
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e22e9c69-38d0-36a9-a457-71e0def02a42.roa
File: e22e9c69-38d0-36a9-a457-71e0def02a42.roa (raw, json)
Hash identifier: KOx0/giFDj53XHnSJKqBC285j1QsH8vk2D6rOU7fghU=
Subject key identifier: D8:73:B8:65:3C:60:45:F2:A5:A2:97:97:B9:AC:9A:5B:6D:92:FF:63
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E0B8F76AE37F9071B26400
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e22e9c69-38d0-36a9-a457-71e0def02a42.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 172.243.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:b8:f7:6a:e3:7f:90:71:b2:64:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=56abd330-100e-4c0f-b3f6-aad98e451a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c6:70:1e:41:5d:e5:ac:43:9d:f4:1f:88:71:
e9:9c:a6:b4:3c:77:60:68:a7:f4:30:d6:04:6b:ca:
8d:05:c1:8e:42:3c:42:32:c2:44:4a:29:96:ab:19:
0d:9a:46:c8:f7:4a:75:6f:56:4b:b6:a0:73:89:d5:
4a:ce:54:a7:f1:2b:bf:c8:e2:aa:e8:df:49:29:34:
ce:68:33:fc:c7:db:6b:9c:89:cd:05:a1:48:52:f8:
00:c0:34:59:24:e4:48:3a:b9:b0:45:96:04:57:2f:
b3:f9:7b:c6:ed:08:a1:91:44:4b:99:8d:4f:8d:61:
6a:3a:cc:4b:41:39:fe:e2:95:f9:10:d9:8b:42:2e:
ea:e2:29:80:f7:36:20:0d:b9:22:b9:a1:ef:62:a7:
36:50:8b:57:b9:b9:1b:4e:03:ed:40:f0:16:19:2d:
8f:0f:90:89:da:4b:3c:4d:3e:f6:36:da:0a:05:df:
ba:9d:57:d3:e5:d7:46:d5:17:ed:e0:bc:db:87:38:
92:79:8a:77:d3:71:49:23:c7:a7:53:1c:4b:34:88:
18:75:51:6a:94:e3:b9:4a:9a:c9:c2:e5:01:bc:74:
24:bd:d7:cb:28:7a:fe:d6:fb:22:d7:35:d9:77:4e:
6c:a4:e7:d8:00:69:7d:e9:82:96:33:3e:02:af:59:
7c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:73:B8:65:3C:60:45:F2:A5:A2:97:97:B9:AC:9A:5B:6D:92:FF:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e22e9c69-38d0-36a9-a457-71e0def02a42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.172.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:92:1c:6a:7a:ff:17:96:78:76:6d:fe:e7:74:a4:54:c7:1c:
e0:a3:8d:59:9a:6a:f1:4a:c2:da:7e:67:f6:55:0c:ce:8f:de:
86:5e:b2:33:20:52:c8:ba:33:d6:ff:19:b8:5d:0e:34:a4:04:
31:d1:08:2c:e7:7d:af:3c:42:d0:d4:e0:3d:b4:59:72:d0:d2:
ca:73:69:27:a5:55:d9:5b:54:39:24:e5:e0:58:d9:dc:46:df:
20:af:d1:9c:20:6d:c5:76:f5:e9:ed:ae:da:13:e0:fc:23:78:
24:d6:b3:14:e0:77:1b:b7:7e:13:47:95:93:e6:73:0a:4d:dc:
b2:72:d0:44:1e:f9:dc:a7:31:6d:93:13:a6:95:93:97:98:40:
01:77:5e:85:24:c5:09:96:d8:ef:23:65:ee:7d:50:30:c2:8e:
09:d5:aa:0f:a8:61:3c:fc:ef:cc:15:04:2e:fa:81:59:6f:da:
35:be:2a:11:38:ff:cd:ec:29:51:e7:9b:fa:ab:10:a4:90:3b:
31:de:63:58:0a:e8:55:84:59:07:3e:84:46:fb:15:72:42:78:
3a:e6:d2:17:94:d2:26:a4:cb:99:a5:20:0f:2b:08:7d:47:dd:
07:f4:7d:0d:9b:b3:88:f3:54:dd:52:f8:b0:91:50:18:0b:c6:
49:86:11:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4Lj3auN/kHGyZAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
NTZhYmQzMzAtMTAwZS00YzBmLWIzZjYtYWFkOThlNDUxYTczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicZwHkFd5axDnfQfiHHpnKa0PHdgaKf0MNYE
a8qNBcGOQjxCMsJESimWqxkNmkbI90p1b1ZLtqBzidVKzlSn8Su/yOKq6N9JKTTO
aDP8x9trnInNBaFIUvgAwDRZJORIOrmwRZYEVy+z+XvG7QihkURLmY1PjWFqOsxL
QTn+4pX5ENmLQi7q4imA9zYgDbkiuaHvYqc2UItXubkbTgPtQPAWGS2PD5CJ2ks8
TT72NtoKBd+6nVfT5ddG1Rft4LzbhziSeYp303FJI8enUxxLNIgYdVFqlOO5SprJ
wuUBvHQkvdfLKHr+1vsi1zXZd05spOfYAGl96YKWMz4Cr1l8swIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNhzuGU8YEXypaKXl7msmlttkv9jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTIyZTljNjktMzhkMC0z
NmE5LWE0NTctNzFlMGRlZjAyYTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALqSHGp6/xeWeHZt/ud0pFTHHOCjjVmaavFKwtp+Z/ZVDM6P3oZesjMg
Usi6M9b/GbhdDjSkBDHRCCznfa88QtDU4D20WXLQ0spzaSelVdlbVDkk5eBY2dxG
3yCv0ZwgbcV29entrtoT4PwjeCTWsxTgdxu3fhNHlZPmcwpN3LJy0EQe+dynMW2T
E6aVk5eYQAF3XoUkxQmW2O8jZe59UDDCjgnVqg+oYTz878wVBC76gVlv2jW+KhE4
/83sKVHnm/qrEKSQOzHeY1gK6FWEWQc+hEb7FXJCeDrm0heU0iaky5mlIA8rCH1H
3Qf0fQ2bs4jzVN1S+LCRUBgLxkmGEUI=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:29:52 2026 by rpki-client