
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/566a5704-8e1a-3ce0-bf59-b0b7702728b6.roa
File: 566a5704-8e1a-3ce0-bf59-b0b7702728b6.roa (raw, json)
Hash identifier: VI5kS60AKwpsxWH5zHOnh410ZIqxRtvlkmeKQ9hRgf0=
Subject key identifier: 63:64:37:1F:5D:05:F3:45:9A:14:25:4F:23:6D:A5:15:6E:28:B7:48
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BCA355C6D40393C05BAC80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/566a5704-8e1a-3ce0-bf59-b0b7702728b6.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 33662
IP address blocks: 98.199.156.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bc:a3:55:c6:d4:03:93:c0:5b:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=c3d34a2c-3c77-41b8-9017-1ae07039da26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:fe:06:cb:08:e4:30:da:85:4b:f3:33:42:10:
28:d1:7d:ce:52:83:4c:a0:a6:6d:c0:8f:19:71:00:
f2:f1:70:ca:b3:43:c5:ba:2d:35:14:ed:da:b6:fd:
64:af:46:00:fd:ba:ff:22:ff:6e:83:8b:4f:6b:79:
0e:28:de:b2:52:52:26:3d:15:52:08:d5:0c:1b:75:
98:f4:27:ef:47:3e:df:74:c4:fc:ed:2d:7e:8c:7a:
9d:0b:cb:d5:b2:ea:c8:ff:ae:c2:ea:85:29:2f:6f:
94:7f:0c:87:1a:9d:47:7a:ff:36:58:00:7c:48:a8:
88:ba:10:eb:94:f0:e1:1f:ab:09:f7:27:21:3a:2d:
63:77:8a:60:38:1f:b1:b9:6a:28:1c:c9:d9:6b:fd:
95:5b:5e:56:0b:cf:02:00:b9:e8:9c:00:af:50:94:
20:3f:11:1d:aa:71:2a:be:f9:df:a5:b5:24:0c:f8:
0a:73:94:fa:ac:ad:70:13:d5:9a:10:54:48:d6:c3:
e5:1f:3e:e0:54:6c:85:b6:7b:79:61:bd:aa:98:66:
89:7a:67:d4:86:d0:31:8e:41:76:68:7c:1e:40:12:
b9:74:52:15:74:0f:39:99:94:49:f4:dc:20:5e:3a:
ee:60:e2:26:70:ee:cd:7f:fc:dd:f9:68:a0:19:fb:
3b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:64:37:1F:5D:05:F3:45:9A:14:25:4F:23:6D:A5:15:6E:28:B7:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/566a5704-8e1a-3ce0-bf59-b0b7702728b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.199.156.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:37:62:20:91:aa:64:2f:7a:be:c0:46:c4:05:6c:a7:86:07:
eb:be:65:93:0e:83:e7:43:4d:63:43:a9:7f:d4:79:65:70:50:
5e:a2:d5:af:cb:45:f6:c5:eb:0b:9c:88:f8:b2:57:55:4c:f1:
a3:55:ca:ba:ee:a1:d4:0b:ee:35:4d:70:b1:77:f7:43:fd:d1:
3e:6d:b6:06:fc:19:0c:6d:b0:4f:dd:6c:f1:d6:e0:de:c0:b4:
17:8e:c5:87:17:9c:cc:40:fd:b3:1c:3f:03:20:9e:bf:51:c5:
09:08:c5:cd:a5:ed:29:99:44:3b:76:65:b2:28:15:41:48:79:
80:9a:55:e0:de:c1:dc:bf:65:20:91:20:98:d9:ff:e5:1e:ab:
7e:38:08:92:71:45:dd:71:e6:f4:e5:fd:70:da:6a:ad:d1:38:
f8:c1:f2:c7:48:50:f1:64:de:af:af:34:e5:bd:b0:e6:95:f4:
95:ef:9e:7c:46:9d:29:be:16:5f:b5:0e:23:dc:cd:98:12:27:
07:f5:59:31:16:28:61:68:fe:2c:e1:cb:c4:fc:c8:c2:c9:de:
51:d9:da:54:3a:01:64:02:0f:d9:78:24:4a:6f:4a:fd:e4:48:
80:2d:46:05:9d:93:d8:1c:05:11:53:c6:04:04:2b:0c:b8:68:
6e:90:72:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:35:19 2026 by rpki-client