
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28e47e4a-41fd-3d2e-a8e8-ca02e17ebe68.roa
File: 28e47e4a-41fd-3d2e-a8e8-ca02e17ebe68.roa (raw, json)
Hash identifier: dAVTXjNdikHJ5X3Z3mHtE/90VAnuUCpqhLoO7CYO8+8=
Subject key identifier: E4:29:CB:71:E5:44:D3:98:81:12:1F:8E:2E:E5:3D:75:12:2A:32:6D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D83CAB7493D72618885804060
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28e47e4a-41fd-3d2e-a8e8-ca02e17ebe68.roa
Signing time: Wed 15 Apr 2026 13:00:30 +0000
ROA not before: Wed 15 Apr 2026 13:00:30 +0000
ROA not after: Tue 14 Jul 2026 13:00:30 +0000
asID: 33655
IP address blocks: 70.88.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:83:ca:b7:49:3d:72:61:88:85:80:40:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 15 13:00:30 2026 GMT
Not After : Jul 14 13:00:30 2026 GMT
Subject: CN=431db7ae-82a4-4db1-8660-fa085e398006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4d:40:9c:96:34:43:21:88:54:31:4b:4a:47:
4c:49:0d:06:6e:9b:7b:ef:5a:34:2c:e8:23:4e:59:
77:e4:6e:cb:d5:7d:63:1a:cd:25:75:d8:37:7e:d8:
ce:64:7b:2e:bc:02:a6:d1:81:44:f9:fe:a9:82:8f:
46:1c:39:a2:14:92:cc:23:e3:2f:fc:cc:ad:f1:62:
69:9a:fd:bd:78:15:35:66:4a:93:d8:bd:f8:55:c5:
c6:b7:98:4c:43:46:76:d8:e3:61:3c:76:5b:33:64:
7d:6f:d4:d4:52:e1:4b:0c:bf:4b:3f:b5:4e:a8:b7:
a9:c0:1b:a3:cd:30:ba:f4:90:02:cd:12:e1:e5:37:
47:c3:fa:5d:2c:6c:ed:c4:63:47:a7:7e:19:9e:ee:
04:75:67:d3:e5:6e:c7:6c:4f:2a:8e:79:00:1f:89:
1f:f8:9d:d2:64:0e:78:dd:c9:5e:8a:61:34:49:35:
e8:03:88:09:c2:bb:f1:b9:aa:b7:63:3e:4c:b3:2e:
6d:cc:f9:a5:80:93:84:26:1c:9a:ef:63:33:28:f6:
15:1d:f6:b8:b7:a4:18:54:64:5b:2f:8f:ea:38:fa:
09:57:21:cf:ef:c6:1d:a6:0f:7f:b4:ae:82:95:55:
bb:72:51:f1:11:24:3a:fe:fa:56:4f:2f:f2:57:52:
fa:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:29:CB:71:E5:44:D3:98:81:12:1F:8E:2E:E5:3D:75:12:2A:32:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28e47e4a-41fd-3d2e-a8e8-ca02e17ebe68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
70.88.84.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:8f:d4:e0:70:e9:9e:66:5f:7a:e9:8b:ec:41:09:8a:26:24:
4d:02:38:74:8b:68:0b:c8:b6:f2:a0:88:5c:ee:de:85:23:ba:
1e:7d:18:b9:69:97:ec:86:93:60:c4:fe:da:c6:7d:8e:5e:c3:
86:19:22:4e:97:74:5a:bd:e1:c0:b4:53:05:6c:96:fc:f3:df:
63:c1:6f:42:9c:4b:0b:42:cb:d7:13:ac:f8:60:d6:7f:f0:97:
ce:fe:67:47:67:0f:75:02:33:c3:bf:3f:dd:53:e0:bc:a1:f1:
5a:73:a4:89:ed:54:01:47:21:38:02:da:10:8a:b8:47:94:f2:
7e:b4:f0:df:d3:09:cf:76:6f:10:34:95:55:ba:c0:08:28:30:
42:54:b6:e7:4b:29:9f:72:e3:2a:8c:53:0b:1b:b8:0b:b9:18:
1d:6c:ee:f5:6e:5b:dd:7f:e0:90:be:bb:ff:7c:8c:f3:48:a0:
b6:36:7c:ea:23:d3:1a:fb:50:d3:d7:dd:74:39:3b:fc:15:f8:
07:75:26:4e:a3:23:d5:7c:9d:03:53:33:bb:a2:87:3c:e0:c6:
27:e0:fb:02:d8:dd:db:f1:0a:03:ca:71:a2:36:5f:6d:88:12:
52:aa:bb:1a:9e:e0:6d:c5:1f:ed:27:80:96:a6:6d:96:10:36:
8c:35:e8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:34:33 2026 by rpki-client