
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28b8270f-f104-3347-a220-f78b494b1247.roa
File: 28b8270f-f104-3347-a220-f78b494b1247.roa (raw, json)
Hash identifier: gSEckO23Kq4SHm0zghHsf04B9hZF4egis62hrs7saaE=
Subject key identifier: 33:85:E9:5E:65:E3:98:9D:AC:F9:E9:0D:01:F4:A2:43:48:21:BA:7F
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584D746FE1CE7C491D184AD8DA40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28b8270f-f104-3347-a220-f78b494b1247.roa
Signing time: Fri 10 Apr 2026 01:00:24 +0000
ROA not before: Fri 10 Apr 2026 01:00:24 +0000
ROA not after: Thu 09 Jul 2026 01:00:24 +0000
asID: 701
IP address blocks: 98.118.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:74:6f:e1:ce:7c:49:1d:18:4a:d8:da:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Apr 10 01:00:24 2026 GMT
Not After : Jul 9 01:00:24 2026 GMT
Subject: CN=38fcb5e6-dbdd-424e-acd9-52b7f099f2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:aa:e0:0a:61:16:59:58:a6:22:03:c1:4f:f6:
2a:ad:b7:61:0b:4f:12:da:c0:81:9e:3c:00:1e:48:
d1:24:29:fe:22:3c:0a:ca:9f:cd:3d:14:1c:05:59:
17:63:b1:77:60:fc:6d:1c:b8:f8:d3:88:c9:dc:37:
6b:87:ba:97:81:b3:58:fe:87:fa:e9:22:e5:41:cd:
37:1c:4a:3f:d8:7b:57:97:73:86:d8:23:b6:93:6b:
5a:8e:29:c7:59:0b:c5:8c:26:6e:d4:e6:39:ad:c2:
08:9f:93:07:1d:c8:4d:0f:76:78:34:08:b5:05:c5:
80:e6:51:c0:22:fe:44:93:55:c3:fc:6e:46:05:53:
38:16:c8:10:ab:1d:92:a2:9e:ac:7c:b1:c4:0a:d6:
aa:87:24:64:3b:e4:4c:7b:6d:49:f1:04:4a:65:18:
79:db:3a:64:90:92:ff:f8:83:63:fd:13:05:b9:af:
5f:e5:2b:ca:93:4e:c5:41:a2:82:01:50:4b:16:92:
e3:bb:5f:10:70:45:e4:09:c0:d3:cf:ff:86:bd:29:
9e:bb:19:cb:d2:87:ce:c0:e5:e3:c4:0f:71:78:5d:
07:b6:71:73:40:55:f9:a4:97:94:76:e6:f0:9c:35:
cb:fa:eb:9a:31:54:cd:44:74:43:e3:ce:ab:ee:26:
51:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:85:E9:5E:65:E3:98:9D:AC:F9:E9:0D:01:F4:A2:43:48:21:BA:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28b8270f-f104-3347-a220-f78b494b1247.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
98.118.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:3e:d9:db:a5:74:0a:8b:1e:c5:98:30:18:56:b6:fa:c7:4e:
ca:98:24:f8:b3:e8:79:cc:0a:71:15:50:f7:86:ce:31:4b:22:
f0:aa:20:62:51:76:b1:6b:0c:6a:55:9d:4c:42:f0:82:45:93:
f7:3d:46:b0:5a:67:2c:ad:50:76:70:83:75:f6:26:18:9d:62:
f1:19:53:dd:24:a3:51:0a:da:d4:1f:c4:54:69:f5:bc:95:f9:
a7:1e:0b:2f:89:10:a7:7a:fd:b2:3d:3b:15:cb:10:52:9b:4d:
c3:39:22:bf:41:24:8f:80:71:d5:43:7c:40:de:c2:9d:89:4d:
95:94:e2:84:ae:e9:30:e4:de:cd:f3:5d:07:11:a8:fd:8b:07:
85:43:38:76:ac:ce:7f:f1:c8:e1:76:10:84:69:ec:e2:eb:4e:
18:0a:c9:ea:bf:fd:c1:67:3e:a9:d3:b7:d9:9c:b2:09:48:4f:
e2:15:74:21:03:e3:02:ce:f4:bb:c6:52:a3:40:cc:fb:64:29:
c1:ce:97:46:fb:b4:27:e0:b6:bd:e0:b8:07:04:ba:8f:fe:24:
a3:33:38:18:33:73:08:21:b4:cc:8d:38:6e:1f:24:24:8f:75:
bc:20:6b:85:30:76:c8:ef:1b:9d:bf:e6:73:6a:d2:7e:12:7c:
90:74:49:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:13:45 2026 by rpki-client