
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/223fbcfb-4395-34e2-884e-c466ca7c2777.roa
File: 223fbcfb-4395-34e2-884e-c466ca7c2777.roa (raw, json)
Hash identifier: +6dypFkJMIXRPKea2tUJm7A2AuyCQx4MqYQVeLQXQ2U=
Subject key identifier: 17:D3:2D:71:7E:59:38:D6:4D:AF:AB:EA:1C:9A:49:30:1E:11:B4:A5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BB3A3AE68C282B7CDAC580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/223fbcfb-4395-34e2-884e-c466ca7c2777.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 33668
IP address blocks: 98.243.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bb:3a:3a:e6:8c:28:2b:7c:da:c5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=2d356e38-5917-49e5-9456-c783d6b7e352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:60:dd:8c:70:95:89:98:49:1d:f2:ef:3e:8e:
85:46:0f:25:62:35:f3:cb:ab:be:9f:10:1a:10:03:
30:de:c7:4a:9f:6c:ec:24:60:8d:97:a2:e4:ae:72:
c3:92:5b:79:d4:43:7c:92:07:90:3f:16:cc:62:a5:
74:44:d7:e8:20:fb:04:7b:8c:ad:34:68:dd:7c:9b:
d2:a5:a7:7b:2f:5c:d9:f5:a2:ff:61:d7:c3:69:99:
d9:93:fe:01:78:39:37:93:b8:0e:fe:9b:b1:5c:15:
a4:6a:2b:57:3a:53:8f:bf:69:8c:c8:85:1c:8e:e2:
90:6f:ef:86:38:b0:9e:60:f2:d2:e8:e8:4e:6a:17:
af:28:ff:99:2f:61:aa:a1:96:49:f8:ee:64:b4:7a:
a0:3c:06:b4:ff:b0:10:59:ad:c6:ad:b4:cd:e3:5d:
a5:94:a8:1f:b7:11:d9:17:05:5a:76:cf:a8:eb:f3:
42:03:61:b2:b3:90:48:4b:a9:ed:ce:ea:da:6a:ec:
8c:12:c6:28:25:55:93:3f:21:cb:d5:be:68:48:63:
81:36:d4:a5:85:04:2f:6b:4f:75:99:a0:2e:54:58:
1e:25:f9:a2:9b:00:ae:9f:c9:b0:03:90:ee:18:0e:
3a:4a:7e:bf:c0:b7:4b:8b:a8:72:a9:89:dc:a2:45:
67:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D3:2D:71:7E:59:38:D6:4D:AF:AB:EA:1C:9A:49:30:1E:11:B4:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/223fbcfb-4395-34e2-884e-c466ca7c2777.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.243.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:0d:b7:a7:0d:49:4a:36:94:87:b1:53:09:3d:73:8d:e8:87:
31:2e:bc:d1:5b:e9:b9:83:83:cb:70:22:89:99:84:8d:b6:34:
30:77:5f:2e:7b:ed:7f:e1:57:ba:c5:15:4f:85:6c:6d:c3:64:
7e:cf:92:c5:dd:5d:b1:b4:e9:6f:b5:df:be:f9:6c:63:29:c2:
05:38:e3:7d:16:bc:0e:ae:37:06:f8:0b:7a:f7:63:04:a1:18:
8a:24:77:88:56:0a:70:22:1a:82:a2:60:30:8e:aa:5f:c6:0e:
ab:5b:ef:71:4c:07:72:27:bb:58:1a:94:5c:99:73:24:ff:4b:
3d:15:bd:98:a6:3c:05:da:8a:f8:11:13:f4:62:1e:48:85:69:
01:8f:30:6b:73:ea:cf:ce:b9:db:37:1e:b8:c4:85:30:60:a1:
7a:aa:db:39:5e:bf:3e:b6:9c:76:16:7e:3b:7a:9a:0a:4b:7c:
52:d0:cd:6a:24:f9:ec:45:8f:a1:2e:d7:be:fa:5c:2d:16:13:
9f:d9:89:b5:49:71:62:0d:a8:47:39:04:64:ce:79:c8:f9:2e:
d2:58:31:70:8e:a8:e0:bf:a7:4e:09:8c:d8:29:8e:e6:35:2b:
43:b0:07:42:91:3f:45:d8:bb:10:39:c9:d8:b3:78:a4:d2:3b:
b4:a0:d5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:50:58 2026 by rpki-client