
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23b8ae4d-2419-30c3-b2ff-4b7c1a915610.roa
File: 23b8ae4d-2419-30c3-b2ff-4b7c1a915610.roa (raw, json)
Hash identifier: M4RGfHehE7An9H6vE/MtrCYT2Pe21dMEGrMQn7A6sss=
Subject key identifier: 34:8D:60:D7:F1:B0:F0:44:EB:A1:9E:32:D7:C4:7F:E1:12:7D:C9:10
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D8100945ED7ED3048B1A008C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23b8ae4d-2419-30c3-b2ff-4b7c1a915610.roa
Signing time: Tue 14 Apr 2026 13:00:30 +0000
ROA not before: Tue 14 Apr 2026 13:00:30 +0000
ROA not after: Mon 13 Jul 2026 13:00:30 +0000
asID: 7725
IP address blocks: 98.252.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:81:00:94:5e:d7:ed:30:48:b1:a0:08:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 14 13:00:30 2026 GMT
Not After : Jul 13 13:00:30 2026 GMT
Subject: CN=7eabbb08-9bdd-4a0d-853a-d81f11a36f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fc:1b:5d:d4:3b:61:5f:80:c1:c6:5b:86:9a:
28:67:81:bc:d1:1b:44:37:01:2d:39:a2:2f:84:8c:
a0:90:6a:d2:70:22:e6:5a:47:c9:aa:ca:aa:42:e8:
84:ed:19:31:f8:51:46:4a:a5:35:99:cc:72:fe:ac:
51:9a:18:e7:ce:45:9f:c4:89:7c:d2:b7:e8:2e:a5:
50:e1:3d:4d:a9:76:67:3c:cd:f3:53:3a:bf:43:76:
ac:d2:4c:7e:e0:2e:c8:e6:57:5c:b9:ea:b9:60:b3:
92:39:ec:b7:d5:2c:32:b8:5f:66:5d:d4:d7:f1:06:
31:54:a6:92:15:ae:ce:f7:25:81:f0:ce:0c:e8:0f:
0c:5e:ea:7c:cb:1a:63:9f:db:c2:5f:10:3c:10:ee:
84:48:11:5c:24:17:86:9d:02:9c:ab:7d:93:08:0b:
20:aa:18:67:96:c4:17:e0:7f:66:6c:10:b5:0d:b7:
40:cf:6a:13:3d:6b:60:72:c8:8a:ac:a0:9d:ae:6f:
7e:47:78:c5:a5:fd:53:43:11:7d:ab:f9:b6:09:7b:
11:94:2a:7a:cc:8d:00:be:2e:e5:24:02:1f:ad:ba:
1b:0a:c5:d6:6c:b7:fc:7e:2a:6a:1b:7c:37:bf:15:
f5:1f:29:52:74:5e:37:db:8d:e8:97:61:f2:d8:1c:
9f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8D:60:D7:F1:B0:F0:44:EB:A1:9E:32:D7:C4:7F:E1:12:7D:C9:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23b8ae4d-2419-30c3-b2ff-4b7c1a915610.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.252.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:8b:9b:35:a3:6b:b5:52:91:37:3c:23:28:5e:75:3e:a6:f2:
69:b8:66:f5:86:55:30:5e:e2:88:ec:af:eb:18:ce:32:62:0f:
4a:48:11:5b:21:ae:dc:68:89:33:37:26:c8:df:e3:60:90:80:
59:e4:bd:f7:c9:fc:86:b0:91:4e:f3:cc:0d:93:5d:01:1f:4c:
9c:4c:a9:bd:59:2a:ab:d5:31:ec:9b:94:e3:47:c2:87:47:ce:
67:b5:fc:3e:59:89:1f:87:29:bb:f2:e9:27:7e:8f:c4:6a:c7:
9c:a1:3b:8c:ee:fe:80:30:f9:fa:16:c3:ed:65:46:92:c0:d3:
7e:f5:4e:9e:f0:49:1c:0d:ef:2d:48:bd:1f:24:bc:43:27:b2:
ab:bf:ca:00:89:cc:78:a8:70:90:81:17:59:9c:62:28:80:72:
c5:f7:17:99:a1:03:88:85:d5:06:6a:7f:33:82:48:cf:07:db:
c6:99:2b:bd:25:5f:07:ed:38:ed:cf:b5:b4:91:2c:0d:14:bc:
c2:1e:94:88:41:8b:7f:9b:31:4d:a9:91:30:b1:56:61:81:64:
2c:6e:fc:f9:1d:0b:9c:43:af:79:ac:5e:d1:f4:1c:84:4b:2f:
b0:7f:d1:a5:79:30:5d:37:29:3b:58:b2:44:f4:6b:ac:70:d5:
43:91:a9:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2BAJRe1+0wSLGgCMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk
N2VhYmJiMDgtOWJkZC00YTBkLTg1M2EtZDgxZjExYTM2ZjM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvwbXdQ7YV+AwcZbhpooZ4G80RtENwEtOaIv
hIygkGrScCLmWkfJqsqqQuiE7Rkx+FFGSqU1mcxy/qxRmhjnzkWfxIl80rfoLqVQ
4T1NqXZnPM3zUzq/Q3as0kx+4C7I5ldcueq5YLOSOey31SwyuF9mXdTX8QYxVKaS
Fa7O9yWB8M4M6A8MXup8yxpjn9vCXxA8EO6ESBFcJBeGnQKcq32TCAsgqhhnlsQX
4H9mbBC1DbdAz2oTPWtgcsiKrKCdrm9+R3jFpf1TQxF9q/m2CXsRlCp6zI0Avi7l
JAIfrbobCsXWbLf8fipqG3w3vxX1HylSdF43243ol2Hy2Byf+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDSNYNfxsPBE66GeMtfEf+ESfckQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjNiOGFlNGQtMjQxOS0z
MGMzLWIyZmYtNGI3YzFhOTE1NjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYvzcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEeLmzWja7VSkTc8IyhedT6m8mm4ZvWGVTBe4ojsr+sYzjJiD0pIEVsh
rtxoiTM3Jsjf42CQgFnkvffJ/IawkU7zzA2TXQEfTJxMqb1ZKqvVMeyblONHwodH
zme1/D5ZiR+HKbvy6Sd+j8Rqx5yhO4zu/oAw+foWw+1lRpLA0371Tp7wSRwN7y1I
vR8kvEMnsqu/ygCJzHiocJCBF1mcYiiAcsX3F5mhA4iF1QZqfzOCSM8H28aZK70l
XwftOO3PtbSRLA0UvMIelIhBi3+bMU2pkTCxVmGBZCxu/PkdC5xDr3msXtH0HIRL
L7B/0aV5MF03KTtYskT0a6xw1UORqZQ=
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:06:25 2026 by rpki-client