
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b05e764a-5140-3fe0-aadd-5377adbd895b.roa
File: b05e764a-5140-3fe0-aadd-5377adbd895b.roa (raw, json)
Hash identifier: XQU6n5yyIEsB7ijuLhenBpRn6iypWtdw/jMg8U6YVew=
Subject key identifier: 11:FF:64:14:DC:58:EE:43:52:2B:2A:81:D5:AE:CF:E5:D6:BD:82:EB
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BAF4390E4A2C7558FFD880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b05e764a-5140-3fe0-aadd-5377adbd895b.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 7015
IP address blocks: 98.216.120.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:ba:f4:39:0e:4a:2c:75:58:ff:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=13b0b79e-a58e-4fa9-9a6c-f3aa90b9e39b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0f:06:f0:8f:96:0f:3c:fe:9f:3d:4f:ef:f3:
c4:25:14:0f:08:b7:44:e6:78:03:12:58:60:4c:7d:
cb:8c:d4:6d:28:6a:9c:3b:d3:ef:68:1e:f6:83:11:
76:f2:c0:2c:ff:59:70:a7:9f:eb:e3:11:02:ca:c0:
20:9d:9b:7e:c0:ff:cb:af:63:24:44:d4:e8:77:36:
65:0d:7b:1b:06:48:6f:63:c3:12:f8:26:d1:80:2e:
d7:9b:a0:b3:5a:05:07:96:57:f6:50:53:1b:75:09:
e5:f4:83:07:4b:6c:1a:ea:a1:56:53:bb:71:e3:49:
c4:8d:74:6e:d3:45:b9:bd:dc:56:fc:39:f7:66:bf:
14:0f:8f:e0:65:1c:65:ab:57:4f:73:cb:4f:a7:27:
e4:3b:c0:ec:9b:d4:ab:1c:e0:79:e2:8b:f6:da:ba:
a6:4a:7c:01:05:97:f1:86:29:67:6a:40:dc:0a:5a:
cc:28:33:50:f7:19:c3:bc:2c:90:66:e1:5f:ca:07:
65:60:d8:c9:4d:0f:26:68:f7:26:dc:d3:7e:ef:8b:
d3:5e:32:74:9a:1d:53:3f:18:be:12:c7:5b:4d:51:
a1:2c:79:24:41:65:28:c2:0f:6a:95:d1:db:79:41:
0b:e2:ac:f7:e1:8a:e7:d4:65:f1:3b:53:aa:71:53:
14:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FF:64:14:DC:58:EE:43:52:2B:2A:81:D5:AE:CF:E5:D6:BD:82:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b05e764a-5140-3fe0-aadd-5377adbd895b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.216.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:06:52:05:80:95:cd:1e:74:2e:65:d2:29:cb:76:5e:ee:f1:
d8:f3:9c:3d:ee:2e:5a:90:73:37:41:2f:2c:b1:00:2f:56:e8:
56:ea:23:26:3e:22:92:18:9e:ff:be:d5:c4:b1:65:22:ab:ff:
b2:7d:e6:d3:42:dd:8a:4b:e8:87:98:2e:e5:ed:09:fc:f1:fa:
cf:1d:cc:09:65:7c:e8:93:70:b1:c9:aa:b6:12:f0:1a:b7:df:
42:42:f8:be:c0:3a:04:02:42:05:77:c3:49:8d:de:1c:68:22:
f8:d7:27:9c:a0:81:3a:38:c4:a9:5a:39:a6:5b:48:fa:a6:b7:
6e:78:ac:7e:55:df:3c:e6:23:33:c0:f0:e7:df:b6:2d:bb:ec:
61:91:eb:07:9e:a1:9b:1f:b0:5f:e9:60:2f:f5:d4:ac:44:6e:
52:e8:81:81:19:60:43:1f:95:a4:f9:4f:b3:0e:c7:bc:e6:fb:
5e:26:22:c2:02:08:f4:ca:f7:ee:35:f1:71:c6:76:18:a8:c6:
79:89:8d:10:d2:8a:2c:b2:d1:01:7e:4f:aa:8e:e4:3e:07:98:
e6:19:15:c4:53:f5:03:2d:d3:2b:ba:eb:2c:72:2e:0a:2c:bd:
91:df:26:01:5c:57:df:ff:47:db:dc:b3:da:22:76:c4:61:86:
1b:7e:a4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:58:54 2026 by rpki-client