
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2c367249-e802-3f45-b41e-832fbe9802ff.roa
File: 2c367249-e802-3f45-b41e-832fbe9802ff.roa (raw, json)
Hash identifier: Vq9ZFWxaPM29BumIWLVGilheobqniQEQxXcYwvVRRmo=
Subject key identifier: 96:3E:65:AC:FE:A0:28:40:DF:F7:7D:E9:59:AC:A9:EE:E8:8E:C8:E8
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E0A4C1A2244C834DE4F100
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2c367249-e802-3f45-b41e-832fbe9802ff.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 162.72.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:a4:c1:a2:24:4c:83:4d:e4:f1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=f3b31f24-93e9-450b-8905-6087f46ed42b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e3:f2:10:81:21:49:7c:3c:a6:fe:13:b2:85:
a3:f4:f2:de:9d:35:7a:3d:bc:e5:78:f1:9e:bd:75:
e6:5d:a4:50:9e:36:4e:29:16:af:19:fb:f0:0f:86:
17:c8:6b:8a:2b:e0:94:5b:94:40:c1:50:2c:5d:99:
d4:4d:28:28:9e:34:cc:ec:bb:d4:dd:35:7a:15:9e:
03:14:29:3e:64:87:03:9b:1d:e0:cb:1d:04:06:c0:
91:05:24:53:82:87:cb:7f:48:cc:cb:75:ea:fb:62:
74:ed:46:bb:fb:84:0b:87:39:3a:57:33:d3:11:af:
2b:8c:97:4f:83:ff:18:f6:c8:a1:b6:01:5b:87:e5:
10:3f:2b:02:e4:7d:2f:74:fc:ea:ce:a3:d2:62:80:
95:24:38:a3:d1:e7:be:ec:02:48:1c:21:26:50:a5:
e9:8c:72:61:ef:fa:50:c2:55:0c:26:23:d8:1b:fe:
a9:ca:80:10:89:e6:81:53:88:ca:68:30:92:54:89:
16:05:b2:31:11:94:9c:7e:f5:25:5e:5f:eb:05:12:
c2:6e:5f:af:ec:6e:bd:c3:c4:c6:99:17:af:9d:10:
8c:ee:5d:35:1c:c7:7f:04:4b:6d:d8:fc:3f:10:a2:
54:4b:7b:03:77:26:7e:ed:1d:28:af:67:53:fe:1f:
cd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3E:65:AC:FE:A0:28:40:DF:F7:7D:E9:59:AC:A9:EE:E8:8E:C8:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2c367249-e802-3f45-b41e-832fbe9802ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
162.72.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:8e:5e:f5:24:ec:a7:56:8c:63:23:f2:97:fe:88:5a:83:88:
fb:ed:1e:fb:55:79:75:be:49:5c:4b:dc:7e:d2:d3:a5:af:ad:
9d:f8:c7:80:79:60:55:0f:c3:f8:e6:4c:84:bd:7f:c5:08:37:
6b:af:28:0b:74:61:24:fc:a8:04:35:9d:04:27:1e:1f:85:0c:
96:e6:4d:86:81:79:c3:a6:5a:e1:d2:6d:34:76:7b:2a:f3:ae:
97:fc:50:5c:c4:30:21:dd:60:89:ed:02:34:6a:1d:c9:e0:67:
53:df:38:1f:17:9b:e8:9a:e8:5e:b4:de:84:d5:0f:52:d7:59:
78:87:93:d5:a0:93:7e:e2:24:29:b0:ed:98:27:6d:c7:b4:74:
10:6d:7d:81:76:d3:77:57:7a:ac:0a:f9:d9:21:75:9e:b2:8d:
82:6e:3f:f7:c3:75:8d:f7:9c:29:8b:eb:15:0c:ac:06:0a:dd:
63:14:d1:3f:a6:bf:c8:7a:c8:8a:96:f1:be:00:1d:9e:9a:58:
af:73:4f:bf:50:f5:1c:ca:8b:76:eb:d8:4e:94:75:09:3e:ce:
f8:42:89:b7:0c:4c:d3:ec:cd:3c:ef:51:5e:75:e7:c2:6e:36:
36:19:62:a4:ef:f5:bd:86:1f:25:d2:a1:5a:b3:c3:f0:62:a8:
cd:e9:0b:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4KTBoiRMg03k8QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
ZjNiMzFmMjQtOTNlOS00NTBiLTg5MDUtNjA4N2Y0NmVkNDJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOPyEIEhSXw8pv4TsoWj9PLenTV6PbzlePGe
vXXmXaRQnjZOKRavGfvwD4YXyGuKK+CUW5RAwVAsXZnUTSgonjTM7LvU3TV6FZ4D
FCk+ZIcDmx3gyx0EBsCRBSRTgofLf0jMy3Xq+2J07Ua7+4QLhzk6VzPTEa8rjJdP
g/8Y9sihtgFbh+UQPysC5H0vdPzqzqPSYoCVJDij0ee+7AJIHCEmUKXpjHJh7/pQ
wlUMJiPYG/6pyoAQieaBU4jKaDCSVIkWBbIxEZScfvUlXl/rBRLCbl+v7G69w8TG
mRevnRCM7l01HMd/BEtt2Pw/EKJUS3sDdyZ+7R0or2dT/h/NqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJY+Zaz+oChA3/d96Vmsqe7ojsjoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmMzNjcyNDktZTgwMi0z
ZjQ1LWI0MWUtODMyZmJlOTgwMmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokgdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGGOXvUk7KdWjGMj8pf+iFqDiPvtHvtVeXW+SVxL3H7S06WvrZ34x4B5
YFUPw/jmTIS9f8UIN2uvKAt0YST8qAQ1nQQnHh+FDJbmTYaBecOmWuHSbTR2eyrz
rpf8UFzEMCHdYIntAjRqHcngZ1PfOB8Xm+ia6F603oTVD1LXWXiHk9Wgk37iJCmw
7Zgnbce0dBBtfYF203dXeqwK+dkhdZ6yjYJuP/fDdY33nCmL6xUMrAYK3WMU0T+m
v8h6yIqW8b4AHZ6aWK9zT79Q9RzKi3br2E6UdQk+zvhCibcMTNPszTzvUV5158Ju
NjYZYqTv9b2GHyXSoVqzw/BiqM3pC3k=
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:02:07 2026 by rpki-client