
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8949a05-b098-32fe-99a1-fafcf7a51e72.roa
File: c8949a05-b098-32fe-99a1-fafcf7a51e72.roa (raw, json)
Hash identifier: 2EHXsoikce1TxTLNQlQ6+psehGywbTJfwy3XPrOfo1g=
Subject key identifier: 1D:AD:2C:6A:F5:2B:DA:87:CF:09:6C:3E:8E:1C:B9:AF:C6:F8:AC:E5
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584E059C3483E33AE6F220EE4000
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8949a05-b098-32fe-99a1-fafcf7a51e72.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 7155
IP address blocks: 198.45.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 13 Jun 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9c:34:83:e3:3a:e6:f2:20:ee:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=247e7173-d34d-4f89-8662-ccffd368b5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:54:46:8e:76:f0:09:86:dd:69:49:8e:77:f5:
8e:48:a5:53:36:3a:df:c0:ff:c6:42:43:07:63:51:
d0:40:2f:38:3b:ec:28:b8:1c:fe:42:a0:a4:ff:66:
72:13:39:1c:f0:13:c3:d2:e6:24:c1:db:c5:0d:af:
24:d8:db:29:0b:d5:91:d0:8f:2b:a8:32:3f:25:76:
71:1a:c7:56:f9:c8:a1:cf:6f:26:3a:7b:76:20:6a:
f8:db:3b:f9:f6:26:a8:3f:9c:2d:b9:fa:e6:51:f6:
03:99:37:f1:ae:cf:d7:83:95:f5:b4:95:1a:32:28:
d6:bf:c0:4f:11:78:d1:34:0f:a8:bf:b6:74:9f:5e:
ce:60:71:88:3a:03:50:d6:68:eb:dc:9b:01:6d:76:
cf:f7:0c:3d:4c:3f:d4:1a:c1:ad:01:ee:fb:bd:5f:
6d:62:c0:10:f4:02:a6:c3:b9:60:06:96:02:0f:02:
5e:d3:cf:16:74:4d:e8:01:a9:c5:97:c2:46:90:aa:
35:f3:55:af:c8:d4:b4:dc:eb:24:73:a5:c4:26:58:
f6:2a:46:40:07:38:b6:51:d4:a9:73:6f:23:55:ac:
29:a2:35:92:13:0d:82:08:8c:30:d6:8c:13:46:00:
93:04:75:b1:32:c8:c7:a5:e5:e7:34:2b:25:e0:4b:
2f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:AD:2C:6A:F5:2B:DA:87:CF:09:6C:3E:8E:1C:B9:AF:C6:F8:AC:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8949a05-b098-32fe-99a1-fafcf7a51e72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
198.45.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:37:57:c1:a0:06:52:71:e6:40:4a:e2:1b:49:ec:87:2d:bc:
61:fe:5f:47:e9:93:7a:18:08:57:fe:2c:19:70:32:68:0f:8e:
05:2b:bb:0a:3e:28:2f:da:b8:bc:54:21:4a:42:19:82:79:f0:
86:f1:f0:77:c9:09:4d:c3:d5:87:8d:f1:4a:7e:7e:b7:0d:4a:
cd:6a:e1:dd:42:a0:7b:33:04:c3:d4:1a:d3:3e:ba:71:ae:8a:
ce:42:40:c2:ce:95:8c:19:eb:44:9f:6a:d8:bd:69:52:a8:ee:
71:9c:3d:ff:e6:59:25:e9:19:9c:b7:fc:b0:5a:80:a9:61:62:
72:d1:96:ac:5a:83:ce:0f:bc:9d:70:1c:1e:71:56:f5:76:c8:
a6:66:99:e2:9a:d3:70:5e:c2:3f:1b:6e:86:96:9f:28:65:ac:
c9:6a:f4:3c:17:5a:12:e0:32:a7:6d:ad:88:7b:d9:17:f1:cd:
9a:86:4a:a4:d7:1a:1e:4e:4a:00:8d:59:7d:8c:ee:a4:6b:98:
15:04:29:3a:c3:e0:bc:f3:e9:c6:95:a3:96:75:ba:27:65:c7:
40:3a:19:a5:5d:f4:10:38:91:2f:0b:a4:1b:5a:e9:97:47:54:
52:18:58:d1:99:e2:d8:1c:d9:4d:6e:11:3b:f5:e7:fd:fa:35:
2e:03:5d:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnDSD4zrm8iDuQAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
MjQ3ZTcxNzMtZDM0ZC00Zjg5LTg2NjItY2NmZmQzNjhiNWM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFRGjnbwCYbdaUmOd/WOSKVTNjrfwP/GQkMH
Y1HQQC84O+wouBz+QqCk/2ZyEzkc8BPD0uYkwdvFDa8k2NspC9WR0I8rqDI/JXZx
GsdW+cihz28mOnt2IGr42zv59iaoP5wtufrmUfYDmTfxrs/Xg5X1tJUaMijWv8BP
EXjRNA+ov7Z0n17OYHGIOgNQ1mjr3JsBbXbP9ww9TD/UGsGtAe77vV9tYsAQ9AKm
w7lgBpYCDwJe088WdE3oAanFl8JGkKo181WvyNS03Oskc6XEJlj2KkZABzi2UdSp
c28jVawpojWSEw2CCIww1owTRgCTBHWxMsjHpeXnNCsl4EsvTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB2tLGr1K9qHzwlsPo4cua/G+KzlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzg5NDlhMDUtYjA5OC0z
MmZlLTk5YTEtZmFmY2Y3YTUxZTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi2AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABQ3V8GgBlJx5kBK4htJ7IctvGH+X0fpk3oYCFf+LBlwMmgPjgUruwo+
KC/auLxUIUpCGYJ58Ibx8HfJCU3D1YeN8Up+frcNSs1q4d1CoHszBMPUGtM+unGu
is5CQMLOlYwZ60Sfati9aVKo7nGcPf/mWSXpGZy3/LBagKlhYnLRlqxag84PvJ1w
HB5xVvV2yKZmmeKa03Bewj8bboaWnyhlrMlq9DwXWhLgMqdtrYh72RfxzZqGSqTX
Gh5OSgCNWX2M7qRrmBUEKTrD4Lzz6caVo5Z1uidlx0A6GaVd9BA4kS8LpBta6ZdH
VFIYWNGZ4tgc2U1uETv15/36NS4DXXk=
-----END CERTIFICATE-----
Generated at Thu Jun 11 21:27:37 2026 by rpki-client