
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/bd16b703-96ce-3e0f-92f7-396fa62b8969.roa
File: bd16b703-96ce-3e0f-92f7-396fa62b8969.roa (raw, json)
Hash identifier: fudFfl8E3oGdRxMDiUjysAKl43PVrWAGPPyXRa7++nQ=
Subject key identifier: 3C:4B:22:15:89:ED:FE:4A:79:7C:F9:02:12:0A:21:3E:5F:C4:E8:5E
Certificate issuer: /CN=dac5cea7-cd25-4a27-9b63-bd82366932b1
Certificate serial: 010D0C9F4328584CAB0E7FEB45B4BB0EC6C37400
Authority key identifier: F8:90:52:1B:08:0F:56:22:0A:C1:68:0A:45:A1:58:77:CB:57:3E:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/bd16b703-96ce-3e0f-92f7-396fa62b8969.roa
Signing time: Tue 27 Jan 2026 21:47:05 +0000
ROA not before: Tue 27 Jan 2026 21:47:05 +0000
ROA not after: Mon 27 Apr 2026 20:47:05 +0000
asID: 396502
IP address blocks: 66.248.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ab:0e:7f:eb:45:b4:bb:0e:c6:c3:74:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac5cea7-cd25-4a27-9b63-bd82366932b1
Validity
Not Before: Jan 27 21:47:05 2026 GMT
Not After : Apr 27 20:47:05 2026 GMT
Subject: CN=f0bc890a-4243-4b7b-bf42-4992fb44a6d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e0:13:4f:15:67:bb:bd:5a:e5:57:d1:40:4d:
eb:17:5d:14:69:db:52:91:76:dd:14:83:34:87:71:
0f:fd:5c:8f:44:ed:d0:d2:5b:d2:82:58:24:cd:95:
5a:03:75:0d:d2:f3:30:2d:11:14:5f:32:f4:fd:da:
fb:d1:e4:0e:7f:64:37:c9:49:a4:c7:d8:d4:c3:42:
7a:0c:b6:26:c6:24:60:fa:e8:bd:39:5c:00:ce:a4:
af:27:34:e0:b5:71:36:5a:40:df:69:c8:4c:18:e2:
78:0e:e6:ae:6b:91:c5:33:ef:f5:2e:0b:51:b2:e0:
13:28:90:26:9a:4f:dc:8a:e0:fb:6e:90:44:a7:22:
0b:d5:48:ed:4e:25:b4:29:60:d1:a9:5c:0c:ea:b6:
0e:7e:20:fb:ce:c6:a6:70:0e:0b:a2:d3:03:23:78:
9c:da:04:d7:ed:03:07:20:5b:10:58:59:be:3d:3b:
bf:7a:1f:79:e0:86:0a:37:a4:1c:af:08:aa:e4:b5:
8a:39:cd:9e:04:76:da:cd:c4:8c:8c:ab:b5:61:ef:
fe:c0:9d:ad:7a:bd:be:dd:42:d8:31:db:cb:76:e9:
be:00:4f:65:bd:36:5f:a3:ce:13:0f:f5:dd:93:58:
79:35:7f:bb:a9:99:47:d4:34:29:c6:b9:1e:85:2a:
10:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4B:22:15:89:ED:FE:4A:79:7C:F9:02:12:0A:21:3E:5F:C4:E8:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/bd16b703-96ce-3e0f-92f7-396fa62b8969.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.crl
X509v3 Authority Key Identifier:
keyid:F8:90:52:1B:08:0F:56:22:0A:C1:68:0A:45:A1:58:77:CB:57:3E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer
sbgp-ipAddrBlock: critical
IPv4:
66.248.229.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:f6:79:48:c8:62:92:bb:a8:9f:24:5f:09:22:93:57:ab:f3:
