
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d14ee22f-7350-3a58-9044-818d377d4ca8.roa
File: d14ee22f-7350-3a58-9044-818d377d4ca8.roa (raw, json)
Hash identifier: 49408Yy1wSyCb7sks2KaSsTWGglXnWw+4d22nW3Rqhs=
Subject key identifier: 1C:D7:45:AE:F2:43:C8:70:06:B8:23:43:7C:A0:25:86:26:07:EE:FC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE589A0A9638B7F764E2A3C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d14ee22f-7350-3a58-9044-818d377d4ca8.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 98.223.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:58:9a:0a:96:38:b7:f7:64:e2:a3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=208a445e-3d39-4810-a8c1-e79b617bf3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:78:1c:df:3e:46:2f:11:34:31:71:9b:7a:b5:
2a:04:92:ca:5b:7d:17:a0:de:bf:50:2c:90:55:fd:
0d:68:09:17:47:d9:45:d6:23:61:21:1e:0a:10:1e:
8d:31:4e:85:25:3e:44:58:a9:85:c5:81:1e:7f:9d:
8f:91:af:a3:54:24:a4:5f:84:07:f5:5a:04:16:22:
2f:11:99:72:f6:49:43:42:f9:33:17:02:29:78:7a:
c7:8a:8e:64:d7:1c:7c:9e:65:dc:ce:e8:88:11:5b:
f5:5a:a7:93:f6:0c:28:a0:2a:f7:3f:c7:3e:f0:24:
fe:f1:f0:39:da:17:38:40:09:e9:7b:59:93:2f:30:
a7:62:c4:3e:c6:de:4d:cf:49:0d:7b:5e:b2:2d:8a:
81:3d:cc:29:4b:81:fb:10:e4:ef:dd:b6:ca:85:4f:
43:5f:36:8d:14:96:44:b2:5b:a2:c3:6f:11:49:52:
0e:79:95:a8:5f:e9:f0:0f:63:c5:3f:82:8c:f5:3e:
9c:6c:d4:89:78:59:11:cb:ba:da:47:c5:fd:ec:0b:
da:e1:7a:26:7f:b2:4b:7c:f0:6d:3d:b1:be:77:15:
2f:89:a7:6b:18:61:0c:e5:23:3c:eb:89:ff:21:ee:
90:57:fa:3e:56:7c:77:88:37:1e:ba:3c:c9:d2:82:
a0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D7:45:AE:F2:43:C8:70:06:B8:23:43:7C:A0:25:86:26:07:EE:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d14ee22f-7350-3a58-9044-818d377d4ca8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.223.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:fc:2e:e7:4b:18:e2:ce:e4:7e:47:f2:4a:38:93:d1:90:6a:
96:f7:b0:16:76:e4:ab:70:76:03:ef:db:80:36:06:a4:38:d7:
d1:cc:67:95:fe:f8:59:75:be:e9:5d:59:7e:62:25:82:24:c1:
2b:b1:d3:d1:71:06:d0:06:f2:90:9d:bf:a0:8c:d0:f2:17:07:
e5:6a:f1:4f:24:c3:8b:ce:fe:e0:ee:7c:71:6f:e3:80:71:b2:
0b:14:7d:63:bc:12:8a:a1:9f:6e:2a:10:f7:30:ff:5d:e0:31:
3c:f5:e6:f3:20:94:96:e3:5c:a2:96:61:4f:9e:49:f2:8c:73:
c4:d6:8a:d9:99:a0:50:ce:f7:c1:47:67:22:79:b9:07:6b:85:
bc:6c:a3:14:ac:3c:64:fa:a7:11:0c:0e:5c:fb:9c:82:42:a2:
64:c0:36:37:0e:8d:cd:c2:ed:28:ad:c6:38:87:b8:a5:14:fc:
ab:b2:80:b9:21:be:7e:c1:91:56:d9:0d:37:40:e1:1f:ef:0a:
74:54:7f:2a:dd:04:92:18:1d:01:0f:56:a4:ea:e3:e5:99:e9:
e5:49:29:f1:5d:cc:8a:cd:60:35:53:5d:de:6d:6a:b0:3e:a9:
1a:e3:4e:9f:93:6f:6e:24:16:69:5c:64:0f:7d:4b:4c:35:7a:
4f:7a:68:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:04:40 2026 by rpki-client