
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bd2b18aa-d46b-3e03-96d3-5d3b8be4dca1.roa
File: bd2b18aa-d46b-3e03-96d3-5d3b8be4dca1.roa (raw, json)
Hash identifier: qVZb1rt0QSsBUaSngmoYppHz0dXMYYt31pA1uek9aDI=
Subject key identifier: 2E:69:8A:59:89:D3:FA:C4:0F:16:65:37:0B:24:76:1B:D9:27:A4:95
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24DFED5FA30F0713446FA270
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bd2b18aa-d46b-3e03-96d3-5d3b8be4dca1.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 99.197.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:ed:5f:a3:0f:07:13:44:6f:a2:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=ec176ae6-24e0-40e1-ab2b-cc2fe5ad1bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ed:93:8b:14:09:9e:37:93:d9:5b:0d:cc:ea:
e4:77:cb:95:cf:a5:31:1d:5e:83:76:1f:9d:57:e3:
a6:1b:88:c2:de:6d:49:2f:9e:cf:d7:9e:c9:27:0c:
67:0f:cd:59:3d:14:7c:b1:53:bc:4e:e0:15:20:09:
ad:97:b0:ac:3c:b0:d7:4d:9f:25:6a:2f:7a:57:3e:
3e:d2:18:1e:5a:ca:c9:a2:4a:b0:95:01:cd:1e:78:
ce:82:ff:04:e6:b3:b7:56:5f:11:1d:0c:aa:18:71:
aa:33:75:fa:ff:16:c0:93:f0:e4:8c:98:42:dc:46:
3f:23:af:55:0a:a1:50:4a:7a:99:47:70:63:09:c7:
b4:9c:dc:37:9f:80:86:57:c1:0b:d9:c1:57:af:8f:
63:ff:a1:e1:cc:09:37:dd:fc:2f:ee:e3:26:78:e6:
4f:2c:e3:92:86:15:b0:d6:92:fe:2b:e5:4a:d9:70:
36:9c:df:63:73:a5:a7:89:99:b3:f8:98:d9:ca:9c:
ab:9b:73:60:94:6a:f6:15:74:ec:31:88:10:01:ee:
6e:62:7d:b5:07:6c:85:f4:b5:af:91:ec:a5:e3:0c:
a5:8b:91:6b:81:f5:90:60:13:dd:f4:ad:9a:c1:48:
72:e9:74:ec:e0:c5:f7:3a:33:da:9a:1f:2c:fa:18:
cd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:69:8A:59:89:D3:FA:C4:0F:16:65:37:0B:24:76:1B:D9:27:A4:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bd2b18aa-d46b-3e03-96d3-5d3b8be4dca1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.197.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c7:23:17:c7:3f:81:68:10:84:5e:2d:d6:26:ac:14:4e:ba:e6:
50:81:45:4a:cb:2d:cd:1d:7c:7c:3b:c2:57:61:1a:dd:49:b3:
89:5b:39:ea:14:10:93:90:22:aa:c1:9f:18:ca:66:18:b3:3f:
be:2a:8f:ef:6b:20:86:39:a9:45:4d:3a:98:d2:e9:58:5f:59:
fc:93:a5:e9:77:29:8b:fe:a0:24:ef:99:db:a9:ab:74:6e:ff:
90:74:81:7e:1a:12:c5:61:8e:51:3c:a1:40:78:f8:03:16:c4:
1a:21:f7:b7:6e:8a:01:3a:2c:0b:02:c3:cf:2b:2e:9e:f7:0d:
dd:5c:8f:b0:f5:6d:79:2c:18:b8:3e:33:0a:6a:1c:92:24:e1:
d6:42:5d:19:26:f0:72:fe:0c:9a:47:9a:7e:2e:6d:0b:8f:62:
70:4b:71:2f:98:77:4f:9d:0c:04:c0:c4:dc:cb:83:b7:81:ea:
dd:0e:8d:88:d0:0f:52:d2:b8:ae:be:b2:a2:a2:90:c5:17:dc:
5b:85:6b:95:ad:6c:6a:11:09:13:08:38:aa:c3:14:58:49:20:
5f:e8:48:65:ae:39:50:04:3a:51:25:cf:cb:8d:2e:2c:16:a7:
dd:ca:6a:b4:e4:45:e4:e2:de:e0:f5:c0:37:62:4e:85:43:42:
e3:40:38:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3+1fow8HE0RvonAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
ZWMxNzZhZTYtMjRlMC00MGUxLWFiMmItY2MyZmU1YWQxYmFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhu2TixQJnjeT2VsNzOrkd8uVz6UxHV6Ddh+d
V+OmG4jC3m1JL57P157JJwxnD81ZPRR8sVO8TuAVIAmtl7CsPLDXTZ8lai96Vz4+
0hgeWsrJokqwlQHNHnjOgv8E5rO3Vl8RHQyqGHGqM3X6/xbAk/DkjJhC3EY/I69V
CqFQSnqZR3BjCce0nNw3n4CGV8EL2cFXr49j/6HhzAk33fwv7uMmeOZPLOOShhWw
1pL+K+VK2XA2nN9jc6WniZmz+JjZypyrm3NglGr2FXTsMYgQAe5uYn21B2yF9LWv
keyl4wyli5FrgfWQYBPd9K2awUhy6XTs4MX3OjPamh8s+hjNUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC5pilmJ0/rEDxZlNwskdhvZJ6SVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmQyYjE4YWEtZDQ2Yi0z
ZTAzLTk2ZDMtNWQzYjhiZTRkY2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8XfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMcjF8c/gWgQhF4t1iasFE665lCBRUrLLc0dfHw7wldhGt1Js4lbOeoU
EJOQIqrBnxjKZhizP74qj+9rIIY5qUVNOpjS6VhfWfyTpel3KYv+oCTvmdupq3Ru
/5B0gX4aEsVhjlE8oUB4+AMWxBoh97duigE6LAsCw88rLp73Dd1cj7D1bXksGLg+
MwpqHJIk4dZCXRkm8HL+DJpHmn4ubQuPYnBLcS+Yd0+dDATAxNzLg7eB6t0OjYjQ
D1LSuK6+sqKikMUX3FuFa5WtbGoRCRMIOKrDFFhJIF/oSGWuOVAEOlElz8uNLiwW
p93KarTkReTi3uD1wDdiToVDQuNAOJc=
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:50:48 2026 by rpki-client