
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/811a86dd-a42d-31ba-ad6d-6c7c1c81bdbf.roa
File: 811a86dd-a42d-31ba-ad6d-6c7c1c81bdbf.roa (raw, json)
Hash identifier: 9N3i4XIpCgdW5hTfeXZ2uleuzr4Qlyo5pVUbxAX1NsE=
Subject key identifier: DB:F7:85:90:01:22:3A:38:51:37:AE:92:E8:2E:57:E0:18:32:CE:6C
Certificate issuer: /CN=bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6
Certificate serial: 010D0C9F4328584CBF172D4496267AAE8A229F00
Authority key identifier: 7C:F6:81:2F:D4:09:FD:0B:38:E3:3B:AC:9E:93:A2:B4:99:B4:C6:23
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/811a86dd-a42d-31ba-ad6d-6c7c1c81bdbf.roa
Signing time: Wed 04 Feb 2026 02:00:31 +0000
ROA not before: Wed 04 Feb 2026 02:00:31 +0000
ROA not after: Tue 05 May 2026 01:00:31 +0000
asID: 11588
IP address blocks: 209.20.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:bf:17:2d:44:96:26:7a:ae:8a:22:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6
Validity
Not Before: Feb 4 02:00:31 2026 GMT
Not After : May 5 01:00:31 2026 GMT
Subject: CN=98f30794-e1a8-4be4-a444-024a83257236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2e:53:d5:93:88:b0:dc:a5:a2:38:4b:90:41:
a8:e4:af:56:46:fb:fb:57:b3:71:44:25:4b:0f:e0:
1f:41:72:d0:41:81:44:3e:09:e9:22:bb:10:c4:0e:
2b:72:87:23:b1:9f:92:8f:bc:4f:5c:90:07:22:25:
5f:88:22:f8:a7:9e:16:8b:bb:bc:84:4f:e3:ac:25:
90:52:c2:00:56:a4:d7:fc:02:06:d4:d4:99:72:6b:
1c:f3:da:9b:ef:b9:af:b2:ad:81:00:73:6e:23:f6:
d1:65:84:64:e4:21:c8:56:24:00:a5:56:aa:eb:40:
5c:94:6d:76:f3:6d:14:54:79:c1:ff:4c:b2:01:26:
0e:c9:e9:47:10:ec:08:d6:76:6c:e8:de:54:7c:7a:
80:d2:52:6d:09:12:ae:52:c9:40:3e:dc:c1:8c:23:
ef:d7:b5:e7:00:03:83:2b:1e:fc:ae:8d:b5:c7:59:
b1:ae:93:73:78:87:d8:b6:c9:9b:5e:33:1c:2c:ca:
bf:d5:4c:0c:92:dc:3b:53:6a:fb:e4:13:8a:68:84:
fe:60:c6:5d:e6:d3:1e:f2:55:60:70:68:4a:11:40:
5f:07:ff:0f:37:98:19:41:ce:2d:fe:eb:b6:c3:7c:
48:d1:b1:12:63:b3:87:3b:ae:7d:cc:a5:66:5f:ff:
85:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F7:85:90:01:22:3A:38:51:37:AE:92:E8:2E:57:E0:18:32:CE:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/811a86dd-a42d-31ba-ad6d-6c7c1c81bdbf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.crl
X509v3 Authority Key Identifier:
keyid:7C:F6:81:2F:D4:09:FD:0B:38:E3:3B:AC:9E:93:A2:B4:99:B4:C6:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer
sbgp-ipAddrBlock: critical
IPv4:
209.20.156.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:76:34:95:48:05:25:6d:73:15:8d:23:16:f0:d8:0b:f2:91:
