
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813/dc2bead9-3ffa-3458-a343-c25d589f040b.roa
File: dc2bead9-3ffa-3458-a343-c25d589f040b.roa (raw, json)
Hash identifier: KVWcirQXMeePkEQ6zc/0K8QRhaPK0fEKC1F5PM7iKN4=
Subject key identifier: A9:62:4B:54:B6:03:D3:D4:45:89:3A:DB:60:22:33:33:0A:E2:0C:D9
Certificate issuer: /CN=ba46f857-c44f-430d-b73b-7a14eec4c813
Certificate serial: 010D0C9F4328584D667A50E9F7BFE85BF4E14580
Authority key identifier: BB:D8:4B:75:75:65:A5:63:86:8B:FC:C0:E0:83:0D:6D:FC:00:71:2C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813/dc2bead9-3ffa-3458-a343-c25d589f040b.roa
Signing time: Sun 05 Apr 2026 01:00:24 +0000
ROA not before: Sun 05 Apr 2026 01:00:24 +0000
ROA not after: Sat 04 Jul 2026 01:00:24 +0000
asID: 197537
IP address blocks: 199.182.96.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813/ba46f857-c44f-430d-b73b-7a14eec4c813.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813/ba46f857-c44f-430d-b73b-7a14eec4c813.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:66:7a:50:e9:f7:bf:e8:5b:f4:e1:45:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba46f857-c44f-430d-b73b-7a14eec4c813
Validity
Not Before: Apr 5 01:00:24 2026 GMT
Not After : Jul 4 01:00:24 2026 GMT
Subject: CN=7c54bbe9-a225-4895-8ddd-25248d013ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b9:63:6a:ce:b1:9d:78:9f:fa:68:42:eb:99:
f5:42:22:99:22:db:cc:3e:b1:56:6d:d5:09:8c:3b:
f9:14:6b:d5:11:00:16:8b:52:40:be:f9:99:5b:f7:
46:3b:03:78:b7:01:16:d9:35:70:4a:84:56:40:5c:
2a:69:f0:cf:48:36:bb:4c:1b:40:f6:11:b6:90:3d:
20:36:6f:ab:cf:25:af:d8:85:1a:b8:82:07:50:0d:
61:8b:cb:c5:06:26:77:e5:52:f9:df:16:3e:7e:b7:
8c:13:76:c4:93:17:2d:02:34:bb:c8:cc:cb:b0:28:
13:79:69:65:cf:a0:f4:60:d6:d9:0b:22:50:68:37:
9e:34:e3:d1:f0:12:db:1b:e4:31:65:51:85:ec:c2:
ff:03:a6:17:94:7f:bc:97:ef:b2:d2:fc:2e:2e:ea:
ba:bb:e2:87:f4:9d:b5:0e:ad:f7:24:28:a7:6a:2c:
18:50:2a:02:95:04:df:12:a1:0a:de:56:3a:a3:b3:
c1:2e:11:2e:db:4b:9b:90:f5:fe:8c:a3:35:9c:91:
25:96:27:8d:24:f4:2b:cb:fb:1f:44:12:fa:b8:26:
3a:25:ed:58:f2:3a:f9:69:9d:c1:4e:5f:b0:52:b9:
4c:7a:b2:6d:8a:c7:d1:f2:1e:87:2d:d0:25:83:38:
87:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:62:4B:54:B6:03:D3:D4:45:89:3A:DB:60:22:33:33:0A:E2:0C:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813/dc2bead9-3ffa-3458-a343-c25d589f040b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813/ba46f857-c44f-430d-b73b-7a14eec4c813.crl
X509v3 Authority Key Identifier:
keyid:BB:D8:4B:75:75:65:A5:63:86:8B:FC:C0:E0:83:0D:6D:FC:00:71:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813.cer
sbgp-ipAddrBlock: critical
IPv4:
199.182.96.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:2f:12:83:f1:7c:8f:1f:c9:0f:76:ee:b4:21:4d:b6:7f:e7:
66:bd:8c:71:78:0c:1d:e9:64:68:5c:ce:8b:11:52:7a:f4:7a:
41:f0:ef:2f:5e:96:50:7e:4c:7b:de:b6:a3:74:5d:ef:f7:9d:
7c:29:04:c4:aa:47:71:fa:a2:2e:f4:45:dc:22:55:6a:97:2a:
24:62:f7:2b:26:76:69:3b:72:a9:65:6b:f4:18:ae:e1:dc:87:
b2:f9:af:b0:93:80:d6:47:18:02:68:40:e8:ff:11:c0:3f:5a:
f4:0a:20:74:18:c8:73:97:88:ef:cb:57:84:ea:50:a8:78:57:
62:b2:b2:d9:8b:a2:88:75:11:86:af:f1:47:4f:88:ce:f8:a1:
9a:aa:86:d0:f3:f6:65:aa:1a:5c:04:66:84:95:a3:d2:e7:67:
29:db:a0:00:42:51:3a:8a:1d:0d:b0:bd:f4:9e:15:9a:67:68:
9e:6b:14:0a:e9:c6:ba:e7:28:8d:79:47:ae:bd:f0:4b:0a:ab:
85:2d:af:45:e6:66:4e:8f:9f:e7:f5:3f:56:c7:f0:cc:d0:61:
d6:9d:6b:c0:2a:b1:8a:89:ba:5c:2a:5c:79:91:94:fe:48:6b:
00:3a:68:ab:4d:99:3f:a5:10:f1:95:d3:5e:1d:ba:17:69:b8:
20:3d:75:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:03:21 2026 by rpki-client