
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c8e4532-a434-347a-8168-16975ac7e03d.roa
File: 3c8e4532-a434-347a-8168-16975ac7e03d.roa (raw, json)
Hash identifier: EdKHgv0DmAtGMJ17i8m9IajTSnHkO2vVCxWvZOperM4=
Subject key identifier: 75:B7:64:30:33:E8:DE:A8:9F:2C:9C:6D:4D:AF:7A:91:0C:44:4F:6A
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584EA79F0B01259E8F4B8BE7DB80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c8e4532-a434-347a-8168-16975ac7e03d.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7155
IP address blocks: 70.41.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9f:0b:01:25:9e:8f:4b:8b:e7:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=9bda35bd-4689-43dc-996c-d44d89aba71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ce:b9:36:ee:81:9b:a7:fa:0d:28:7c:a0:ae:
15:6c:18:c4:24:5a:8e:c1:5c:93:a0:3b:85:f6:a8:
e0:80:e9:76:f4:dc:9f:67:de:f4:2b:f3:35:d0:bb:
65:fb:ee:53:ac:41:50:ca:89:a5:22:3e:95:97:81:
f0:7e:b3:e6:f7:c0:eb:56:fa:06:bc:b9:1e:4c:0e:
64:bd:c9:e6:18:ee:af:fb:3f:6e:0f:d7:48:98:99:
9f:59:0f:4a:8c:76:10:e3:f2:f2:e8:8d:8d:0f:75:
95:fd:0e:44:19:f8:c0:f5:7b:85:98:7d:44:5f:e9:
19:90:93:b9:0c:5b:2b:bf:61:ee:c9:6b:81:39:3d:
a2:fc:e7:df:a3:a1:29:c3:06:eb:92:0e:b5:71:c4:
9f:d7:c3:33:5d:90:82:34:96:2d:fc:97:db:17:e6:
27:1a:3f:1e:aa:68:d8:1c:b9:93:19:4f:ce:b6:4a:
6e:97:53:a2:d7:13:37:5c:f4:90:e4:b3:c6:73:b9:
83:c2:7d:f9:e5:84:7a:99:09:d7:b4:9e:20:3d:16:
5b:12:d2:88:8d:81:6d:34:7c:f8:eb:d2:d4:0b:08:
3c:ca:90:2f:01:b5:0b:49:aa:9e:10:3d:f5:62:93:
14:e1:47:1b:9f:1b:5d:e7:da:99:ef:ee:99:f5:5e:
7a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B7:64:30:33:E8:DE:A8:9F:2C:9C:6D:4D:AF:7A:91:0C:44:4F:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c8e4532-a434-347a-8168-16975ac7e03d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:41:0e:cb:96:0f:f1:f8:d0:5e:f2:c4:1c:38:16:2b:91:e2:
c8:e5:51:93:e6:d7:ba:58:1d:aa:d4:c0:fa:87:f4:1c:46:bb:
9f:c2:6d:4f:c2:7f:97:64:1e:29:6f:33:08:e7:96:d7:bb:11:
27:00:38:e1:94:bd:8a:ed:a3:9f:03:27:e2:22:15:8c:a1:40:
74:e9:f1:b4:92:20:59:f0:19:56:1f:84:ca:ac:76:b9:c0:58:
7f:ff:de:60:97:02:a8:e3:18:65:21:12:7a:4b:8f:7c:da:8c:
e8:6c:d0:3e:22:8c:8d:73:4c:5f:a4:4b:7b:20:f1:44:2b:e8:
4f:6d:47:df:95:9b:ae:dd:59:30:8d:50:47:5f:d0:f1:cd:ac:
1d:e0:5e:ff:81:48:50:2c:10:9d:0e:29:7e:03:2a:99:f4:e8:
e8:3f:13:28:f1:d2:0c:cb:63:48:c4:b5:0e:a0:13:0f:26:a8:
31:9a:53:ad:e4:7a:20:33:f7:cc:fd:f3:d3:46:1a:7f:21:62:
35:e2:e4:31:3a:40:05:56:a4:26:de:fe:aa:92:c2:7b:0f:75:
f5:c6:10:09:b0:07:d8:d4:84:70:63:e4:ae:44:0c:13:b1:a0:
f6:ee:5e:25:cb:28:bd:66:f0:94:27:bd:f2:a7:17:af:24:05:
fa:d6:6a:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnwsBJZ6PS4vn24AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
OWJkYTM1YmQtNDY4OS00M2RjLTk5NmMtZDQ0ZDg5YWJhNzFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAks65Nu6Bm6f6DSh8oK4VbBjEJFqOwVyToDuF
9qjggOl29NyfZ970K/M10Ltl++5TrEFQyomlIj6Vl4HwfrPm98DrVvoGvLkeTA5k
vcnmGO6v+z9uD9dImJmfWQ9KjHYQ4/Ly6I2ND3WV/Q5EGfjA9XuFmH1EX+kZkJO5
DFsrv2HuyWuBOT2i/Offo6Epwwbrkg61ccSf18MzXZCCNJYt/JfbF+YnGj8eqmjY
HLmTGU/Otkpul1Oi1xM3XPSQ5LPGc7mDwn355YR6mQnXtJ4gPRZbEtKIjYFtNHz4
69LUCwg8ypAvAbULSaqeED31YpMU4Ucbnxtd59qZ7+6Z9V56NwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHW3ZDAz6N6onyycbU2vepEMRE9qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2M4ZTQ1MzItYTQzNC0z
NDdhLTgxNjgtMTY5NzVhYzdlMDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARinZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACFBDsuWD/H40F7yxBw4FiuR4sjlUZPm17pYHarUwPqH9BxGu5/CbU/C
f5dkHilvMwjnlte7EScAOOGUvYrto58DJ+IiFYyhQHTp8bSSIFnwGVYfhMqsdrnA
WH//3mCXAqjjGGUhEnpLj3zajOhs0D4ijI1zTF+kS3sg8UQr6E9tR9+Vm67dWTCN
UEdf0PHNrB3gXv+BSFAsEJ0OKX4DKpn06Og/Eyjx0gzLY0jEtQ6gEw8mqDGaU63k
eiAz98z989NGGn8hYjXi5DE6QAVWpCbe/qqSwnsPdfXGEAmwB9jUhHBj5K5EDBOx
oPbuXiXLKL1m8JQnvfKnF68kBfrWagU=
-----END CERTIFICATE-----
Generated at Thu Sep 10 14:53:22 2026 by rpki-client