
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd40a880-eab8-3516-b20c-f9632942075d.roa
File: cd40a880-eab8-3516-b20c-f9632942075d.roa (raw, json)
Hash identifier: cTDg2xxrTyI78aJLJoONs9IPsfSpsD7gchkEKEyPsNA=
Subject key identifier: 32:80:0E:70:1C:85:83:BE:9B:C5:88:31:81:CE:0F:FC:28:A0:90:72
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D8EF847D400170E0F6B0C2740
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd40a880-eab8-3516-b20c-f9632942075d.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 33491
IP address blocks: 98.63.236.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f8:47:d4:00:17:0e:0f:6b:0c:27:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=84a5ca23-3906-4994-ab51-00d30d202635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d9:5b:e3:94:f2:5f:ef:f7:4e:b8:97:16:07:
3a:fe:76:fe:23:74:b9:e4:27:76:6c:90:72:b8:1c:
28:1a:7a:c4:66:f3:0f:e2:ec:c9:27:84:f0:62:71:
0b:0c:06:be:d5:a2:e6:0d:62:b0:50:a1:39:6a:5a:
15:76:67:01:48:2c:37:41:20:d1:94:53:5e:fa:cb:
0c:a9:38:16:37:16:55:d8:99:af:bd:46:ef:70:3f:
6d:c1:69:4b:e2:db:38:0e:87:5e:3d:fe:14:ec:b3:
87:1d:24:64:cb:68:9d:af:1f:8f:53:f7:d5:06:e3:
8f:dd:59:61:47:ed:15:ca:3a:26:96:69:1c:74:d7:
8e:da:de:c8:8a:50:fa:13:4f:92:8e:a2:3e:6b:b1:
5a:c6:a7:ea:2f:ce:1a:db:26:f2:d5:b2:f0:dd:a6:
d6:68:3a:28:ed:fd:98:6d:7e:14:7a:1f:69:28:54:
07:af:31:29:1e:2f:8c:0b:da:56:81:5f:3d:75:8b:
3b:d0:11:fd:fb:bf:2f:99:6e:4a:81:62:04:eb:c3:
eb:ea:57:67:76:1b:ed:a5:86:ed:aa:95:55:50:a5:
5f:4f:e6:34:d6:d9:c5:1a:97:c2:17:29:7f:ad:0c:
b3:aa:dd:51:da:46:02:0a:d4:3c:c1:d2:e3:40:2f:
4b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:80:0E:70:1C:85:83:BE:9B:C5:88:31:81:CE:0F:FC:28:A0:90:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd40a880-eab8-3516-b20c-f9632942075d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.63.236.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:56:e9:87:9f:47:f3:55:11:06:54:c7:8c:f4:7f:f4:b7:bf:
94:e8:67:d9:4c:bc:ea:4a:8b:df:c1:65:43:bc:10:15:2a:2b:
1d:95:9c:06:7e:ea:b9:4c:0d:24:d1:96:bf:40:53:1d:83:15:
93:d4:3f:24:cf:0e:c4:bc:59:2b:74:f0:18:e7:e4:d2:69:5c:
0d:d8:15:69:c4:4d:a1:f4:75:93:c8:4f:5c:ea:ae:26:67:5f:
af:d8:40:f7:10:87:a2:9d:04:d6:9b:66:2d:69:13:d7:47:3f:
e0:be:4a:26:82:a5:39:8a:7c:c1:b1:c0:6b:eb:c2:bb:78:31:
e9:33:f9:ba:fd:26:63:ce:db:4a:92:cc:8d:a1:e8:29:4c:03:
c8:3d:50:24:5e:26:eb:a2:86:91:ae:d3:da:14:ba:03:06:44:
2d:b5:72:cb:78:1f:44:ec:52:d9:82:71:7f:c5:4e:71:6e:0c:
aa:7e:2d:a5:d1:3c:8e:3b:df:53:2e:58:38:cf:7f:18:59:b8:
00:96:33:68:d3:31:6c:6f:47:88:0d:31:4f:d3:6e:70:8e:c2:
64:d8:cc:06:da:6a:3d:9a:d1:f7:9d:ce:13:a4:9a:cd:d5:a1:
fd:22:67:13:d8:1c:4d:ec:98:32:80:71:f5:f5:8a:a6:fc:3f:
b0:8a:02:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:32:59 2026 by rpki-client