
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21f2babd-2971-3562-a17f-40ae3b9e6650.roa
File: 21f2babd-2971-3562-a17f-40ae3b9e6650.roa (raw, json)
Hash identifier: DTNjBzE8bR2fR3JX3ffogsnPN/boRaohR0nO+g0RxD0=
Subject key identifier: 25:34:D0:A9:9B:F2:AA:2F:79:B9:26:6B:98:87:30:54:37:09:5C:C7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D52438844D2E2B725491EE780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21f2babd-2971-3562-a17f-40ae3b9e6650.roa
Signing time: Sat 28 Mar 2026 19:13:19 +0000
ROA not before: Sat 28 Mar 2026 19:13:19 +0000
ROA not after: Fri 26 Jun 2026 19:13:19 +0000
asID: 22258
IP address blocks: 98.50.142.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:52:43:88:44:d2:e2:b7:25:49:1e:e7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 28 19:13:19 2026 GMT
Not After : Jun 26 19:13:19 2026 GMT
Subject: CN=558ec4da-abe3-41e8-a5e2-15abc5909778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5e:5a:89:63:a4:45:a7:7f:54:58:2e:3a:ab:
25:62:ee:36:09:65:d3:65:c3:8f:40:d4:25:b8:6e:
4f:10:a3:7e:76:fd:d7:46:1e:e3:f4:cd:e6:31:84:
53:03:2b:78:88:65:f6:7b:e2:a8:99:45:3f:92:73:
1a:b5:36:83:69:d0:69:2f:be:13:38:f3:bf:73:ff:
df:2a:fa:25:9d:49:c6:7f:b2:84:65:77:64:61:6d:
9d:63:ee:12:8b:63:59:1e:bf:c7:b5:15:f6:7a:6a:
c5:0b:a8:a4:41:b0:43:3f:1a:ad:14:0d:6c:58:db:
46:49:c1:f6:52:87:0d:bc:0b:c4:a3:19:37:9d:13:
40:56:cc:83:4a:a9:f2:8e:07:0e:f3:53:bf:af:21:
20:56:d0:79:3a:7e:fd:d9:44:c7:00:94:6f:a8:4f:
c5:6a:59:97:f1:d8:28:a6:68:e6:bc:dc:30:12:dc:
e0:f1:3e:f2:29:03:9e:64:f0:e8:a1:58:92:8d:68:
24:7c:82:17:67:cf:8c:63:3f:bc:20:60:db:08:9e:
34:da:df:2a:3b:94:44:64:a1:9b:f7:f5:15:13:c8:
bf:95:1e:a3:aa:8e:e2:34:82:1b:88:20:eb:93:30:
68:2c:fd:6e:47:c3:14:26:ab:c0:24:74:2e:51:5f:
ad:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:34:D0:A9:9B:F2:AA:2F:79:B9:26:6B:98:87:30:54:37:09:5C:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21f2babd-2971-3562-a17f-40ae3b9e6650.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.50.142.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:b0:98:8b:51:e6:a6:a0:b3:6f:6c:4f:ad:9c:25:3d:7c:bc:
22:c1:a4:78:42:6f:0b:f5:c8:07:71:d4:53:84:2b:91:76:f4:
b9:54:ea:66:2a:ca:a6:b1:94:8c:8d:81:d8:13:0a:41:5b:a6:
1a:32:d2:1e:15:77:6f:9a:8a:0b:02:ad:a7:60:83:d7:c5:3f:
87:34:e5:9e:e2:25:b9:e3:89:38:0a:9b:6c:a5:cb:bc:cc:28:
ae:da:bd:74:b3:bf:7b:00:13:9b:14:45:05:9c:ef:4a:b3:80:
1b:55:7c:96:c8:8d:3c:e6:c7:1a:bc:0e:ca:fe:1e:ad:1b:c9:
e9:f6:88:e6:52:ba:47:aa:85:fc:6e:c2:f5:ff:ab:fd:8b:db:
ac:11:73:f9:6e:88:f4:50:c9:37:90:4e:f2:e9:cc:85:20:7a:
f6:3a:f1:d2:0b:ab:02:90:70:8d:9d:b1:76:6d:47:5c:2d:6f:
fc:84:69:32:f3:18:2c:cc:31:b5:97:26:e0:ad:88:73:d1:b4:
61:08:f6:0f:78:93:43:b5:6e:92:42:55:83:38:c2:13:ec:a0:
3d:66:0f:3f:b5:ec:64:62:a2:34:c8:8f:00:a4:b4:05:ef:a1:
02:df:ef:5e:32:ee:b4:60:82:dd:54:e8:9b:52:c9:97:8c:55:
21:02:e9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:24:37 2026 by rpki-client