
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/e3017d68-56f8-3650-bbac-2453ed2c4df7.roa
File: e3017d68-56f8-3650-bbac-2453ed2c4df7.roa (raw, json)
Hash identifier: Q9cH0gWFNhadCWXwMSuSj6IezE2/xuQ8KIwoq457WSA=
Subject key identifier: 7D:E9:12:F0:32:21:56:3A:03:0F:3F:17:98:E4:41:B5:DA:4B:C7:16
Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial: 010D0C9F4328584D5E1A711A41F41D201C5E2240
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/e3017d68-56f8-3650-bbac-2453ed2c4df7.roa
Signing time: Thu 02 Apr 2026 01:00:23 +0000
ROA not before: Thu 02 Apr 2026 01:00:23 +0000
ROA not after: Wed 01 Jul 2026 01:00:23 +0000
asID: 53508
IP address blocks: 206.255.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 10 Apr 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:5e:1a:71:1a:41:f4:1d:20:1c:5e:22:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Validity
Not Before: Apr 2 01:00:23 2026 GMT
Not After : Jul 1 01:00:23 2026 GMT
Subject: CN=d41dbd65-b385-406f-97b3-aa2bceeb017b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:db:60:b7:a1:ec:db:df:08:ad:a8:de:e7:3e:
e8:8e:ed:4b:29:28:1a:a3:5a:81:c3:10:96:0f:bb:
37:c5:b3:38:ef:9b:01:2f:34:90:d9:18:19:8d:75:
9f:28:7b:e1:5a:0c:1b:06:5f:3c:c5:c8:dd:74:85:
97:d2:e5:04:7a:02:79:6b:ef:c8:fa:6d:12:82:6e:
ab:ea:44:69:b6:e4:99:ce:e9:8a:f5:92:4f:42:b5:
79:14:64:d0:e3:f2:17:91:6b:a9:85:a4:29:9d:12:
54:9a:21:fb:4c:81:7d:b7:ce:66:67:c3:1d:cd:83:
27:84:dc:a7:74:ef:e4:08:18:be:9e:5d:5a:01:3b:
cf:d1:59:4e:e2:62:f2:43:0e:a8:52:86:d9:13:2e:
cf:f7:4d:7c:64:df:e1:3f:47:f7:ad:bc:16:c9:68:
81:5e:2a:f8:44:e1:53:03:57:f5:9a:31:c5:9d:c8:
a5:b6:86:b8:b2:b2:71:53:6e:66:16:f5:c9:d6:d0:
2a:77:84:65:95:31:e6:d9:a2:b2:02:c2:ba:89:7a:
4d:83:33:04:f5:96:b3:be:d3:ea:2e:5d:d1:22:36:
ff:c5:c3:72:42:28:14:d8:c2:ed:d8:8d:19:73:38:
d7:82:bd:84:49:f4:3b:63:bf:78:26:46:31:18:c3:
19:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E9:12:F0:32:21:56:3A:03:0F:3F:17:98:E4:41:B5:DA:4B:C7:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/e3017d68-56f8-3650-bbac-2453ed2c4df7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
X509v3 Authority Key Identifier:
keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
sbgp-ipAddrBlock: critical
IPv4:
206.255.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:43:62:cb:14:c2:56:7b:8a:13:11:02:16:5e:06:a3:90:11:
0a:c8:75:1c:98:25:29:54:e8:6a:9f:b5:df:7c:ab:d1:0d:22:
15:aa:96:b2:60:3a:fe:73:28:0f:30:6f:2a:f3:13:70:35:60:
d7:42:52:c2:8d:f2:b4:a2:4c:ce:14:81:94:c5:e2:be:bc:bf:
c6:6b:16:75:d9:c4:4e:f4:f0:0e:4f:2d:3f:c9:7c:d6:24:e0:
12:48:eb:be:15:e8:ae:23:01:eb:cf:34:ba:e5:36:40:15:45:
f0:5a:7a:37:c5:f6:38:72:d0:93:12:35:32:4e:ed:26:3f:61:
ae:76:57:0e:95:3b:f6:77:f0:10:cb:c8:bd:6f:dd:8b:4b:c7:
75:6c:0d:d0:c8:30:a8:1b:16:f8:5b:3f:d8:01:31:ab:1a:c1:
86:64:5b:16:31:c8:55:22:4e:fe:a0:91:01:df:e6:90:45:86:
8b:06:bc:f0:8e:2e:c6:11:3e:0a:17:01:cc:94:90:bf:e2:2a:
e6:34:45:69:46:fa:63:cc:f4:b7:1c:11:6b:73:a5:4b:29:04:
41:ee:f5:56:28:d1:6a:5a:81:05:8f:f3:7a:67:f3:83:2a:2b:
39:6a:43:90:30:92:ce:8f:41:0c:b6:7c:e0:42:0a:f7:90:60:
3e:02:57:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGnEaQfQdIBxeIkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz
NmMzMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk
ZDQxZGJkNjUtYjM4NS00MDZmLTk3YjMtYWEyYmNlZWIwMTdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNtgt6Hs298Iraje5z7oju1LKSgao1qBwxCW
D7s3xbM475sBLzSQ2RgZjXWfKHvhWgwbBl88xcjddIWX0uUEegJ5a+/I+m0Sgm6r
6kRptuSZzumK9ZJPQrV5FGTQ4/IXkWuphaQpnRJUmiH7TIF9t85mZ8MdzYMnhNyn
dO/kCBi+nl1aATvP0VlO4mLyQw6oUobZEy7P9018ZN/hP0f3rbwWyWiBXir4ROFT
A1f1mjHFnciltoa4srJxU25mFvXJ1tAqd4RllTHm2aKyAsK6iXpNgzME9ZazvtPq
Ll3RIjb/xcNyQigU2MLt2I0ZczjXgr2ESfQ7Y794JkYxGMMZ7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH3pEvAyIVY6Aw8/F5jkQbXaS8cWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4
MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvZTMwMTdkNjgtNTZmOC0z
NjUwLWJiYWMtMjQ1M2VkMmM0ZGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0
MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0
MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk
ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzv//MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIVDYssUwlZ7ihMRAhZeBqOQEQrIdRyYJSlU6Gqftd98q9ENIhWqlrJg
Ov5zKA8wbyrzE3A1YNdCUsKN8rSiTM4UgZTF4r68v8ZrFnXZxE708A5PLT/JfNYk
4BJI674V6K4jAevPNLrlNkAVRfBaejfF9jhy0JMSNTJO7SY/Ya52Vw6VO/Z38BDL
yL1v3YtLx3VsDdDIMKgbFvhbP9gBMasawYZkWxYxyFUiTv6gkQHf5pBFhosGvPCO
LsYRPgoXAcyUkL/iKuY0RWlG+mPM9LccEWtzpUspBEHu9VYo0WpagQWP83pn84Mq
KzlqQ5Awks6PQQy2fOBCCveQYD4CV38=
-----END CERTIFICATE-----
Generated at Wed Apr 8 22:59:28 2026 by rpki-client