
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04114cad-7ec5-3696-b7ac-b904c25e638d.roa
File: 04114cad-7ec5-3696-b7ac-b904c25e638d.roa (raw, json)
Hash identifier: V4Dz01HpK2yBdWNnUVQn/GStZwxZlWR0tI9dApvX6H4=
Subject key identifier: 70:E6:E8:54:31:E0:19:8A:9E:A9:49:16:58:B0:D1:89:CF:4F:72:EE
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E0B04EC2B12ADF427ADB80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04114cad-7ec5-3696-b7ac-b904c25e638d.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 172.242.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:b0:4e:c2:b1:2a:df:42:7a:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=725177c0-87da-489e-97f9-a24528d7c4d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:85:02:1b:93:9c:2a:06:10:00:0d:51:4e:0c:
48:dd:25:76:7b:b2:88:99:4f:bf:7c:e3:99:c3:fa:
47:a3:6b:50:08:7f:16:3d:02:b4:c7:a3:d4:5c:a7:
4d:fc:44:be:5e:ae:ea:82:fa:44:71:8a:f3:dc:e6:
1b:16:c5:78:cb:4b:10:00:be:94:c8:65:47:65:68:
81:a5:a4:a7:c2:aa:62:d4:80:9c:93:ac:bd:f8:23:
29:c3:8c:29:e3:b7:02:35:46:7a:35:07:90:e0:cf:
cc:3d:da:84:22:5a:a4:0c:4c:ce:a5:4c:f1:6a:ae:
ff:d4:d0:45:8c:75:78:21:89:9d:e7:71:40:28:91:
95:0a:c9:8b:ea:8c:84:79:f3:e9:79:1f:22:c7:e0:
82:c2:78:aa:a5:4d:d7:1a:08:10:77:ce:10:23:27:
75:b4:37:18:76:b7:ca:ba:f4:e7:d9:f8:d4:3a:8e:
2d:74:c1:9f:95:f8:05:d9:b3:19:f7:90:7c:ae:df:
e0:13:93:c9:0d:b9:18:d5:75:60:9b:6d:b7:2a:70:
f7:e2:18:53:27:a9:58:6f:ab:f8:8b:22:f8:a8:5a:
5a:80:8e:11:aa:65:96:1f:32:dc:12:5a:62:8c:8b:
2e:5b:c0:1f:49:1a:3b:2a:04:cc:a1:82:38:e8:f9:
a0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E6:E8:54:31:E0:19:8A:9E:A9:49:16:58:B0:D1:89:CF:4F:72:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04114cad-7ec5-3696-b7ac-b904c25e638d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:96:82:69:f5:64:a5:f1:b2:52:f1:5b:c9:5d:54:d9:08:e9:
88:f1:19:28:8e:7b:ff:da:e5:fa:5c:5e:9c:ba:d4:9b:11:ac:
d5:99:f4:a2:cd:4c:0b:de:72:d1:d8:24:81:df:d6:d1:d5:7c:
80:15:28:26:bc:cc:87:41:4e:30:84:18:4e:4a:db:66:b9:07:
24:3e:22:4a:b9:ae:3d:5c:fe:56:5c:94:f1:a4:42:e6:0d:0b:
91:e4:00:5c:3a:56:3e:bf:61:62:e9:eb:7b:66:ae:0d:6c:bc:
5b:bf:20:ab:e2:a8:4f:4c:af:5f:9b:ba:21:d2:96:cc:ce:ec:
54:9b:62:18:1a:e0:7a:eb:2b:81:aa:48:6c:3d:e2:01:42:17:
28:16:3c:77:92:21:6d:80:57:c3:0d:44:d4:37:f3:37:d6:5e:
9d:ee:88:78:72:b0:e7:12:7c:d1:d6:a2:57:8d:47:04:2d:6b:
99:8b:6f:c9:d2:8a:01:1a:7d:27:57:dd:5f:1d:88:25:8d:73:
fa:71:ef:3d:c2:d2:39:07:23:7c:0f:6a:11:e1:e5:da:e6:2f:
dc:51:62:41:b4:bb:5a:e2:a9:0a:89:7c:62:66:5a:84:a0:a7:
f5:e7:bb:0d:46:03:72:51:ad:3d:9b:1b:0d:dc:24:ce:30:84:
78:9a:e7:d7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4LBOwrEq30J624AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
NzI1MTc3YzAtODdkYS00ODllLTk3ZjktYTI0NTI4ZDdjNGQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54UCG5OcKgYQAA1RTgxI3SV2e7KImU+/fOOZ
w/pHo2tQCH8WPQK0x6PUXKdN/ES+Xq7qgvpEcYrz3OYbFsV4y0sQAL6UyGVHZWiB
paSnwqpi1ICck6y9+CMpw4wp47cCNUZ6NQeQ4M/MPdqEIlqkDEzOpUzxaq7/1NBF
jHV4IYmd53FAKJGVCsmL6oyEefPpeR8ix+CCwniqpU3XGggQd84QIyd1tDcYdrfK
uvTn2fjUOo4tdMGflfgF2bMZ95B8rt/gE5PJDbkY1XVgm223KnD34hhTJ6lYb6v4
iyL4qFpagI4RqmWWHzLcElpijIsuW8AfSRo7KgTMoYI46PmgYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHDm6FQx4BmKnqlJFliw0YnPT3LuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDQxMTRjYWQtN2VjNS0z
Njk2LWI3YWMtYjkwNGMyNWU2MzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHaWgmn1ZKXxslLxW8ldVNkI6YjxGSiOe//a5fpcXpy61JsRrNWZ9KLN
TAvectHYJIHf1tHVfIAVKCa8zIdBTjCEGE5K22a5ByQ+Ikq5rj1c/lZclPGkQuYN
C5HkAFw6Vj6/YWLp63tmrg1svFu/IKviqE9Mr1+buiHSlszO7FSbYhga4HrrK4Gq
SGw94gFCFygWPHeSIW2AV8MNRNQ38zfWXp3uiHhysOcSfNHWoleNRwQta5mLb8nS
igEafSdX3V8diCWNc/px7z3C0jkHI3wPahHh5drmL9xRYkG0u1riqQqJfGJmWoSg
p/Xnuw1GA3JRrT2bGw3cJM4whHia59c=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:42:06 2026 by rpki-client