
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813/dc2bead9-3ffa-3458-a343-c25d589f040b.roa
File: dc2bead9-3ffa-3458-a343-c25d589f040b.roa (raw, json)
Hash identifier: 4+zb5U3MtTA1a1cKAk4iol/Mn/ghEHZrcDsYMGJHRX8=
Subject key identifier: 20:08:E1:23:A1:F7:96:50:0C:74:7E:59:0E:E1:BF:5C:FA:86:C1:5F
Certificate issuer: /CN=ba46f857-c44f-430d-b73b-7a14eec4c813
Certificate serial: 010D0C9F4328584E46BF29582C5389A716C1E700
Authority key identifier: BB:D8:4B:75:75:65:A5:63:86:8B:FC:C0:E0:83:0D:6D:FC:00:71:2C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813/dc2bead9-3ffa-3458-a343-c25d589f040b.roa
Signing time: Wed 24 Jun 2026 09:00:12 +0000
ROA not before: Wed 24 Jun 2026 09:00:12 +0000
ROA not after: Tue 22 Sep 2026 09:00:12 +0000
asID: 197537
IP address blocks: 199.182.96.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813/ba46f857-c44f-430d-b73b-7a14eec4c813.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813/ba46f857-c44f-430d-b73b-7a14eec4c813.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 13 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:46:bf:29:58:2c:53:89:a7:16:c1:e7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba46f857-c44f-430d-b73b-7a14eec4c813
Validity
Not Before: Jun 24 09:00:12 2026 GMT
Not After : Sep 22 09:00:12 2026 GMT
Subject: CN=47dd9e08-5657-4300-a8b9-78c8afc05016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:41:aa:cc:89:c5:d5:6d:40:8c:bf:f5:cf:ae:
1a:15:0d:c7:6c:9d:eb:01:68:cd:27:7a:f4:ac:09:
17:6d:c0:14:f0:d1:66:53:ed:bd:c6:4f:63:6f:d7:
d7:ab:b1:59:c9:49:e1:40:47:98:c1:01:0d:33:6e:
da:69:99:30:c7:77:df:d5:16:26:25:05:79:69:b2:
e5:a0:97:98:8d:38:8d:3a:d5:47:54:8f:97:a9:66:
5a:83:1a:43:f5:fd:e9:68:e4:b9:44:6f:4f:77:33:
7f:00:be:71:29:18:e5:53:82:9e:51:4c:66:0f:2d:
26:7d:34:16:3f:ea:56:08:73:f8:b2:72:f4:9d:87:
a8:19:58:0a:21:02:33:0f:46:ca:46:21:d9:43:a6:
1f:f6:c4:d1:38:9a:75:7f:fb:db:79:4e:90:46:87:
9c:df:6e:c0:d4:02:f2:79:72:b7:f6:cc:05:2b:a6:
fc:3c:46:ca:90:5e:4e:e6:e4:5b:03:13:78:91:45:
f2:e1:91:30:67:14:ed:db:2c:24:2b:69:f7:5e:8d:
55:95:3d:84:f1:72:0b:5a:b1:16:17:23:1c:9e:98:
46:a8:d6:c0:26:73:1f:72:1c:b6:0c:12:ff:4f:4b:
d3:46:21:9d:c4:93:56:af:34:ff:f6:d7:ae:36:c6:
d3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:08:E1:23:A1:F7:96:50:0C:74:7E:59:0E:E1:BF:5C:FA:86:C1:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813/dc2bead9-3ffa-3458-a343-c25d589f040b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813/ba46f857-c44f-430d-b73b-7a14eec4c813.crl
X509v3 Authority Key Identifier:
keyid:BB:D8:4B:75:75:65:A5:63:86:8B:FC:C0:E0:83:0D:6D:FC:00:71:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813.cer
