
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/8bc8180d-ca82-3197-a1df-9a917b8db27b.roa
File: 8bc8180d-ca82-3197-a1df-9a917b8db27b.roa (raw, json)
Hash identifier: v8YcIB29T1hJcIpx+SKsl3RPc/bLRwF3FPV8um0CkZg=
Subject key identifier: 29:4D:6F:95:31:EF:62:11:E8:67:65:C3:C9:D7:29:91:2C:56:9C:CC
Certificate issuer: /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial: 010D0C9F4328584CC611ED5E1D956737C52C67EC
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/8bc8180d-ca82-3197-a1df-9a917b8db27b.roa
Signing time: Fri 06 Feb 2026 14:00:40 +0000
ROA not before: Fri 06 Feb 2026 14:00:40 +0000
ROA not after: Thu 07 May 2026 13:00:40 +0000
asID: 2495
IP address blocks: 198.248.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:c6:11:ed:5e:1d:95:67:37:c5:2c:67:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
Validity
Not Before: Feb 6 14:00:40 2026 GMT
Not After : May 7 13:00:40 2026 GMT
Subject: CN=c0972df2-31b6-44d9-82e2-3faebaed88da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:82:96:ac:0a:07:a0:b1:4d:3d:8f:2a:38:51:
77:e4:ec:35:65:a5:5b:3e:8a:77:ff:48:a2:d4:08:
64:3a:ea:52:30:1a:4b:66:af:1c:ef:db:55:c1:70:
0d:7f:3d:dc:95:59:d6:e0:34:c0:d5:33:b3:e5:82:
0e:59:8c:cb:3f:1b:03:33:07:d5:ac:15:6a:d4:a6:
a0:81:ae:fc:77:ae:66:74:af:ef:26:1f:97:e0:50:
2b:0c:b3:b0:9b:be:87:10:77:79:e2:f0:2d:2f:18:
34:ad:8e:b4:b2:40:00:80:c3:6f:cc:c2:a3:21:09:
6f:5b:ed:b8:3d:6b:e2:e0:14:ee:f3:00:e5:2e:c3:
a3:8a:ed:b1:ce:c8:b9:4c:78:c6:b1:05:34:a6:3c:
bf:78:64:f7:a0:66:e5:fb:cd:de:22:2b:fa:41:2d:
41:b8:fb:29:5d:8e:2c:ed:5a:59:d6:51:fd:82:ab:
c7:8c:9f:59:ab:94:da:82:bd:30:1b:9a:f4:7d:92:
8b:08:f1:58:b7:21:30:4a:4c:c7:89:0d:89:c2:49:
f0:07:1c:51:12:81:11:0a:ad:d6:65:03:89:9d:4c:
4c:24:6d:89:67:b0:2b:4c:4f:e4:1e:96:39:74:5d:
a3:3a:4b:0e:8d:d9:fb:43:27:39:13:63:28:de:ff:
8c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4D:6F:95:31:EF:62:11:E8:67:65:C3:C9:D7:29:91:2C:56:9C:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/8bc8180d-ca82-3197-a1df-9a917b8db27b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
X509v3 Authority Key Identifier:
keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
sbgp-ipAddrBlock: critical
IPv4:
198.248.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:a4:1f:3c:14:a8:04:97:44:97:81:ff:c8:9f:21:71:c3:41:
67:4d:d4:fc:d4:94:8b:0e:1c:c2:73:00:5e:ef:04:f2:90:3b:
98:e7:d5:e1:06:16:de:30:ca:73:42:66:ca:59:be:53:4e:9f:
4f:94:23:60:59:ba:08:65:ae:59:f7:a1:c1:a4:2e:bb:b0:72:
48:35:dd:9e:1b:f9:50:b4:2e:ee:7b:44:c1:71:81:ba:75:31:
69:79:63:e2:f0:17:a6:38:e9:02:83:24:38:85:db:32:5e:1d:
3c:8f:5e:78:48:f9:f8:d1:7b:a6:c2:5b:2e:9b:86:0d:a3:be:
da:df:da:92:d2:f2:d2:dd:e7:f6:29:32:17:a3:ed:da:dc:d6:
99:93:04:2f:c9:36:8a:0c:42:a0:f8:2f:4e:53:0a:cf:01:b6:
9f:14:c9:31:cb:49:da:36:3e:e6:96:b4:d6:1a:4f:48:04:aa:
70:a7:a8:5c:39:86:ae:84:da:5a:80:75:18:57:aa:94:4b:ed:
ad:32:0e:ac:ff:67:be:b8:f5:73:c0:9c:c7:d2:9c:b7:46:fb:
77:6f:b1:20:9f:a4:3c:25:a2:61:98:a5:d8:36:0a:67:4c:73:
5c:03:42:55:f5:5d:96:5a:fd:9d:5c:6e:b8:f9:9e:30:f9:eb:
83:85:45:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzGEe1eHZVnN8UsZ+wwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODg4NDI4NzgtMTA1MC00ZGY3LTgyMmItZWE4ZWMyNWRi
ODNkMB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk
YzA5NzJkZjItMzFiNi00NGQ5LTgyZTItM2ZhZWJhZWQ4OGRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIKWrAoHoLFNPY8qOFF35Ow1ZaVbPop3/0ii
1AhkOupSMBpLZq8c79tVwXANfz3clVnW4DTA1TOz5YIOWYzLPxsDMwfVrBVq1Kag
ga78d65mdK/vJh+X4FArDLOwm76HEHd54vAtLxg0rY60skAAgMNvzMKjIQlvW+24
PWvi4BTu8wDlLsOjiu2xzsi5THjGsQU0pjy/eGT3oGbl+83eIiv6QS1BuPspXY4s
7VpZ1lH9gqvHjJ9Zq5Tagr0wG5r0fZKLCPFYtyEwSkzHiQ2JwknwBxxREoERCq3W
ZQOJnUxMJG2JZ7ArTE/kHpY5dF2jOksOjdn7Qyc5E2Mo3v+MTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFClNb5Ux72IR6Gdlw8nXKZEsVpzMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0
Mjg3OC0xMDUwLTRkZjctODIyYi1lYThlYzI1ZGI4M2QvOGJjODE4MGQtY2E4Mi0z
MTk3LWExZGYtOWE5MTdiOGRiMjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODg4NDI4NzgtMTA1MC00ZGY3LTgy
MmItZWE4ZWMyNWRiODNkLzg4ODQyODc4LTEwNTAtNGRmNy04MjJiLWVhOGVjMjVk
YjgzZC5jcmwwHwYDVR0jBBgwFoAUCvQvaSDxqtdtZzyGmgTIgB6tfZkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0Mjg3OC0xMDUwLTRkZjctODIyYi1lYThl
YzI1ZGI4M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxvh4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALqkHzwUqASXRJeB/8ifIXHDQWdN1PzUlIsOHMJzAF7vBPKQO5jn1eEG
Ft4wynNCZspZvlNOn0+UI2BZughlrln3ocGkLruwckg13Z4b+VC0Lu57RMFxgbp1
MWl5Y+LwF6Y46QKDJDiF2zJeHTyPXnhI+fjRe6bCWy6bhg2jvtrf2pLS8tLd5/Yp
Mhej7drc1pmTBC/JNooMQqD4L05TCs8Btp8UyTHLSdo2PuaWtNYaT0gEqnCnqFw5
hq6E2lqAdRhXqpRL7a0yDqz/Z7649XPAnMfSnLdG+3dvsSCfpDwlomGYpdg2CmdM
c1wDQlX1XZZa/Z1cbrj5njD564OFRbE=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:09:04 2026 by rpki-client