ce:49:19:99:4c:8f:9e:4a:e0:00:9c:22:bf:b1:47:63:be:e5:
39:8b:f2:1e:e8:ec:0e:0c:06:87:f2:37:3c:0e:43:ec:d3:fd:
1b:fd:0c:3f:43:7e:ac:65:b6:a2:d2:5d:ad:dc:52:87:bf:d2:
bb:b9:22:84:9f:94:ce:cb:27:ad:88:b4:ab:9e:60:f5:73:4f:
1d:b0:e9:73:6d:b7:f5:b0:b1:3b:f3:f4:e2:47:fb:e0:11:cd:
81:fa:cb:b7:0f:e6:28:05:4c:85:46:88:4f:de:a1:28:db:63:
2e:28:6a:e8:64:57:3f:fe:3b:75:e1:d6:5a:d4:47:98:52:54:
13:31:e3:f4:b5:e4:e0:8e:3c:5f:8a:58:dc:2c:c9:2e:be:9e:
de:c4:4c:4d:0d:0c:46:46:aa:d3:a2:1b:2f:48:4f:19:d4:fe:
59:25:d6:a7:bc:43:a0:88:2e:fd:57:c1:e3:ac:9a:bc:e1:0c:
34:f4:42:31:ca:7e:62:58:a2:a8:b8:ad:4a:94:dd:d3:a2:cb:
1e:7d:73:da:31:eb:e7:15:eb:7c:51:e7:93:22:f6:da:d8:dc:
d2:43:66:4a:73:0d:7c:69:81:92:e2:f3:df:1b:d4:35:a2:29:
1d:52:c2:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyrDn/rRbS7DsbDdAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGFjNWNlYTctY2QyNS00YTI3LTliNjMtYmQ4MjM2Njkz
MmIxMB4XDTI2MDEyNzIxNDcwNVoXDTI2MDQyNzIwNDcwNVowLzEtMCsGA1UEAxMk
ZjBiYzg5MGEtNDI0My00YjdiLWJmNDItNDk5MmZiNDRhNmQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eATTxVnu71a5VfRQE3rF10UadtSkXbdFIM0
h3EP/VyPRO3Q0lvSglgkzZVaA3UN0vMwLREUXzL0/dr70eQOf2Q3yUmkx9jUw0J6
DLYmxiRg+ui9OVwAzqSvJzTgtXE2WkDfachMGOJ4Duaua5HFM+/1LgtRsuATKJAm
mk/ciuD7bpBEpyIL1UjtTiW0KWDRqVwM6rYOfiD7zsamcA4LotMDI3ic2gTX7QMH
IFsQWFm+PTu/eh954IYKN6Qcrwiq5LWKOc2eBHbazcSMjKu1Ye/+wJ2ter2+3ULY
MdvLdum+AE9lvTZfo84TD/Xdk1h5NX+7qZlH1DQpxrkehSoQdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDxLIhWJ7f5KeXz5AhIKIT5fxOheMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kYWM1
Y2VhNy1jZDI1LTRhMjctOWI2My1iZDgyMzY2OTMyYjEvYmQxNmI3MDMtOTZjZS0z
ZTBmLTkyZjctMzk2ZmE2MmI4OTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGFjNWNlYTctY2QyNS00YTI3LTli
NjMtYmQ4MjM2NjkzMmIxL2RhYzVjZWE3LWNkMjUtNGEyNy05YjYzLWJkODIzNjY5
MzJiMS5jcmwwHwYDVR0jBBgwFoAU+JBSGwgPViIKwWgKRaFYd8tXPl4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9kYWM1Y2VhNy1jZDI1LTRhMjctOWI2My1iZDgy
MzY2OTMyYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQvjlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACz2eUjIYpK7qJ8kXwkik1er885JGZlMj55K4ACcIr+xR2O+5TmL8h7o
7A4MBofyNzwOQ+zT/Rv9DD9DfqxltqLSXa3cUoe/0ru5IoSflM7LJ62ItKueYPVz
Tx2w6XNtt/WwsTvz9OJH++ARzYH6y7cP5igFTIVGiE/eoSjbYy4oauhkVz/+O3Xh
1lrUR5hSVBMx4/S15OCOPF+KWNwsyS6+nt7ETE0NDEZGqtOiGy9ITxnU/lkl1qe8
Q6CILv1XweOsmrzhDDT0QjHKfmJYoqi4rUqU3dOiyx59c9ox6+cV63xR55Mi9trY
3NJDZkpzDXxpgZLi898b1DWiKR1SwgY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:45:31 2026 by rpki-client