
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8b94e17b-9c3a-3d24-bae7-a69f7d3ac036.roa
File: 8b94e17b-9c3a-3d24-bae7-a69f7d3ac036.roa (raw, json)
Hash identifier: rZ8Y5mjobsWjfu5ySXU57xxEYA1T3w8foxtFV670IVE=
Subject key identifier: F4:69:2F:45:4C:D3:F8:47:1D:41:45:DB:1F:31:5D:A4:09:7B:36:F5
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E0610D8C01AE422571CC80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8b94e17b-9c3a-3d24-bae7-a69f7d3ac036.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 70.41.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:61:0d:8c:01:ae:42:25:71:cc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=e1d95967-5712-4087-93ac-18b3c378f9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:94:4e:2c:56:95:3f:b0:25:3c:90:f4:10:a8:
c3:4a:a3:85:58:e2:b3:96:35:4e:a3:08:30:fb:22:
a9:49:cf:4f:fc:27:ca:f6:0f:f2:3e:6b:94:3b:82:
1c:89:3b:00:c5:78:fe:56:97:a8:c9:af:4c:14:70:
6e:11:cb:d9:77:20:55:0e:78:71:2b:18:93:14:a4:
0c:81:bd:18:0f:7c:fb:12:d2:5a:05:5c:87:5f:62:
4f:7d:6e:8c:d0:27:32:d5:84:69:04:db:90:9c:d0:
1a:77:30:42:a7:a8:a4:c7:6c:b7:1a:99:33:a0:df:
4a:ed:2b:a8:5d:9d:98:c1:44:2c:d0:ec:6e:f8:53:
36:cc:eb:9c:6d:5b:7b:71:60:5a:be:91:27:af:ba:
c7:69:81:49:2f:10:35:ec:9c:f5:1a:fb:4e:25:f0:
70:ce:92:4e:f4:39:d6:3f:1c:ef:69:c0:53:e1:c1:
59:4c:04:55:52:6c:83:f6:78:ab:59:56:d0:1d:01:
99:0e:06:1c:b7:54:e8:30:49:43:c8:53:bb:97:84:
e4:60:00:03:ea:47:d7:4c:2a:ae:09:27:b6:da:39:
0f:b7:cc:1b:95:be:8b:d9:1e:32:57:f0:44:64:fe:
38:e5:b4:1d:f2:7b:aa:57:6c:1a:f2:fb:6c:37:47:
33:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:69:2F:45:4C:D3:F8:47:1D:41:45:DB:1F:31:5D:A4:09:7B:36:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8b94e17b-9c3a-3d24-bae7-a69f7d3ac036.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:8d:e0:c1:f3:1f:c4:92:16:ef:87:43:5b:d3:67:eb:28:95:
5f:8f:13:ac:37:80:6f:99:a4:a7:96:b4:06:0f:d7:67:88:5d:
63:d0:12:32:f4:17:09:fd:c2:f9:d7:6b:25:69:e0:29:20:c5:
8d:1f:87:b1:ad:6f:b8:1c:ee:3f:52:1d:77:83:98:5e:ed:79:
47:d8:d3:6d:92:51:01:d4:e9:4d:b8:98:01:a0:a9:4c:bb:50:
26:ed:00:cf:da:24:de:8d:52:f6:59:67:4f:60:d1:2d:cd:83:
5e:12:20:44:e5:b7:ed:47:4b:0f:76:49:6a:29:74:29:de:55:
21:64:28:37:5a:d3:92:aa:95:20:59:8a:28:5e:02:71:9f:ef:
97:9e:c4:23:bd:4f:94:bb:f7:f2:0b:bf:3a:0f:91:d4:10:d3:
f4:bd:0d:20:0f:56:24:a4:2f:87:87:35:18:9f:cd:6e:0c:5b:
55:c6:41:a4:95:16:88:ec:82:7a:fc:33:35:11:4d:7a:f7:42:
90:1b:74:c6:bd:6b:31:f5:c6:78:ff:98:e5:e6:79:90:3b:37:
b7:34:58:73:ea:b4:5d:a4:0b:f8:59:ca:9c:6c:50:8a:80:f8:
5f:d2:10:75:98:ed:1a:2b:8e:7a:e5:62:eb:14:78:13:a9:83:
45:7a:6b:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4GENjAGuQiVxzIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
ZTFkOTU5NjctNTcxMi00MDg3LTkzYWMtMThiM2MzNzhmOWVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJROLFaVP7AlPJD0EKjDSqOFWOKzljVOowgw
+yKpSc9P/CfK9g/yPmuUO4IciTsAxXj+Vpeoya9MFHBuEcvZdyBVDnhxKxiTFKQM
gb0YD3z7EtJaBVyHX2JPfW6M0Ccy1YRpBNuQnNAadzBCp6ikx2y3GpkzoN9K7Suo
XZ2YwUQs0Oxu+FM2zOucbVt7cWBavpEnr7rHaYFJLxA17Jz1GvtOJfBwzpJO9DnW
PxzvacBT4cFZTARVUmyD9nirWVbQHQGZDgYct1ToMElDyFO7l4TkYAAD6kfXTCqu
CSe22jkPt8wblb6L2R4yV/BEZP445bQd8nuqV2wa8vtsN0czwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPRpL0VM0/hHHUFF2x8xXaQJezb1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGI5NGUxN2ItOWMzYS0z
ZDI0LWJhZTctYTY5ZjdkM2FjMDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARinLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH2N4MHzH8SSFu+HQ1vTZ+solV+PE6w3gG+ZpKeWtAYP12eIXWPQEjL0
Fwn9wvnXayVp4CkgxY0fh7Gtb7gc7j9SHXeDmF7teUfY022SUQHU6U24mAGgqUy7
UCbtAM/aJN6NUvZZZ09g0S3Ng14SIETlt+1HSw92SWopdCneVSFkKDda05KqlSBZ
iiheAnGf75eexCO9T5S79/ILvzoPkdQQ0/S9DSAPViSkL4eHNRifzW4MW1XGQaSV
Fojsgnr8MzURTXr3QpAbdMa9azH1xnj/mOXmeZA7N7c0WHPqtF2kC/hZypxsUIqA
+F/SEHWY7RorjnrlYusUeBOpg0V6axU=
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:07:10 2026 by rpki-client