
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/08562ad4-7a69-3c7e-b246-b40da6dc2b57.roa
File: 08562ad4-7a69-3c7e-b246-b40da6dc2b57.roa (raw, json)
Hash identifier: 1CAPYFoaRLDYCBaB1L87YBmRBfn6PFc5HTgHg3NB7ms=
Subject key identifier: B4:16:C0:BA:5A:8A:D0:BE:B7:D7:5A:15:D2:D4:2C:74:3D:F8:00:F6
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E0272F041C2BF2C2524D00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/08562ad4-7a69-3c7e-b246-b40da6dc2b57.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 198.45.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:27:2f:04:1c:2b:f2:c2:52:4d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=831a1af7-366c-4528-92c4-d4042c5ade6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:03:7c:9b:ce:c3:f0:55:92:f7:87:55:df:f1:
12:eb:2b:1e:20:d3:33:ff:41:95:f0:d0:b4:33:8b:
1e:c3:1f:31:a7:4a:5d:ba:e0:c1:9e:78:e4:72:c7:
d5:12:e1:11:45:d1:83:88:67:67:44:16:d7:ab:35:
bf:7d:87:5e:5c:2b:55:67:72:03:54:7e:df:b3:a8:
4f:f4:07:bf:81:dd:03:b9:ea:93:cc:26:64:df:2d:
f6:85:97:09:36:16:ed:2f:ef:4d:49:f8:4f:50:d0:
bf:f0:91:f3:d3:ce:a3:19:b5:84:1a:c0:ef:5c:c9:
77:cb:fa:39:ba:e8:58:d5:fe:8d:f0:b6:37:a0:91:
d7:c4:8e:ea:d7:4b:a2:97:dd:2d:cd:0a:31:14:f5:
3a:88:84:ed:59:7f:94:c4:57:56:e9:28:f4:7e:59:
dc:ef:3e:d8:eb:67:5d:f2:83:33:8d:2e:08:e3:65:
32:0c:7f:19:b4:a7:28:ff:3b:c6:94:98:d6:7e:7f:
ea:d4:9d:54:9f:f9:cc:db:4d:e9:6b:da:b4:39:54:
21:d6:5b:38:3c:f8:f2:aa:3e:3f:02:8e:30:70:01:
94:2f:18:98:ef:e1:02:31:21:7a:2e:34:a2:22:59:
b3:e4:71:9f:cd:38:ad:5c:c8:13:59:0f:3a:80:eb:
55:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:16:C0:BA:5A:8A:D0:BE:B7:D7:5A:15:D2:D4:2C:74:3D:F8:00:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/08562ad4-7a69-3c7e-b246-b40da6dc2b57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
198.45.214.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:9f:f8:ae:38:7b:84:b5:5e:cf:0f:71:7b:b6:1e:34:d4:85:
df:a7:c8:24:7c:17:ab:13:17:99:9e:8f:cf:04:f3:3f:cc:7a:
e7:cd:49:dd:02:fc:45:6f:ae:71:11:82:67:49:fb:58:a0:67:
d2:30:c2:73:08:e9:34:f8:b0:e7:a7:0e:98:ae:a3:fa:29:c7:
6b:27:4a:ac:3e:92:66:5f:12:5d:73:d1:22:84:88:1f:ec:ee:
e4:30:d0:5e:a0:83:17:08:12:0b:86:81:39:34:14:1e:3a:78:
06:70:f5:e1:65:37:cd:b8:cc:c4:d2:9e:00:e0:3f:8a:35:31:
6f:f2:5f:9e:9d:d8:07:8b:bc:ea:14:73:5c:89:cd:ec:95:93:
30:1c:21:86:ed:67:91:f6:d8:f2:0f:d6:d8:23:a7:e5:5c:d0:
0b:f3:57:1e:94:c8:4a:0f:cd:02:13:64:4e:ae:b0:15:c4:55:
32:76:1c:73:de:12:ef:13:fb:f0:5f:f8:a9:b8:49:c5:15:47:
d3:2a:d5:e1:20:60:fd:b8:4c:d3:08:0e:fc:b8:5a:93:19:34:
14:6c:ec:d1:bb:46:87:9a:7e:a9:55:08:47:8f:e7:74:5f:49:
07:3b:d7:5b:32:9f:c7:31:4a:eb:d2:78:18:4b:a8:59:d4:46:
be:8c:0d:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4CcvBBwr8sJSTQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
ODMxYTFhZjctMzY2Yy00NTI4LTkyYzQtZDQwNDJjNWFkZTZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgN8m87D8FWS94dV3/ES6yseINMz/0GV8NC0
M4sewx8xp0pduuDBnnjkcsfVEuERRdGDiGdnRBbXqzW/fYdeXCtVZ3IDVH7fs6hP
9Ae/gd0DueqTzCZk3y32hZcJNhbtL+9NSfhPUNC/8JHz086jGbWEGsDvXMl3y/o5
uuhY1f6N8LY3oJHXxI7q10uil90tzQoxFPU6iITtWX+UxFdW6Sj0flnc7z7Y62dd
8oMzjS4I42UyDH8ZtKco/zvGlJjWfn/q1J1Un/nM203pa9q0OVQh1ls4PPjyqj4/
Ao4wcAGULxiY7+ECMSF6LjSiIlmz5HGfzTitXMgTWQ86gOtV9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLQWwLpaitC+t9daFdLULHQ9+AD2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDg1NjJhZDQtN2E2OS0z
YzdlLWIyNDYtYjQwZGE2ZGMyYjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3WMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALef+K44e4S1Xs8PcXu2HjTUhd+nyCR8F6sTF5mej88E8z/MeufNSd0C
/EVvrnERgmdJ+1igZ9IwwnMI6TT4sOenDpiuo/opx2snSqw+kmZfEl1z0SKEiB/s
7uQw0F6ggxcIEguGgTk0FB46eAZw9eFlN824zMTSngDgP4o1MW/yX56d2AeLvOoU
c1yJzeyVkzAcIYbtZ5H22PIP1tgjp+Vc0AvzVx6UyEoPzQITZE6usBXEVTJ2HHPe
Eu8T+/Bf+Km4ScUVR9Mq1eEgYP24TNMIDvy4WpMZNBRs7NG7RoeafqlVCEeP53Rf
SQc711syn8cxSuvSeBhLqFnURr6MDYU=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:57:26 2026 by rpki-client