
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4485279-8d74-32b5-9305-41f4d7598205.roa
File: c4485279-8d74-32b5-9305-41f4d7598205.roa (raw, json)
Hash identifier: MVgqjQjsh52LIzf4k82bnd/KCaaDOawsSgQZlkkfyc0=
Subject key identifier: 2C:88:34:29:CC:B2:22:8D:D4:8B:35:A0:54:07:A4:FD:D4:F2:80:09
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5CD8474B651E08E7EDA010
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4485279-8d74-32b5-9305-41f4d7598205.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 98.212.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5c:d8:47:4b:65:1e:08:e7:ed:a0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=1a6bff15-26cc-4dcf-be48-6fa8e539e0d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ef:92:35:81:64:e3:53:df:7b:ee:88:33:0f:
f1:39:cf:bd:dd:27:e9:aa:48:80:69:dd:2d:89:c0:
f7:e0:14:dd:d2:e2:f9:ed:38:d9:f3:76:c2:93:34:
c9:57:6a:95:55:4f:d5:59:6f:c9:fd:4e:9e:fa:7e:
36:e5:9a:88:cb:47:30:1f:de:85:84:6f:85:40:e3:
48:c2:cd:da:08:e4:ee:6e:67:cb:80:e6:51:f1:2f:
5a:a8:d2:6f:ac:b1:72:80:66:58:ea:94:3c:78:09:
b6:1e:47:f2:6e:af:82:8e:fb:cc:ea:5e:8f:d0:aa:
ef:96:de:44:d2:0a:09:f4:63:0f:a1:5b:6c:55:61:
49:6b:db:ca:9a:b7:a8:3f:24:62:12:c3:e9:6e:d1:
b1:75:27:37:16:97:00:11:bf:84:68:01:37:08:c7:
3f:b6:2d:3e:fd:43:05:d9:93:35:ed:4b:73:39:1f:
fa:33:ed:b6:29:05:7b:bf:dc:cf:18:f5:19:fb:0e:
d6:7b:7c:b2:29:f1:a9:37:9b:ab:4a:d6:c1:2c:1c:
4d:78:0d:33:19:91:e6:e2:86:e9:62:cc:45:c5:0b:
87:1a:fc:82:6b:f2:22:9b:5d:de:5d:96:89:9f:5c:
9d:58:d2:8e:6c:25:3c:10:3e:fc:b6:ac:ae:6c:3c:
db:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:88:34:29:CC:B2:22:8D:D4:8B:35:A0:54:07:A4:FD:D4:F2:80:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4485279-8d74-32b5-9305-41f4d7598205.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.212.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:a4:45:9b:57:09:0d:02:4b:6b:81:16:74:b4:82:ba:c1:63:
a8:1c:42:b0:13:d4:90:62:bc:7e:92:f9:7b:ed:cf:6a:85:45:
c5:f5:d6:ab:b9:08:79:a2:1a:65:da:b9:eb:cf:fb:cd:80:6d:
0e:ba:96:6b:35:81:81:79:a3:da:b3:85:b3:c3:11:e8:2e:40:
d2:b5:e1:32:b7:c6:0d:91:13:f8:d1:3b:77:8b:52:fb:14:92:
9d:01:16:5c:30:4e:4e:6a:50:fc:ad:c1:f8:c9:04:c6:f5:9d:
a8:07:de:7d:d9:1b:43:e7:a3:a1:86:55:50:90:6e:cc:8f:93:
a9:07:5e:cf:25:df:5e:63:d2:2c:f9:44:3b:24:c3:77:98:be:
96:fd:9e:9b:14:de:bc:ae:ac:c7:5a:4d:13:aa:e4:d5:50:99:
1d:60:15:82:f1:2e:28:2d:5b:19:c2:56:c5:c9:25:0e:70:fe:
03:ba:da:0e:78:73:84:1c:4a:df:09:26:86:01:c9:e3:2e:5a:
7f:eb:6b:c7:be:93:79:27:4c:96:ad:1a:c3:b9:72:a6:02:90:
d8:55:0d:b8:69:c6:ce:48:38:2f:a8:a7:b9:f7:5c:b7:7d:36:
0e:97:20:1d:a9:c4:3d:5b:35:b4:79:a3:2d:b9:16:50:27:d3:
37:97:4b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:05:22 2026 by rpki-client