
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eaf85a3d-cb67-33b9-8ca7-dfde311977d3.roa
File: eaf85a3d-cb67-33b9-8ca7-dfde311977d3.roa (raw, json)
Hash identifier: GxgUK+nN3OPbhCsJWYafaMhFMj5Ap/nasPAhWACmWC0=
Subject key identifier: 56:E1:A8:82:75:19:E0:86:02:51:2D:8B:95:16:63:12:CA:CF:B1:9F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CFDE7E56C7042B2F3D312BB80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eaf85a3d-cb67-33b9-8ca7-dfde311977d3.roa
Signing time: Thu 26 Feb 2026 14:00:40 +0000
ROA not before: Thu 26 Feb 2026 14:00:40 +0000
ROA not after: Wed 27 May 2026 13:00:40 +0000
asID: 22909
IP address blocks: 98.211.56.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:fd:e7:e5:6c:70:42:b2:f3:d3:12:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 26 14:00:40 2026 GMT
Not After : May 27 13:00:40 2026 GMT
Subject: CN=74327046-a362-45ad-a4e7-3a0e95e69b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8d:a4:4a:e1:57:02:c9:bf:b3:9d:07:7f:7d:
4b:0d:9b:03:55:39:8b:33:a8:f1:f5:26:8a:29:e3:
5d:c3:a7:0e:1b:87:48:43:ab:b9:96:a2:11:9d:bf:
e7:7c:8d:36:de:84:cc:45:53:ae:01:39:7f:8f:4c:
26:d2:d2:da:f1:a5:de:92:34:c9:68:1e:85:52:f1:
2d:10:de:27:45:69:38:80:97:e2:30:15:19:b7:44:
d7:26:89:47:ab:57:76:27:5b:e5:30:10:c3:ad:37:
43:80:ad:a1:55:ed:72:e1:9d:2b:22:3c:25:69:c9:
66:24:42:4e:c9:6a:c5:eb:3a:14:76:8b:15:16:13:
6c:1e:29:37:d3:54:56:c4:d3:e1:69:f9:2b:3b:a1:
01:0f:97:81:21:a8:03:87:86:0d:3b:ed:b0:9e:0c:
87:c1:51:8f:55:af:2e:32:ca:aa:95:ea:73:12:22:
3d:6d:52:20:42:96:cb:f3:09:c5:58:7e:b7:bf:2c:
d4:76:7e:94:49:19:1b:92:51:c4:d1:75:b3:62:97:
e8:d1:f1:64:7a:c2:65:fe:8e:19:a5:44:25:cd:f1:
a5:bb:fa:86:cd:3d:00:41:de:54:36:83:92:f8:a8:
88:8f:eb:e7:09:33:e2:be:c6:3a:18:28:53:33:68:
0d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E1:A8:82:75:19:E0:86:02:51:2D:8B:95:16:63:12:CA:CF:B1:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eaf85a3d-cb67-33b9-8ca7-dfde311977d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.211.56.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:d4:9c:ce:a9:8e:05:70:aa:21:10:e0:0d:71:2f:f4:24:38:
d4:55:e7:35:d3:0f:dd:86:36:3e:d1:48:4b:3f:9e:56:03:5b:
be:e1:22:7e:40:4d:76:d7:19:7e:31:9b:78:f2:e3:da:ae:04:
d9:28:c7:7b:db:48:8c:dd:99:d2:ef:dd:36:fd:d1:70:f1:4c:
6c:3e:e6:1c:a3:88:8f:61:30:92:91:25:e3:43:a5:cd:fb:0f:
83:04:44:a1:6e:09:78:ba:b6:41:dc:b6:bc:37:01:24:94:a7:
1c:b3:9a:97:cc:4d:93:3a:6c:49:f5:26:9d:f8:77:2f:a1:c4:
49:c0:c3:03:01:07:f7:e3:cb:75:50:ac:b2:ca:f9:67:31:77:
77:ed:5e:dc:cb:60:ae:e7:07:0a:43:be:74:54:c3:47:5c:ea:
1d:35:92:d7:60:89:87:17:b4:63:e5:fa:31:cd:72:3d:e8:df:
5b:4f:16:0c:80:44:bc:1c:d9:fc:e4:41:01:e9:b7:73:70:01:
3d:a5:77:b8:97:dc:3f:6a:db:90:f8:ba:87:1b:50:3e:1b:8e:
d8:11:18:20:8c:22:dd:ab:c0:c3:57:8e:b5:59:64:8d:81:5d:
75:e8:5e:31:4b:25:59:0a:78:e1:3d:64:ad:13:e6:b4:02:64:
c3:81:15:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:31:46 2026 by rpki-client