
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/bcf4837b-705f-3ae0-a9a3-c8ce47882966.roa
File: bcf4837b-705f-3ae0-a9a3-c8ce47882966.roa (raw, json)
Hash identifier: d7i1SC+xKAiyHY7/v0b2AubVq24fanaK1pFVs0RwMfs=
Subject key identifier: F5:AB:4E:A6:CB:71:56:70:6A:AD:AD:FE:D9:89:29:55:75:5E:22:CA
Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3
Certificate serial: 010D0C9F4328584CD2A1EAB46A7A573BBD0DAB80
Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/bcf4837b-705f-3ae0-a9a3-c8ce47882966.roa
Signing time: Wed 11 Feb 2026 02:00:32 +0000
ROA not before: Wed 11 Feb 2026 02:00:32 +0000
ROA not after: Tue 12 May 2026 01:00:32 +0000
asID: 21947
IP address blocks: 216.47.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d2:a1:ea:b4:6a:7a:57:3b:bd:0d:ab:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3
Validity
Not Before: Feb 11 02:00:32 2026 GMT
Not After : May 12 01:00:32 2026 GMT
Subject: CN=5e3f1122-e4d4-4b52-9d4d-4a44a9d71778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fe:a5:44:c0:2f:f9:53:f0:3c:58:df:e3:f7:
11:a5:d2:fb:32:3d:cd:d5:2b:f8:83:39:56:68:f4:
e8:21:d6:1f:49:b5:c9:6f:05:00:cc:78:d3:8f:33:
e4:2a:b6:0c:3b:8a:cb:c9:a2:10:c8:27:6c:46:71:
9b:96:1b:10:82:7d:0d:67:c6:6b:ea:21:88:b6:0a:
8b:2b:a3:53:da:63:04:f5:3a:4e:51:7d:5c:8a:6d:
73:24:14:d6:c1:f7:b8:8d:c1:71:a3:bf:85:9f:ed:
56:d1:c0:af:19:a7:d2:9b:b3:e7:08:39:cb:c3:7e:
61:ed:e1:68:a1:37:a2:bb:08:d9:e5:9d:32:81:7c:
48:cb:7c:7a:09:9e:9b:ae:bd:f2:8c:75:30:59:66:
12:4b:4f:0f:c5:af:6d:ea:66:31:18:86:8b:4e:f3:
68:bc:a4:26:ae:5f:b8:f7:b3:49:8e:76:d5:fd:f0:
6b:cc:5e:6d:68:5d:7b:33:1b:f5:24:e1:d5:75:3c:
01:fa:a8:5b:9b:dc:c6:f1:1c:ae:ac:f2:ef:d1:60:
ac:c3:b4:cf:af:44:ec:0e:ad:f0:47:f4:e9:81:4c:
05:b4:03:aa:ec:9f:00:76:c0:3a:69:e3:fc:92:05:
62:6b:28:fb:fc:dd:0b:b2:e2:8f:c4:b4:58:6e:cd:
34:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AB:4E:A6:CB:71:56:70:6A:AD:AD:FE:D9:89:29:55:75:5E:22:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/bcf4837b-705f-3ae0-a9a3-c8ce47882966.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl
X509v3 Authority Key Identifier:
keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
sbgp-ipAddrBlock: critical
IPv4:
216.47.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:2c:76:75:e0:de:e7:13:b6:20:11:e1:ee:62:66:96:20:15:
45:74:dd:ff:a7:41:47:04:e6:07:22:6c:1f:d8:48:ee:59:66:
bf:6e:3c:d0:0c:68:41:77:0a:1e:68:81:1d:9f:02:ac:bd:e1:
32:b2:01:ce:18:b7:59:0b:be:3c:ae:5a:a6:d5:33:7d:57:b3:
35:67:db:16:b5:8d:b3:3f:11:32:62:18:2c:d3:89:e1:1e:22:
2c:23:59:72:47:05:5f:cf:e0:40:33:c3:e8:7a:18:0e:3d:ef:
6d:11:45:f2:e4:c9:4e:34:9f:88:8d:50:bd:1c:5f:8d:22:04:
e6:e2:82:ae:36:a0:33:c8:55:6d:83:ef:e7:85:0a:79:93:0c:
fb:61:91:e4:92:50:f6:d8:a2:1a:a7:a0:96:fd:d2:dc:7b:03:
98:a3:5e:62:6e:a5:c0:7b:f4:1d:f2:b5:a8:a6:fe:f1:2f:15:
12:5f:77:7a:92:3b:e0:1a:5c:74:ab:3a:03:0c:87:73:22:a6:
d9:4a:3d:10:dd:98:12:9b:c5:d8:55:b8:1b:c1:b9:ed:46:6e:
ce:a2:10:43:c7:ce:27:3c:ec:cb:ec:1e:b8:4c:e1:9b:7b:6d:
a4:cc:b3:be:79:aa:5a:f4:57:94:ad:e3:56:59:a8:58:fc:74:
cc:2f:7b:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzSoeq0anpXO70Nq4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz
OGEzMB4XDTI2MDIxMTAyMDAzMloXDTI2MDUxMjAxMDAzMlowLzEtMCsGA1UEAxMk
NWUzZjExMjItZTRkNC00YjUyLTlkNGQtNGE0NGE5ZDcxNzc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwv6lRMAv+VPwPFjf4/cRpdL7Mj3N1Sv4gzlW
aPToIdYfSbXJbwUAzHjTjzPkKrYMO4rLyaIQyCdsRnGblhsQgn0NZ8Zr6iGItgqL
K6NT2mME9TpOUX1cim1zJBTWwfe4jcFxo7+Fn+1W0cCvGafSm7PnCDnLw35h7eFo
oTeiuwjZ5Z0ygXxIy3x6CZ6brr3yjHUwWWYSS08Pxa9t6mYxGIaLTvNovKQmrl+4
97NJjnbV/fBrzF5taF17Mxv1JOHVdTwB+qhbm9zG8RyurPLv0WCsw7TPr0TsDq3w
R/TpgUwFtAOq7J8AdsA6aeP8kgViayj7/N0LsuKPxLRYbs00qQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPWrTqbLcVZwaq2t/tmJKVV1XiLKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3
MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvYmNmNDgzN2ItNzA1Zi0z
YWUwLWE5YTMtYzhjZTQ3ODgyOTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk
YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj
MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1
NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2C8wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFcsdnXg3ucTtiAR4e5iZpYgFUV03f+nQUcE5gcibB/YSO5ZZr9uPNAM
aEF3Ch5ogR2fAqy94TKyAc4Yt1kLvjyuWqbVM31XszVn2xa1jbM/ETJiGCzTieEe
IiwjWXJHBV/P4EAzw+h6GA49720RRfLkyU40n4iNUL0cX40iBObigq42oDPIVW2D
7+eFCnmTDPthkeSSUPbYohqnoJb90tx7A5ijXmJupcB79B3ytaim/vEvFRJfd3qS
O+AaXHSrOgMMh3MiptlKPRDdmBKbxdhVuBvBue1Gbs6iEEPHzic87MvsHrhM4Zt7
baTMs755qlr0V5St41ZZqFj8dMwve6Q=
-----END CERTIFICATE-----
Generated at Tue Mar 3 07:14:24 2026 by rpki-client