sbgp-ipAddrBlock: critical
IPv4:
199.182.96.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
df:1a:f2:48:07:25:f1:e5:fd:67:69:3f:93:5c:6e:3a:fe:01:
0b:6c:11:ec:8b:16:d0:77:ac:73:d3:97:db:05:5c:32:c5:6e:
e8:bd:ac:6d:33:3e:bb:7c:de:80:57:9a:74:ae:2b:8d:55:6e:
91:40:8a:b6:69:3c:61:50:73:e9:06:f4:da:6c:5b:0e:8a:a0:
2e:a3:8f:13:5f:90:3f:31:83:3b:5d:3c:9d:36:b7:7f:ac:63:
d6:f1:83:1f:88:e0:21:f2:a9:d4:69:ba:43:0b:b6:46:5a:e4:
8e:16:0e:58:62:1c:df:1a:ac:59:f6:83:6b:ce:ca:9d:4d:4e:
16:33:50:50:06:dc:1c:85:65:b4:30:79:0d:74:80:23:d7:c0:
81:09:43:8e:b3:a6:5c:72:13:e5:6d:da:f8:b7:a2:a0:29:63:
8f:e0:76:23:4c:77:5c:15:9c:cc:12:73:c6:76:78:cc:75:8a:
5a:84:96:ef:e2:83:9e:ad:0d:59:af:b2:83:3c:9b:83:0a:8e:
89:08:42:bb:88:d4:e3:b5:82:9e:9b:0e:33:35:8d:da:3c:7f:
1e:4a:0c:ee:39:1a:1d:58:e0:26:f5:36:50:76:e8:b8:28:86:
7c:6e:5f:b0:b2:fd:6f:a3:6e:80:3e:99:ed:dc:c1:d1:a9:67:
47:30:8a:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5GvylYLFOJpxbB5wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmE0NmY4NTctYzQ0Zi00MzBkLWI3M2ItN2ExNGVlYzRj
ODEzMB4XDTI2MDYyNDA5MDAxMloXDTI2MDkyMjA5MDAxMlowLzEtMCsGA1UEAxMk
NDdkZDllMDgtNTY1Ny00MzAwLWE4YjktNzhjOGFmYzA1MDE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0GqzInF1W1AjL/1z64aFQ3HbJ3rAWjNJ3r0
rAkXbcAU8NFmU+29xk9jb9fXq7FZyUnhQEeYwQENM27aaZkwx3ff1RYmJQV5abLl
oJeYjTiNOtVHVI+XqWZagxpD9f3paOS5RG9PdzN/AL5xKRjlU4KeUUxmDy0mfTQW
P+pWCHP4snL0nYeoGVgKIQIzD0bKRiHZQ6Yf9sTROJp1f/vbeU6QRoec327A1ALy
eXK39swFK6b8PEbKkF5O5uRbAxN4kUXy4ZEwZxTt2ywkK2n3Xo1VlT2E8XILWrEW
FyMcnphGqNbAJnMfchy2DBL/T0vTRiGdxJNWrzT/9teuNsbTlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCAI4SOh95ZQDHR+WQ7hv1z6hsFfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iYTQ2
Zjg1Ny1jNDRmLTQzMGQtYjczYi03YTE0ZWVjNGM4MTMvZGMyYmVhZDktM2ZmYS0z
NDU4LWEzNDMtYzI1ZDU4OWYwNDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYmE0NmY4NTctYzQ0Zi00MzBkLWI3
M2ItN2ExNGVlYzRjODEzL2JhNDZmODU3LWM0NGYtNDMwZC1iNzNiLTdhMTRlZWM0
YzgxMy5jcmwwHwYDVR0jBBgwFoAUu9hLdXVlpWOGi/zA4IMNbfwAcSwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iYTQ2Zjg1Ny1jNDRmLTQzMGQtYjczYi03YTE0
ZWVjNGM4MTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx7ZgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAN8a8kgHJfHl/WdpP5Ncbjr+AQtsEeyLFtB3rHPTl9sFXDLFbui9rG0z
Prt83oBXmnSuK41VbpFAirZpPGFQc+kG9NpsWw6KoC6jjxNfkD8xgztdPJ02t3+s
Y9bxgx+I4CHyqdRpukMLtkZa5I4WDlhiHN8arFn2g2vOyp1NThYzUFAG3ByFZbQw
eQ10gCPXwIEJQ46zplxyE+Vt2vi3oqApY4/gdiNMd1wVnMwSc8Z2eMx1ilqElu/i
g56tDVmvsoM8m4MKjokIQruI1OO1gp6bDjM1jdo8fx5KDO45Gh1Y4Cb1NlB26Lgo
hnxuX7Cy/W+jboA+me3cwdGpZ0cwioE=
-----END CERTIFICATE-----
Generated at Sun Jul 12 13:11:47 2026 by rpki-client