
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/485bbc0a-1e16-3b3c-a732-de7f6889e1fc.roa
File: 485bbc0a-1e16-3b3c-a732-de7f6889e1fc.roa (raw, json)
Hash identifier: EtOSUBfc/dXhF66ZTAESMeF5kpofwWFtvAIBak+raB0=
Subject key identifier: 83:1A:3D:9F:01:AD:5E:E3:3B:21:21:D6:C6:D0:05:AD:8B:EB:E1:CD
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E0273F4BFF052152B83C00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/485bbc0a-1e16-3b3c-a732-de7f6889e1fc.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 198.45.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:27:3f:4b:ff:05:21:52:b8:3c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=04e2fe50-d962-44c9-bdde-2e362b09f75b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c8:5a:1b:ed:29:34:f7:7c:23:6c:4d:f7:b4:
79:6d:f0:a2:3c:27:93:47:73:d6:4a:1d:3d:cd:f8:
c0:72:16:9c:10:34:ad:eb:0f:3d:3c:a1:0f:7e:0a:
5a:7c:8b:c2:c5:ad:eb:21:04:a7:b7:c3:10:58:a4:
06:be:35:bf:3a:78:f6:06:ee:31:06:f3:60:fd:d2:
c7:01:7f:e0:60:8f:15:01:4d:cc:6d:ad:a1:c9:7a:
68:60:00:0f:94:72:9e:09:20:8e:ff:21:6a:05:ae:
fb:7c:7d:e8:b6:69:42:d5:69:20:c2:8c:0a:05:3e:
87:83:e7:f1:05:81:11:4b:44:4e:95:56:97:7e:0f:
04:bc:5a:44:96:95:64:52:05:7e:48:ad:ee:8f:71:
fc:a8:43:f5:4f:83:0d:9e:a1:15:79:60:5c:97:31:
cc:cb:dc:e4:2c:b8:be:aa:e6:fb:58:db:c5:8d:4d:
5b:70:37:c1:ed:58:8b:77:4a:5b:68:00:f0:52:52:
ee:c6:66:55:02:7f:53:7b:d9:84:25:a6:8e:21:cd:
6f:f2:eb:61:d3:22:58:4e:47:4e:19:f0:ba:f9:b9:
cf:16:7c:8d:93:74:d6:c8:b7:7b:5d:91:3f:08:9f:
1c:32:8e:25:6e:d5:8a:dd:79:1d:50:77:9f:2b:37:
ab:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:1A:3D:9F:01:AD:5E:E3:3B:21:21:D6:C6:D0:05:AD:8B:EB:E1:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/485bbc0a-1e16-3b3c-a732-de7f6889e1fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
198.45.215.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:11:99:1c:c3:9c:09:6a:d7:f0:4b:6b:bd:bc:cc:07:fb:32:
f8:fb:e3:b7:8f:20:4a:04:81:eb:8f:f4:c6:90:50:2d:64:8c:
15:96:68:1c:c1:b2:70:d4:82:71:97:dd:be:75:d5:fa:8e:05:
8b:1b:6a:2b:6e:15:52:5f:92:48:d3:e8:71:b2:1e:bb:4d:38:
75:f4:d6:24:d3:12:b3:bd:05:30:6b:d4:c8:dd:3a:ef:cd:ca:
96:e2:00:c8:85:3d:6b:a8:40:ef:2b:56:9f:44:20:3f:b4:57:
b1:e8:f0:85:6c:a9:84:e2:24:c0:74:e2:15:5b:43:29:f7:21:
06:97:80:28:7f:f8:77:27:cc:af:65:82:d9:0c:b5:12:56:87:
ad:dd:0a:21:e6:ce:16:7c:4f:18:88:e7:f8:1e:fc:50:f8:dc:
10:68:6d:01:30:d3:66:ce:bb:7f:70:8a:73:f6:85:b8:27:68:
5b:ff:1d:23:74:62:87:7a:3c:ea:28:76:0f:3e:43:2f:1b:1b:
16:08:0e:aa:98:0c:fc:59:fa:eb:ba:e6:17:5a:e9:f0:59:dd:
3c:b0:cf:6c:f2:62:80:7b:88:0a:01:e2:77:7b:f6:38:55:71:
24:b1:9b:65:40:50:4a:3f:eb:89:a4:f7:df:ed:6f:33:e2:22:
0a:3e:f6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:00:42 2026 by rpki-client