
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/d7ea5d8d-dec7-3bb3-afdc-d97a2eb61c2c.roa
File: d7ea5d8d-dec7-3bb3-afdc-d97a2eb61c2c.roa (raw, json)
Hash identifier: ClzaSwXJDuODxx31q2X26H+AjqCUNyUvoSLKVA0h9Qc=
Subject key identifier: 16:49:86:71:A9:26:1B:D7:5C:0B:57:66:80:D0:28:EC:F4:B6:95:A4
Certificate issuer: /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial: 010D0C9F4328584DA6B013B717D5AD1B4907BA80
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/d7ea5d8d-dec7-3bb3-afdc-d97a2eb61c2c.roa
Signing time: Tue 28 Apr 2026 01:00:24 +0000
ROA not before: Tue 28 Apr 2026 01:00:24 +0000
ROA not after: Mon 27 Jul 2026 01:00:24 +0000
asID: 2495
IP address blocks: 198.248.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 01 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a6:b0:13:b7:17:d5:ad:1b:49:07:ba:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
Validity
Not Before: Apr 28 01:00:24 2026 GMT
Not After : Jul 27 01:00:24 2026 GMT
Subject: CN=04881494-02c1-431a-b8ff-344f765abbb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:59:d9:cd:90:ce:63:13:e0:18:39:7a:9a:ed:
77:ac:1d:e8:76:79:9e:77:38:c7:67:79:f9:8c:5a:
38:53:b9:b9:f8:14:0b:b0:c6:2b:5b:cd:13:a3:14:
5e:ff:a0:24:10:b1:0a:b6:54:c4:79:d9:7a:50:a1:
78:15:ac:fc:0b:e6:65:71:e6:9f:74:a5:83:a9:3f:
ff:4c:4e:08:41:82:21:7e:7f:cd:de:f1:32:25:8f:
f4:67:80:e8:27:0e:13:8c:c0:85:6c:ef:78:44:b5:
47:20:cb:00:6c:3d:a9:f4:5c:5d:2c:28:dd:fd:c0:
f8:34:20:72:c0:91:e4:3a:09:59:3a:c1:55:1a:59:
2b:5c:5d:79:90:b5:2a:94:16:1e:f4:c2:ed:c0:aa:
d1:43:15:06:95:42:0d:d1:9b:4a:7e:d7:2d:b9:ad:
8d:b2:3d:9e:6a:6a:58:28:6c:19:ce:b9:45:1f:61:
cb:ea:18:79:8b:0b:fa:6c:f1:86:69:17:fc:ce:81:
bd:cb:48:a0:fa:a8:63:9f:c6:9c:0c:0f:cc:92:8c:
21:0f:bb:ff:54:b2:e7:12:ca:ea:6f:b3:03:6a:a7:
61:1f:bb:4b:f6:2f:39:67:2a:90:bf:c8:03:c0:fc:
75:11:6f:f8:a5:16:f6:10:97:be:b3:2e:50:1b:07:
05:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:49:86:71:A9:26:1B:D7:5C:0B:57:66:80:D0:28:EC:F4:B6:95:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/d7ea5d8d-dec7-3bb3-afdc-d97a2eb61c2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
X509v3 Authority Key Identifier:
keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
sbgp-ipAddrBlock: critical
IPv4:
198.248.196.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:28:cd:01:4b:a7:41:79:b0:46:9b:99:bd:cb:62:e4:63:46:
c8:3d:f2:68:23:88:9b:f9:7f:2c:75:7c:cd:99:c9:68:53:c4:
ac:70:a0:d1:da:56:be:44:03:6e:0f:5d:57:3c:1a:c6:01:ac:
d0:fe:28:63:7e:19:d3:ed:ab:1c:03:2e:0b:5e:b3:be:10:37:
e0:4e:43:82:66:c1:60:3f:d2:58:ed:ec:90:57:33:a6:10:b2:
27:57:c3:26:ec:67:53:71:fe:db:e6:1f:ff:98:f8:50:0d:ca:
bc:f1:84:a4:0a:4e:65:39:2f:b7:e4:b6:79:50:7f:bb:c3:b8:
3a:88:ef:b9:c5:56:a2:28:cf:01:0a:c7:a5:9e:82:47:00:7c:
f1:60:3a:b1:ac:7c:26:e8:9a:bc:91:f3:05:36:47:32:0f:2c:
20:cb:09:a5:b2:30:2d:33:ac:da:62:6b:12:da:67:8d:8e:ea:
c2:93:aa:2f:e1:ca:28:97:7d:a9:be:d1:53:c8:cd:cb:d0:b3:
a5:14:ce:90:1f:46:c3:e1:f3:50:b5:e1:9f:00:35:ca:9a:8d:
d0:b8:af:93:46:8d:b2:20:1e:e1:38:e2:f9:32:42:ca:8a:de:
ff:5f:d6:39:30:8f:1b:73:7f:3b:70:25:75:62:32:50:54:8b:
91:3f:b2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 19:21:53 2026 by rpki-client