
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28b22c59-5739-369f-8079-11f38bf46db3.roa
File: 28b22c59-5739-369f-8079-11f38bf46db3.roa (raw, json)
Hash identifier: WzfhHMGp4d+3kibDtnr7FnymqYojXco+g20rFspoef0=
Subject key identifier: 74:24:EE:8F:91:5E:97:B8:F4:EB:6D:C7:43:66:8F:D5:E8:51:77:4D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5E24B598CC3B6C87F02740
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28b22c59-5739-369f-8079-11f38bf46db3.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33651
IP address blocks: 98.37.8.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5e:24:b5:98:cc:3b:6c:87:f0:27:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=4f8d3529-0d5d-4a0e-aaf9-0b70125ece23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e8:93:04:b4:d1:3c:a9:03:dc:5e:1f:f0:e3:
99:c0:58:51:6e:38:2b:43:22:bb:41:6e:57:08:0e:
b8:0f:62:fe:e8:a0:af:49:e8:a5:6f:17:44:b0:e7:
89:ba:9a:64:f5:31:81:92:55:8d:55:22:fa:74:45:
0e:f6:b9:38:dd:5c:a7:66:f5:d0:e6:54:9e:c3:ca:
f8:8d:0c:5f:88:cb:0a:d2:22:91:0d:fb:03:1e:44:
dd:62:8c:23:e6:b3:7f:24:cc:1a:66:bb:2c:c4:1e:
95:6b:5e:b9:d7:d3:84:a4:68:af:bc:7a:35:24:62:
33:d6:26:b8:63:f6:8d:75:80:0b:7e:ec:6b:c6:20:
22:c3:d2:33:29:86:b1:1f:76:1b:03:b4:6b:15:2e:
be:73:36:ee:f8:2c:a5:a0:c0:58:86:61:a5:5d:ff:
8d:cc:3e:89:81:53:24:b5:c9:1e:e2:54:da:93:9b:
af:9d:62:b6:48:a2:b8:ac:1f:10:46:ed:b7:c8:69:
46:28:2d:6f:ef:df:12:7d:f5:21:4a:5a:d8:ec:06:
dd:12:31:9e:dc:02:90:62:fb:56:d5:87:fc:d4:7e:
3a:41:81:58:70:6e:ba:37:ba:39:e5:7b:56:a5:e1:
93:9e:01:fe:6a:9f:49:80:f5:3f:43:85:bd:a3:d5:
21:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:24:EE:8F:91:5E:97:B8:F4:EB:6D:C7:43:66:8F:D5:E8:51:77:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28b22c59-5739-369f-8079-11f38bf46db3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.37.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:5b:89:ea:61:a7:89:f5:28:8b:a8:f6:e2:8d:3e:95:51:06:
e8:33:de:46:67:3a:82:b4:fe:e0:e5:71:a0:df:b0:a7:12:c0:
88:61:33:48:b6:82:a3:c0:6c:d2:9b:c8:78:2e:13:f2:ee:df:
49:5f:0f:84:04:05:dc:5b:9f:71:a6:4b:c2:0c:d7:50:64:e9:
42:bd:bc:7e:0c:e6:05:a1:41:37:e8:ed:e2:34:57:96:bc:bc:
dd:6b:bf:9a:46:b2:b9:d6:2e:07:1c:c4:99:78:b4:d9:76:4b:
a9:63:34:ed:86:2a:f3:6f:d3:c8:83:5a:8b:43:7d:1c:c1:e1:
a7:4a:9f:56:eb:22:7c:5a:f6:35:fc:6a:1d:c7:d2:2b:d8:aa:
f5:04:5e:99:5d:ee:1f:dd:ac:d1:59:b3:f9:f6:40:49:63:83:
f1:74:7c:21:f2:aa:2c:a0:e9:73:71:3b:53:27:39:45:a8:a1:
6c:76:91:12:b7:3c:14:70:42:8e:42:10:41:25:00:13:dd:c1:
6e:eb:40:b6:84:7c:e7:01:ba:c2:7a:b2:ba:37:df:63:59:70:
2e:a8:1a:d0:9d:d5:75:e3:2a:05:5b:3d:ed:a8:9d:81:e5:ee:
4e:12:59:b1:01:55:ce:8b:76:21:ec:19:3f:2c:eb:a9:0c:ea:
eb:7e:7b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:09:27 2026 by rpki-client