
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1e1e5ef9-8b00-3a33-80fb-d4c3b56ea956.roa
File: 1e1e5ef9-8b00-3a33-80fb-d4c3b56ea956.roa (raw, json)
Hash identifier: 0kldHN9Pa485389Um4ihWVBP2SlpkpZHUaiDQhN9TvA=
Subject key identifier: 9D:58:EA:0B:50:7E:99:1A:58:0D:CB:7F:97:3C:9C:6D:2D:10:1A:20
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E05E07719667DF4806B700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1e1e5ef9-8b00-3a33-80fb-d4c3b56ea956.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 70.41.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:5e:07:71:96:67:df:48:06:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=335b8de9-cc29-4ee7-90c1-50a2875c9ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3b:be:64:94:c1:ac:b0:80:e0:3b:f7:74:0d:
39:f7:6e:65:89:cd:43:b3:59:99:f9:6b:51:20:01:
56:d7:dd:48:61:b4:7a:aa:c6:cb:e9:62:03:b7:5b:
5f:f7:f4:86:8d:ab:2e:25:ed:e5:6c:f8:21:ed:d0:
b6:be:23:30:e0:9e:98:3d:8b:cf:02:c4:7f:72:f0:
64:d0:c7:e1:ee:6b:7c:61:bb:b1:b8:7b:3e:a8:06:
65:1a:c6:fe:39:72:61:3b:34:1f:58:47:ee:f7:98:
6a:8d:50:70:6b:d6:fe:fa:a9:2d:94:4d:2d:85:fe:
5e:2a:81:61:12:39:ce:8d:aa:73:bd:49:f6:2d:84:
cb:ea:ff:d0:2c:3c:97:49:60:f2:52:cb:45:b1:77:
29:fb:df:b0:cd:85:7f:73:3e:1f:13:61:b3:fe:e9:
72:87:ab:52:c0:83:0b:68:42:5e:54:d8:5c:7a:54:
08:83:28:0a:51:49:93:c8:5f:ea:95:a5:5c:5b:d9:
8c:7f:99:5a:98:b6:cc:c8:2b:bd:07:ab:5f:8e:22:
df:47:c4:7e:61:46:41:a0:46:d2:e0:57:04:02:03:
c6:f6:ef:c0:32:7b:41:a0:05:7e:16:9a:26:30:71:
0d:42:36:19:b8:cc:84:39:51:8e:e1:15:db:4f:99:
ff:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:58:EA:0B:50:7E:99:1A:58:0D:CB:7F:97:3C:9C:6D:2D:10:1A:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1e1e5ef9-8b00-3a33-80fb-d4c3b56ea956.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.98.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:1e:6a:b5:9d:fa:ae:51:3b:db:06:d0:4b:e7:bb:98:9a:67:
85:41:20:34:3d:cb:08:9e:ed:19:1d:99:5d:06:54:99:a9:39:
c4:68:fa:96:41:b0:ef:30:d5:95:55:4b:99:26:bb:62:53:87:
c3:2e:29:3f:a3:c1:c4:8d:b7:4c:e6:27:7f:26:17:60:4a:86:
d6:55:a8:90:af:ec:a0:c0:59:43:2a:01:67:95:c1:5e:14:47:
ad:ae:e3:17:97:39:1c:af:64:18:8f:b2:16:a3:67:bc:58:95:
0c:56:26:e4:c9:a9:cd:16:4d:1d:fb:20:e7:68:db:99:9d:ba:
84:df:7d:5e:0d:42:0c:5f:b7:c4:bd:57:d3:ac:42:3c:00:41:
e4:cf:60:ab:18:fa:cb:08:a6:b4:db:fb:e4:fc:02:50:f2:24:
0f:2c:f3:85:42:0a:81:f4:5e:f9:8f:2e:e6:89:6c:83:c8:e6:
29:1d:a0:48:29:bb:23:97:4b:f2:d2:fb:d9:69:5d:32:a8:56:
c0:17:9c:9d:49:bf:68:38:3b:47:f9:2b:d4:0a:03:3c:3c:f1:
ad:88:7a:0c:ec:6a:25:d0:39:92:be:f2:47:e3:2c:e9:91:33:
35:a1:3c:e9:fe:63:b3:83:62:8e:10:fc:b5:09:68:73:80:c9:
70:5c:e8:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4F4HcZZn30gGtwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
MzM1YjhkZTktY2MyOS00ZWU3LTkwYzEtNTBhMjg3NWM5ZWM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnju+ZJTBrLCA4Dv3dA05925lic1Ds1mZ+WtR
IAFW191IYbR6qsbL6WIDt1tf9/SGjasuJe3lbPgh7dC2viMw4J6YPYvPAsR/cvBk
0Mfh7mt8YbuxuHs+qAZlGsb+OXJhOzQfWEfu95hqjVBwa9b++qktlE0thf5eKoFh
EjnOjapzvUn2LYTL6v/QLDyXSWDyUstFsXcp+9+wzYV/cz4fE2Gz/ulyh6tSwIML
aEJeVNhcelQIgygKUUmTyF/qlaVcW9mMf5lamLbMyCu9B6tfjiLfR8R+YUZBoEbS
4FcEAgPG9u/AMntBoAV+FpomMHENQjYZuMyEOVGO4RXbT5n/IQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ1Y6gtQfpkaWA3Lf5c8nG0tEBogMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWUxZTVlZjktOGIwMC0z
YTMzLTgwZmItZDRjM2I1NmVhOTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiliMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHQearWd+q5RO9sG0Evnu5iaZ4VBIDQ9ywie7RkdmV0GVJmpOcRo+pZB
sO8w1ZVVS5kmu2JTh8MuKT+jwcSNt0zmJ38mF2BKhtZVqJCv7KDAWUMqAWeVwV4U
R62u4xeXORyvZBiPshajZ7xYlQxWJuTJqc0WTR37IOdo25mduoTffV4NQgxft8S9
V9OsQjwAQeTPYKsY+ssIprTb++T8AlDyJA8s84VCCoH0XvmPLuaJbIPI5ikdoEgp
uyOXS/LS+9lpXTKoVsAXnJ1Jv2g4O0f5K9QKAzw88a2IegzsaiXQOZK+8kfjLOmR
MzWhPOn+Y7ODYo4Q/LUJaHOAyXBc6J0=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:19:34 2026 by rpki-client