
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe/654f7b5a-9dd1-34dc-99ee-fb5f7a10a901.roa
File: 654f7b5a-9dd1-34dc-99ee-fb5f7a10a901.roa (raw, json)
Hash identifier: P+bj30rRFupGFbdn828TlAeKptdWlg7ee/09UWerNAA=
Subject key identifier: 30:29:5F:EB:05:FE:BD:35:66:F8:EE:9E:0C:05:1F:02:5A:1D:15:27
Certificate issuer: /CN=bc515206-ffe6-4baf-9dde-1faa0a2e4dfe
Certificate serial: 010D0C9F4328584CB981CB76E7491624F0DBB880
Authority key identifier: 71:08:68:9B:F2:42:58:CC:3B:BD:94:D6:F8:D7:D5:EB:B6:2F:E5:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe/654f7b5a-9dd1-34dc-99ee-fb5f7a10a901.roa
Signing time: Mon 02 Feb 2026 02:00:32 +0000
ROA not before: Mon 02 Feb 2026 02:00:32 +0000
ROA not after: Sun 03 May 2026 01:00:32 +0000
asID: 36671
IP address blocks: 208.77.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b9:81:cb:76:e7:49:16:24:f0:db:b8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc515206-ffe6-4baf-9dde-1faa0a2e4dfe
Validity
Not Before: Feb 2 02:00:32 2026 GMT
Not After : May 3 01:00:32 2026 GMT
Subject: CN=202edfe4-3e0f-4c45-b922-cf62aaa4c04d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:16:10:07:83:e2:53:57:9e:5b:b8:67:0f:e5:
b6:f8:2a:cb:88:2a:5c:e8:eb:1c:87:6b:f2:26:20:
32:82:2d:f7:7c:57:4b:62:b1:52:f9:fb:c5:e8:ef:
bc:f4:0f:80:6a:41:75:8c:0a:bb:c3:4f:fb:26:59:
fd:d0:0c:f8:79:f9:e9:2a:c9:d1:c7:d4:af:36:d8:
bd:67:fd:38:44:96:ae:cf:8c:d6:a2:29:87:ac:ed:
90:14:d9:5c:1e:6b:bd:ca:59:ab:48:a1:16:02:30:
62:97:cf:15:27:7f:6a:9b:7b:c4:49:86:3c:74:05:
24:92:d0:ca:43:80:62:bd:80:f0:d7:b3:04:5e:4b:
94:2d:14:2b:c3:36:18:38:5e:03:39:8a:42:29:ec:
3d:43:6b:05:15:75:77:b6:30:d1:74:63:ff:e5:f3:
1b:43:7a:d4:7d:fd:ae:d4:6a:25:21:9a:65:ae:54:
da:6c:ba:2c:f3:4a:d0:ef:87:a9:bc:c7:07:ed:bf:
85:14:5c:0d:f0:7e:fb:32:eb:cf:f7:7b:de:d5:b8:
a5:db:56:b1:2c:ea:b5:37:29:83:7a:d6:ae:e7:2a:
a9:1a:29:20:a0:72:4a:fe:36:ab:a4:2b:f8:0d:71:
65:f7:7b:9f:85:fa:86:7a:02:81:77:03:5a:59:b7:
94:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:29:5F:EB:05:FE:BD:35:66:F8:EE:9E:0C:05:1F:02:5A:1D:15:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe/654f7b5a-9dd1-34dc-99ee-fb5f7a10a901.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe.crl
X509v3 Authority Key Identifier:
keyid:71:08:68:9B:F2:42:58:CC:3B:BD:94:D6:F8:D7:D5:EB:B6:2F:E5:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe.cer
sbgp-ipAddrBlock: critical
IPv4:
208.77.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:03:58:dc:9a:15:0d:13:dd:b0:59:d5:08:44:dd:9c:4f:58:
68:71:3d:bc:0e:6f:96:5d:da:8c:90:63:9a:c6:af:2b:58:d8:
8d:9d:20:a1:8e:33:fe:fe:eb:b0:40:98:1c:bd:9e:3e:eb:9b:
df:72:22:83:41:36:7b:f0:be:8e:d4:f9:7f:b3:65:46:be:05:
a7:f3:8d:ea:88:c0:96:e0:f9:b8:ae:49:c7:b3:45:10:93:21:
77:1f:a2:a6:38:f1:de:18:a5:62:12:d0:29:d2:a7:d7:0f:dc:
c8:d4:15:81:fa:85:75:54:39:15:41:9d:97:7e:71:a3:14:c3:
9f:ef:c4:02:5c:53:02:24:82:7c:0e:5b:c9:44:54:16:5f:79:
72:79:ca:c1:2a:b7:f6:fb:a2:57:bc:eb:e7:13:d2:3b:7d:6b:
eb:f3:0e:8a:69:6b:44:0a:57:2e:2e:f1:e1:72:ba:86:1e:99:
0a:83:80:83:ba:c9:91:45:e5:5d:eb:97:47:84:f7:a4:42:9c:
82:dd:93:b4:b0:27:7e:c6:8b:5c:23:60:0e:e4:a4:de:cb:07:
25:1b:d6:2f:8f:2a:c3:ee:92:4c:e8:8c:cc:52:8a:3e:8e:13:
ab:ac:5c:ab:87:2a:14:25:3a:45:8e:61:e5:f4:b1:2b:cc:6d:
98:f5:d1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 09:13:22 2026 by rpki-client