b7:db:2f:14:68:48:2c:40:05:3b:93:c9:b6:f2:88:c8:24:e2:
2e:10:8b:aa:37:36:c2:e6:de:8b:72:5f:fb:9f:20:99:0b:a1:
22:29:06:ed:a7:31:9a:a9:5b:26:88:7e:ff:df:0c:66:61:10:
5e:17:79:80:4e:06:8d:8d:1a:30:df:ac:30:04:88:15:b4:49:
1f:73:45:38:35:b5:a1:fe:a3:a3:cb:83:9b:70:63:00:1e:c3:
3e:e1:79:98:c1:6f:31:77:c9:75:cf:97:bb:2a:5b:bc:77:d1:
2d:e5:75:03:a2:c9:21:a3:d8:a7:4d:f1:5d:f1:ff:2f:d0:ed:
3b:e6:9f:be:98:61:7a:85:cf:5d:89:62:4d:7e:1b:67:44:40:
32:84:8f:54:c3:26:65:41:67:6d:f3:20:1d:a5:cb:a8:e0:fb:
89:e9:da:16:a2:35:73:89:67:80:39:75:5d:76:1e:fe:cc:33:
10:5a:f5:1d:c7:78:dd:f7:96:78:5b:99:b9:44:51:ef:fb:33:
4d:9f:3a:5a:e0:8a:db:52:bc:33:e9:f2:f1:9e:df:c2:61:5b:
cf:40:1f:02:be:17:b1:81:f6:d7:0f:71:d0:e4:76:7f:9c:9a:
4a:40:40:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy/Fy1EliZ6rooinwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmNiMzZhN2ItYmYzYy00YTgxLThjNWItYTQ4ZDFhNTdk
MmQ2MB4XDTI2MDIwNDAyMDAzMVoXDTI2MDUwNTAxMDAzMVowLzEtMCsGA1UEAxMk
OThmMzA3OTQtZTFhOC00YmU0LWE0NDQtMDI0YTgzMjU3MjM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC5T1ZOIsNylojhLkEGo5K9WRvv7V7NxRCVL
D+AfQXLQQYFEPgnpIrsQxA4rcocjsZ+Sj7xPXJAHIiVfiCL4p54Wi7u8hE/jrCWQ
UsIAVqTX/AIG1NSZcmsc89qb77mvsq2BAHNuI/bRZYRk5CHIViQApVaq60BclG12
820UVHnB/0yyASYOyelHEOwI1nZs6N5UfHqA0lJtCRKuUslAPtzBjCPv17XnAAOD
Kx78ro21x1mxrpNzeIfYtsmbXjMcLMq/1UwMktw7U2r75BOKaIT+YMZd5tMe8lVg
cGhKEUBfB/8PN5gZQc4t/uu2w3xI0bESY7OHO659zKVmX/+FRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNv3hZABIjo4UTeukuguV+AYMs5sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iY2Iz
NmE3Yi1iZjNjLTRhODEtOGM1Yi1hNDhkMWE1N2QyZDYvODExYTg2ZGQtYTQyZC0z
MWJhLWFkNmQtNmM3YzFjODFiZGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmNiMzZhN2ItYmYzYy00YTgxLThj
NWItYTQ4ZDFhNTdkMmQ2L2JjYjM2YTdiLWJmM2MtNGE4MS04YzViLWE0OGQxYTU3
ZDJkNi5jcmwwHwYDVR0jBBgwFoAUfPaBL9QJ/Qs44zusnpOitJm0xiMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9iY2IzNmE3Yi1iZjNjLTRhODEtOGM1Yi1hNDhk
MWE1N2QyZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0RScMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA52NJVIBSVtcxWNIxbw2AvykbfbLxRoSCxABTuTybbyiMgk4i4Qi6o3
NsLm3otyX/ufIJkLoSIpBu2nMZqpWyaIfv/fDGZhEF4XeYBOBo2NGjDfrDAEiBW0
SR9zRTg1taH+o6PLg5twYwAewz7heZjBbzF3yXXPl7sqW7x30S3ldQOiySGj2KdN
8V3x/y/Q7Tvmn76YYXqFz12JYk1+G2dEQDKEj1TDJmVBZ23zIB2ly6jg+4np2hai
NXOJZ4A5dV12Hv7MMxBa9R3HeN33lnhbmblEUe/7M02fOlrgittSvDPp8vGe38Jh
W89AHwK+F7GB9tcPcdDkdn+cmkpAQO8=
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:16:40 2026 by rpki-client