:ff:b1:0e:25:12:69:87:6f:83:28:f4:f9:24:
ca:d2:04:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 00:20:41 2026 by rpki-client