
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a0d5f038-cb14-3a36-9df4-d5127a25dfd8.roa
File: a0d5f038-cb14-3a36-9df4-d5127a25dfd8.roa (raw, json)
Hash identifier: voWATG2d3yjJozBaQ1u7bIz1y682IWLfoxtfo69O76Q=
Subject key identifier: 4B:49:65:76:4E:50:AF:61:DF:5D:92:64:D6:8A:0C:7F:09:3A:63:AA
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E0A99144C85D3572F3C000
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a0d5f038-cb14-3a36-9df4-d5127a25dfd8.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 162.72.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:a9:91:44:c8:5d:35:72:f3:c0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=613378e2-f36d-417b-a979-b1f5b9457b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ee:c3:50:1f:b4:c2:d0:91:b4:5f:23:8b:0c:
0a:f6:d5:76:15:a1:fd:66:30:af:ec:36:d4:2a:60:
da:27:cd:88:73:3b:b4:cc:71:d5:03:20:27:cf:40:
d2:c3:ee:00:0f:68:6f:1e:e5:c3:dd:1e:a5:37:b0:
18:47:e1:24:54:50:50:23:49:a3:c8:0d:ed:26:da:
1f:4d:07:1d:2b:dd:67:01:df:81:6e:fc:c0:73:dc:
a2:43:17:46:e4:69:f2:2a:fa:d2:a2:12:80:18:4f:
4b:02:f6:f7:29:37:d9:68:60:a4:07:03:d3:e1:b0:
87:62:d8:67:a7:f7:be:87:2b:8f:d4:36:d3:e9:29:
a6:bb:07:57:2f:e8:06:50:30:cb:6c:68:a0:0e:ca:
e3:e5:78:ee:d9:0e:d9:ce:94:c7:e5:6b:42:bf:27:
df:c7:b3:b8:73:b6:0a:48:ed:76:af:67:e7:6b:3f:
e6:8e:6f:c3:9e:94:9b:eb:63:94:c9:91:35:61:1f:
b0:0b:63:72:90:79:d6:d6:d1:f5:3f:7a:f7:5d:e0:
59:3e:c2:08:a2:13:a9:e7:50:e8:ed:e7:e3:22:42:
8a:90:97:ad:ab:7f:51:a8:4b:bc:24:a4:44:0c:b6:
45:54:78:d6:87:c3:91:1f:a0:5a:39:31:b2:64:a7:
18:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:49:65:76:4E:50:AF:61:DF:5D:92:64:D6:8A:0C:7F:09:3A:63:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a0d5f038-cb14-3a36-9df4-d5127a25dfd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
162.72.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cc:a2:3e:fb:83:a7:34:68:99:9b:bb:f8:73:3b:69:c3:9c:d7:
97:45:8f:12:88:11:9a:e9:45:ee:cc:11:c2:4c:74:87:81:61:
7d:a8:66:2e:ab:31:89:49:b1:26:40:a7:7c:e4:08:e9:18:4e:
52:f0:65:2d:b8:be:83:11:0d:ef:3c:28:f7:1e:ed:74:25:30:
c7:da:b3:c9:85:31:f8:21:d2:bd:03:ac:dc:db:f6:de:1c:01:
85:7d:09:09:77:d2:2f:b4:ab:dc:0a:c9:f0:be:a7:f0:7d:d2:
3f:44:d2:8c:83:af:3a:bc:09:3c:2f:1f:ab:93:77:85:92:b8:
f9:3d:14:88:68:d1:2e:e6:a5:75:39:1c:25:9b:d0:f2:5b:ce:
b8:76:94:de:6b:41:6f:10:b2:80:dc:b2:43:6c:59:b6:21:c2:
93:55:04:b4:b7:e1:19:79:9b:ae:72:1d:ca:48:cc:c2:a4:39:
3f:3a:4f:9d:6d:6f:f3:23:f4:5e:30:50:4e:f3:38:4c:d5:63:
8a:9d:fb:57:b6:bb:4d:bf:c5:3a:6b:28:2e:41:fe:f4:e2:fc:
cf:aa:03:db:cf:44:a7:a5:8b:c9:d1:0f:53:e5:2b:c4:a1:fb:
ab:37:3b:d0:d0:4e:b2:17:72:f3:df:69:fd:0e:db:c6:bc:27:
81:1c:ef:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4KmRRMhdNXLzwAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
NjEzMzc4ZTItZjM2ZC00MTdiLWE5NzktYjFmNWI5NDU3Yjg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiu7DUB+0wtCRtF8jiwwK9tV2FaH9ZjCv7DbU
KmDaJ82Iczu0zHHVAyAnz0DSw+4AD2hvHuXD3R6lN7AYR+EkVFBQI0mjyA3tJtof
TQcdK91nAd+BbvzAc9yiQxdG5GnyKvrSohKAGE9LAvb3KTfZaGCkBwPT4bCHYthn
p/e+hyuP1DbT6SmmuwdXL+gGUDDLbGigDsrj5Xju2Q7ZzpTH5WtCvyffx7O4c7YK
SO12r2fnaz/mjm/DnpSb62OUyZE1YR+wC2NykHnW1tH1P3r3XeBZPsIIohOp51Do
7efjIkKKkJetq39RqEu8JKREDLZFVHjWh8ORH6BaOTGyZKcYfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEtJZXZOUK9h312SZNaKDH8JOmOqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTBkNWYwMzgtY2IxNC0z
YTM2LTlkZjQtZDUxMjdhMjVkZmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokiAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMyiPvuDpzRomZu7+HM7acOc15dFjxKIEZrpRe7MEcJMdIeBYX2oZi6r
MYlJsSZAp3zkCOkYTlLwZS24voMRDe88KPce7XQlMMfas8mFMfgh0r0DrNzb9t4c
AYV9CQl30i+0q9wKyfC+p/B90j9E0oyDrzq8CTwvH6uTd4WSuPk9FIho0S7mpXU5
HCWb0PJbzrh2lN5rQW8QsoDcskNsWbYhwpNVBLS34Rl5m65yHcpIzMKkOT86T51t
b/Mj9F4wUE7zOEzVY4qd+1e2u02/xTprKC5B/vTi/M+qA9vPRKeli8nRD1PlK8Sh
+6s3O9DQTrIXcvPfaf0O28a8J4Ec78E=
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:18:42 2026 by rpki-client