
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9bda1441-d4f0-32cc-bda9-cf7046d3762e.roa
File: 9bda1441-d4f0-32cc-bda9-cf7046d3762e.roa (raw, json)
Hash identifier: lh1XwZiRzlEkuPQG7z/ffunmX5Ge8RFXWZ/AnggxO7A=
Subject key identifier: 98:B5:AE:98:E7:D2:40:0A:B9:A0:A7:68:B9:7D:CF:4D:7A:4C:C8:E9
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F498440E1134402EF88EB7100
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9bda1441-d4f0-32cc-bda9-cf7046d3762e.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 198.45.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 04 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:84:40:e1:13:44:02:ef:88:eb:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=4656b208-6859-4d22-b796-8f4d931d26df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:07:be:af:70:41:4c:8e:71:5c:b5:4d:d7:35:
aa:03:dc:22:1a:9e:73:68:42:af:b5:d3:28:37:be:
2e:1a:00:a1:b4:a3:c8:a7:22:c5:7f:85:1a:09:ee:
47:3c:b7:af:56:03:4f:b9:f7:d3:1c:7d:43:39:03:
89:dd:ff:80:0b:36:b6:c6:4a:a5:6a:c8:a7:5a:c9:
7f:bc:aa:0c:59:09:0d:bc:cf:92:09:8d:e6:fd:62:
f9:f9:6b:7f:a3:45:fb:e1:e8:6c:e6:1b:94:3c:96:
14:10:03:72:82:b7:a7:0b:5e:69:2f:46:4e:63:f1:
f9:13:00:78:db:8f:eb:54:cc:73:1d:34:d3:30:fc:
05:f9:70:61:56:65:c8:b1:52:a8:fa:96:e7:13:1e:
9d:01:6b:2a:eb:7f:09:ab:fe:23:1a:f4:0d:4f:0b:
ad:63:1f:7d:a7:7c:c6:eb:9f:01:7c:62:ab:7a:83:
27:83:f3:d6:c4:e0:6e:e3:4f:e2:57:f8:95:68:48:
ad:5c:72:50:89:9c:74:ce:d6:30:de:77:7f:25:8f:
a8:73:2f:3f:29:0a:68:17:77:9e:74:dd:fb:57:92:
a0:fd:84:81:e2:0b:67:94:73:be:ea:ab:79:7e:40:
fb:6d:f6:48:36:d5:8c:24:e4:76:33:0a:86:15:b0:
69:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B5:AE:98:E7:D2:40:0A:B9:A0:A7:68:B9:7D:CF:4D:7A:4C:C8:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9bda1441-d4f0-32cc-bda9-cf7046d3762e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
198.45.213.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:f3:1b:00:a0:13:2b:63:d3:8d:d3:ba:3c:1e:16:69:c9:fa:
3c:98:7d:9b:68:58:5d:89:e0:c3:f9:25:81:bd:1b:4a:d7:7e:
85:2c:a4:8d:83:0f:76:1a:f0:d5:45:ea:ff:7c:0a:34:a5:b0:
84:23:35:b3:04:18:f2:e1:1b:f0:c2:a1:73:8d:14:a8:15:ea:
e3:c3:3f:6f:11:7c:21:16:8c:8f:68:a4:48:ef:14:cd:d0:d9:
35:26:c7:8e:2b:12:bd:25:c1:3e:9f:9c:9d:fe:1b:03:19:13:
ca:7b:32:8e:48:d1:35:6c:84:37:27:1c:f4:8a:42:a2:bf:12:
e4:ec:fe:5c:5f:da:7f:08:1f:ff:64:80:92:9f:18:4a:9e:79:
42:f9:ff:6b:38:b1:31:bd:da:91:39:d0:03:87:79:fb:26:03:
11:de:96:3a:5f:13:c6:f5:32:08:7a:26:4d:77:35:27:33:7b:
aa:ee:1c:09:8e:43:f9:3e:9d:c8:4d:1c:3b:68:fd:f6:10:a4:
9d:0e:6e:8e:aa:1e:63:68:fb:a6:20:5a:02:91:07:bc:78:a5:
85:56:f3:4e:23:b7:64:f3:d8:ac:08:64:36:47:84:84:30:2d:
a6:ec:33:b4:a0:59:d2:ba:47:02:8c:c4:bf:31:90:74:f3:89:
43:aa:6f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 08:01:12 2026 by rpki-client