
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e23734b7-d6a4-399e-83b8-e9e1699c7f78.roa
File: e23734b7-d6a4-399e-83b8-e9e1699c7f78.roa (raw, json)
Hash identifier: En2K59FUhiwdT4rIKAq72Rnr18n+wTxduH1JUnlgtT8=
Subject key identifier: 23:E4:35:EB:D7:AC:D8:41:6F:8C:AE:86:79:9A:FF:D8:91:84:99:F7
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24DFBDAD58D421F31CF59F78
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e23734b7-d6a4-399e-83b8-e9e1699c7f78.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 72.173.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:bd:ad:58:d4:21:f3:1c:f5:9f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=b794094d-6d49-4677-b14b-91e4d87bcfbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:84:ba:54:a9:03:e2:73:15:6d:c2:fd:51:d9:
62:01:09:bc:75:83:e7:a0:08:d8:7e:1d:08:4f:4b:
fc:cb:34:90:38:70:98:c8:34:d1:46:cc:c9:39:fd:
2c:2e:11:a3:9a:b6:1d:90:90:69:76:58:57:0b:17:
f0:d8:66:44:98:b0:8c:72:09:9d:8f:1b:ac:e1:11:
16:23:31:24:0a:a7:c1:71:1e:8a:0c:14:d3:34:76:
df:a4:22:41:ee:74:e1:e4:6b:0f:74:59:3e:f8:9f:
50:75:34:b2:46:fa:93:30:c3:39:b0:57:b2:c8:09:
35:83:08:9a:0a:a0:c1:d4:68:a7:5d:b0:fb:dd:59:
ff:96:de:b0:c1:99:7e:7e:2c:06:fe:56:f8:19:c2:
7a:3e:fe:6c:cf:f1:b8:20:ed:db:58:68:d7:6e:4b:
ff:0b:68:ca:d5:60:b2:17:93:4f:b3:82:03:4c:5c:
80:f1:98:34:a0:90:98:47:f0:ad:3d:35:1c:fd:ff:
31:87:bd:93:e9:e6:ce:9e:7c:86:1f:c1:53:8b:33:
1c:64:a8:94:11:69:81:6e:d9:98:09:f7:19:d3:d0:
fb:74:ff:cf:6d:fc:f8:c2:96:86:1f:91:10:44:95:
67:c3:3e:e0:b7:20:fa:eb:20:08:04:59:de:8a:9f:
36:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E4:35:EB:D7:AC:D8:41:6F:8C:AE:86:79:9A:FF:D8:91:84:99:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e23734b7-d6a4-399e-83b8-e9e1699c7f78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:ae:c3:0b:79:47:38:9d:db:1d:d3:96:ea:ad:ec:36:27:5e:
5d:ae:98:79:3b:10:bb:aa:99:94:ac:53:ba:c7:70:51:43:e6:
42:91:8c:fd:05:4a:40:73:f7:9d:15:46:3e:40:f7:63:5a:1a:
25:fa:9d:da:5b:90:80:bf:57:63:a4:96:c0:20:63:79:43:02:
b3:a0:95:e7:70:4a:4d:4d:60:c7:00:ac:8b:2e:9c:8d:ca:ba:
cb:7a:1d:43:69:34:a7:3a:27:a3:c7:2f:a2:06:a7:8c:95:8b:
79:35:c1:2e:b8:29:2a:b0:8f:d7:cf:cf:97:c8:a2:9f:9c:23:
ea:8c:ed:4d:d0:a9:cd:00:d8:6d:0f:e3:bf:02:f5:54:a1:13:
91:a9:86:b2:de:55:96:57:eb:f2:e7:75:08:7e:35:1b:8a:ab:
d0:b1:c1:27:a4:62:c4:3a:78:aa:04:f8:55:9c:82:bf:45:7f:
b0:5c:ec:c3:73:e7:b3:f4:83:f5:69:53:01:62:91:63:fb:89:
05:fd:63:25:7e:07:21:54:b2:69:40:d3:0c:a6:42:fc:b7:91:
53:a3:cc:11:ba:c8:5d:35:16:8a:69:fc:7d:ab:fb:4c:e3:62:
d2:06:8b:38:c0:be:e3:6c:cc:c4:b9:3a:ac:10:c5:12:a5:ee:
e1:99:da:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k372tWNQh8xz1n3gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
Yjc5NDA5NGQtNmQ0OS00Njc3LWIxNGItOTFlNGQ4N2JjZmJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5oS6VKkD4nMVbcL9UdliAQm8dYPnoAjYfh0I
T0v8yzSQOHCYyDTRRszJOf0sLhGjmrYdkJBpdlhXCxfw2GZEmLCMcgmdjxus4REW
IzEkCqfBcR6KDBTTNHbfpCJB7nTh5GsPdFk++J9QdTSyRvqTMMM5sFeyyAk1gwia
CqDB1GinXbD73Vn/lt6wwZl+fiwG/lb4GcJ6Pv5sz/G4IO3bWGjXbkv/C2jK1WCy
F5NPs4IDTFyA8Zg0oJCYR/CtPTUc/f8xh72T6ebOnnyGH8FTizMcZKiUEWmBbtmY
CfcZ09D7dP/Pbfz4wpaGH5EQRJVnwz7gtyD66yAIBFneip82vwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCPkNevXrNhBb4yuhnma/9iRhJn3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTIzNzM0YjctZDZhNC0z
OTllLTgzYjgtZTllMTY5OWM3Zjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3PMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI2uwwt5Rzid2x3Tluqt7DYnXl2umHk7ELuqmZSsU7rHcFFD5kKRjP0F
SkBz950VRj5A92NaGiX6ndpbkIC/V2OklsAgY3lDArOgledwSk1NYMcArIsunI3K
ust6HUNpNKc6J6PHL6IGp4yVi3k1wS64KSqwj9fPz5fIop+cI+qM7U3Qqc0A2G0P
478C9VShE5GphrLeVZZX6/LndQh+NRuKq9CxwSekYsQ6eKoE+FWcgr9Ff7Bc7MNz
57P0g/VpUwFikWP7iQX9YyV+ByFUsmlA0wymQvy3kVOjzBG6yF01Fopp/H2r+0zj
YtIGizjAvuNszMS5OqwQxRKl7uGZ2lw=
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:57:52 2026 by rpki-client