
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3e04b607-fda6-3c1c-85fd-a0eafad302ea.roa
File: 3e04b607-fda6-3c1c-85fd-a0eafad302ea.roa (raw, json)
Hash identifier: AmVivTgLWxgRXQlvhp7uku4kzDzbcfoQFjAqEv6jnB8=
Subject key identifier: 88:5F:5D:6E:30:80:CF:2C:C2:D9:AE:FD:24:7E:76:BC:CD:FA:E7:11
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E004AAC6F05D250D69EA00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3e04b607-fda6-3c1c-85fd-a0eafad302ea.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 172.243.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:04:aa:c6:f0:5d:25:0d:69:ea:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=753ccbde-8939-42ae-8457-2d0807077ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bf:7c:34:cb:7d:7d:d9:7d:58:71:c3:05:d0:
28:36:04:56:fd:6c:55:a2:87:cb:7a:a5:17:75:4a:
83:0e:5f:4c:57:72:09:f7:3d:fd:16:fd:95:3b:ba:
90:76:46:17:4d:d1:bc:cc:89:3d:de:c7:3f:43:93:
4f:ae:aa:7a:8d:dc:b2:7e:da:de:4a:c6:54:f4:ef:
f0:f9:c7:e0:e4:58:78:ed:68:0b:47:81:f4:dd:f4:
4d:83:48:a0:f0:89:7b:4a:02:76:ce:06:12:f4:73:
0d:ca:b5:fb:48:8a:fd:6e:a3:fb:43:6e:63:39:39:
c4:b6:a3:e4:2a:d8:01:65:c8:d5:d1:43:ad:9b:e8:
98:2a:da:e5:7f:c3:c1:39:65:53:42:db:f7:a4:bd:
79:07:2c:00:fd:0b:f0:be:87:07:ea:dc:7a:75:3e:
b2:79:14:43:67:c2:cd:cf:25:00:4a:8c:51:87:04:
74:82:b9:f7:31:fa:0e:ba:6b:37:6d:f1:f0:34:fa:
51:91:fb:1e:87:a1:45:e1:f3:67:d5:c0:7e:7a:30:
97:52:ee:4b:29:66:98:9b:06:e0:8f:05:11:79:27:
ac:8e:21:e1:9b:6a:ec:ef:5f:ab:7e:9f:0a:ae:a5:
8f:ca:f9:f5:a4:24:83:0d:fe:1f:e0:4c:4f:43:04:
ef:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5F:5D:6E:30:80:CF:2C:C2:D9:AE:FD:24:7E:76:BC:CD:FA:E7:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3e04b607-fda6-3c1c-85fd-a0eafad302ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.213.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c7:96:76:a6:73:04:76:cf:29:88:73:fb:2e:ad:c4:25:ad:32:
0c:0e:ed:e3:15:92:9f:25:85:72:75:b2:83:1a:d6:72:95:3d:
5a:bd:0f:9e:60:8b:24:be:71:74:5f:08:c1:d8:88:b0:37:3b:
93:70:27:72:f8:fd:0c:a3:b5:7a:e5:c5:2e:03:8b:c8:cf:b7:
c1:cc:df:9b:fe:88:9e:0f:3a:1c:1a:2a:e6:72:b3:2a:30:2e:
56:9f:7d:c9:de:27:c4:f8:64:64:65:27:d8:66:7c:65:82:80:
ef:96:82:59:4c:18:7f:b9:07:30:a0:25:a9:a2:8e:58:60:93:
4a:e2:52:5c:8d:e3:f3:e6:55:8b:bc:ad:d2:19:3b:a1:ae:0a:
42:3d:91:31:92:a9:ad:bb:c9:3f:44:c9:cc:0a:49:03:38:3a:
15:43:74:ba:1e:79:2e:89:a6:d4:b7:8b:1f:79:8f:b8:1e:d4:
79:7c:ff:be:87:55:1e:82:a7:e7:4f:9c:e0:ff:14:7a:90:db:
08:e5:23:ba:b5:22:ff:0a:3f:91:18:a8:79:2d:00:12:7e:70:
4d:0a:67:c7:bb:45:33:ef:4c:8a:3a:b0:9c:3f:06:48:d7:8b:
1b:b6:38:92:b4:49:ce:dc:96:bd:e5:d7:e5:a0:c3:46:0f:52:
7d:96:02:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4ASqxvBdJQ1p6gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
NzUzY2NiZGUtODkzOS00MmFlLTg0NTctMmQwODA3MDc3YWU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjL98NMt9fdl9WHHDBdAoNgRW/WxVoofLeqUX
dUqDDl9MV3IJ9z39Fv2VO7qQdkYXTdG8zIk93sc/Q5NPrqp6jdyyftreSsZU9O/w
+cfg5Fh47WgLR4H03fRNg0ig8Il7SgJ2zgYS9HMNyrX7SIr9bqP7Q25jOTnEtqPk
KtgBZcjV0UOtm+iYKtrlf8PBOWVTQtv3pL15BywA/QvwvocH6tx6dT6yeRRDZ8LN
zyUASoxRhwR0grn3MfoOums3bfHwNPpRkfseh6FF4fNn1cB+ejCXUu5LKWaYmwbg
jwUReSesjiHhm2rs71+rfp8KrqWPyvn1pCSDDf4f4ExPQwTvRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIhfXW4wgM8swtmu/SR+drzN+ucRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2UwNGI2MDctZmRhNi0z
YzFjLTg1ZmQtYTBlYWZhZDMwMmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMeWdqZzBHbPKYhz+y6txCWtMgwO7eMVkp8lhXJ1soMa1nKVPVq9D55g
iyS+cXRfCMHYiLA3O5NwJ3L4/QyjtXrlxS4Di8jPt8HM35v+iJ4POhwaKuZysyow
LlaffcneJ8T4ZGRlJ9hmfGWCgO+WgllMGH+5BzCgJamijlhgk0riUlyN4/PmVYu8
rdIZO6GuCkI9kTGSqa27yT9EycwKSQM4OhVDdLoeeS6JptS3ix95j7ge1Hl8/76H
VR6Cp+dPnOD/FHqQ2wjlI7q1Iv8KP5EYqHktABJ+cE0KZ8e7RTPvTIo6sJw/BkjX
ixu2OJK0Sc7clr3l1+Wgw0YPUn2WAlg=
-----END CERTIFICATE-----
Generated at Fri Mar 27 05:08:05 2026 by rpki-client