
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f6a1724e-5874-3700-a2a1-b158596602b2.roa
File: f6a1724e-5874-3700-a2a1-b158596602b2.roa (raw, json)
Hash identifier: HMOjqWIa3+0LiiI7o8xybOHhUXJg86BGpEyiFx/SbGE=
Subject key identifier: 53:C3:5D:5F:94:9C:EB:CB:F5:16:A4:94:A0:A3:89:DB:CB:26:04:5B
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E0DD9FB65A2CCBC1306BB0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f6a1724e-5874-3700-a2a1-b158596602b2.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 198.45.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:dd:9f:b6:5a:2c:cb:c1:30:6b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=82c772f0-ef59-4cbc-bc11-5e4ad59b563f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e1:f9:28:93:12:e8:c7:d8:53:cb:5b:cb:ba:
03:50:81:53:c6:31:f6:ac:b5:fa:d9:26:15:2c:d1:
d6:1d:7b:a2:13:96:75:71:11:2d:c5:eb:a0:32:e0:
b8:37:16:4a:c8:e2:b2:24:17:59:72:0b:88:4d:ee:
18:6e:93:07:04:db:0a:8c:16:be:2f:8d:91:8c:ea:
01:fa:7d:e5:0a:12:97:30:44:dc:e7:c9:3c:e7:cc:
62:e3:bb:df:9e:94:bb:48:65:25:66:5e:42:21:50:
ab:6f:ac:83:7c:d5:34:e8:df:cd:8c:0e:48:54:43:
02:72:e4:57:14:39:1d:f2:f5:fc:25:bb:3c:da:d8:
a7:52:72:c5:7f:94:0e:d2:e3:b4:a8:60:a1:c7:39:
32:57:0b:e5:08:e9:b2:d5:8b:cf:1d:b1:43:a8:53:
a1:0f:c0:95:d7:54:2c:f4:05:20:83:bc:dc:bc:01:
af:5f:4e:2b:9b:56:b2:15:37:5f:10:bf:14:fa:15:
61:bf:f8:7f:81:84:30:ef:87:2f:ac:dc:0c:de:f4:
0f:d2:b1:f4:fc:82:44:c9:87:f4:c2:bf:8a:35:44:
af:12:5c:24:9b:c3:05:e0:41:8e:45:e1:a8:29:92:
da:aa:39:ca:ad:57:3c:c3:fc:68:5a:44:a4:21:ad:
cb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C3:5D:5F:94:9C:EB:CB:F5:16:A4:94:A0:A3:89:DB:CB:26:04:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f6a1724e-5874-3700-a2a1-b158596602b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
198.45.206.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:20:91:9e:6a:61:ec:bc:5a:ec:56:a0:d9:1e:0f:e3:16:b6:
92:4f:31:c5:ee:61:41:dc:3e:b4:06:73:ea:6f:38:69:82:f0:
84:17:94:33:90:62:0d:a7:a0:67:10:30:76:5a:29:d1:00:7e:
95:7a:44:20:61:9a:02:59:30:5a:72:ce:7c:9c:35:8b:a2:23:
55:97:bd:9d:cb:16:42:9e:58:39:bf:d4:b7:76:c8:8e:2f:b0:
97:06:c1:5b:c9:f9:2b:7c:c2:f4:22:bc:39:cb:3b:8c:fa:b3:
5c:fe:e5:e5:91:4b:93:87:a0:f6:b3:b6:28:fd:5f:71:80:d5:
6c:d4:b3:59:aa:59:02:7d:cd:82:05:63:d8:d6:67:d6:46:2e:
a1:47:b5:41:8b:6b:de:dd:87:3b:a3:9d:f9:fe:77:18:2b:2a:
d5:a6:c3:12:d1:d6:b4:17:29:a7:f9:8e:d2:9d:2b:ba:28:7d:
a2:2e:12:50:ee:bf:00:1b:ed:6d:41:d6:f2:4e:72:74:16:59:
00:4c:73:1d:a0:88:3f:74:8a:64:30:1d:fa:95:12:26:32:64:
ee:db:c8:c4:cb:3f:39:b0:88:42:b8:ce:19:37:34:ae:85:b5:
08:a3:25:d3:80:ef:26:bc:21:73:10:33:b8:c4:8b:92:ed:70:
fd:ab:19:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4N2ftlosy8Ewa7AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
ODJjNzcyZjAtZWY1OS00Y2JjLWJjMTEtNWU0YWQ1OWI1NjNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeH5KJMS6MfYU8tby7oDUIFTxjH2rLX62SYV
LNHWHXuiE5Z1cREtxeugMuC4NxZKyOKyJBdZcguITe4YbpMHBNsKjBa+L42RjOoB
+n3lChKXMETc58k858xi47vfnpS7SGUlZl5CIVCrb6yDfNU06N/NjA5IVEMCcuRX
FDkd8vX8Jbs82tinUnLFf5QO0uO0qGChxzkyVwvlCOmy1YvPHbFDqFOhD8CV11Qs
9AUgg7zcvAGvX04rm1ayFTdfEL8U+hVhv/h/gYQw74cvrNwM3vQP0rH0/IJEyYf0
wr+KNUSvElwkm8MF4EGOReGoKZLaqjnKrVc8w/xoWkSkIa3LEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFPDXV+UnOvL9RaklKCjidvLJgRbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjZhMTcyNGUtNTg3NC0z
NzAwLWEyYTEtYjE1ODU5NjYwMmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3OMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABggkZ5qYey8WuxWoNkeD+MWtpJPMcXuYUHcPrQGc+pvOGmC8IQXlDOQ
Yg2noGcQMHZaKdEAfpV6RCBhmgJZMFpyznycNYuiI1WXvZ3LFkKeWDm/1Ld2yI4v
sJcGwVvJ+St8wvQivDnLO4z6s1z+5eWRS5OHoPaztij9X3GA1WzUs1mqWQJ9zYIF
Y9jWZ9ZGLqFHtUGLa97dhzujnfn+dxgrKtWmwxLR1rQXKaf5jtKdK7oofaIuElDu
vwAb7W1B1vJOcnQWWQBMcx2giD90imQwHfqVEiYyZO7byMTLPzmwiEK4zhk3NK6F
tQijJdOA7ya8IXMQM7jEi5LtcP2rGTk=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:44:11 2026 by rpki-client