
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e955eb09-8f12-3934-854d-fb35921011e7.roa
File: e955eb09-8f12-3934-854d-fb35921011e7.roa (raw, json)
Hash identifier: Tayxsw8jEzCAw5m4vXuoCr5khRTtNPXRO5Gr3HyGVgM=
Subject key identifier: 29:14:1D:AD:DD:03:F4:AC:F1:CE:FE:81:2D:0F:20:5A:47:ED:1F:01
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24DFFFA4E917B21C08F91300
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e955eb09-8f12-3934-854d-fb35921011e7.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 172.243.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:ff:a4:e9:17:b2:1c:08:f9:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=3eebc330-02b9-4714-b70f-8e36f0e426db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1f:31:88:1d:1a:d5:31:4e:0e:da:0b:e1:62:
dd:12:50:e2:75:7c:1c:84:a3:53:14:b5:60:17:14:
c4:18:b9:99:c6:bb:ad:03:11:b4:c9:dc:5e:e2:6e:
2b:fc:bb:d6:b6:33:99:11:2f:3b:c2:04:ee:4b:cc:
ec:ae:75:28:d3:5b:33:3a:fe:49:fe:73:1e:06:a2:
7b:eb:af:6f:6e:2b:6c:4c:65:46:49:64:be:79:79:
81:f0:3c:38:ac:ce:c9:51:14:f5:c2:08:3c:55:1f:
22:4c:78:f0:58:a5:f5:8b:ff:69:98:f5:5d:18:f3:
04:64:96:c9:57:d9:f9:42:0b:f3:7d:20:d9:36:39:
55:2f:1d:a6:e3:98:37:94:18:37:92:07:ec:06:1f:
95:98:d7:73:e3:31:0a:eb:04:a1:d4:3e:c0:bc:8c:
7b:48:b2:8f:d5:66:4e:c9:1a:76:dd:17:59:19:64:
ba:88:d4:58:1c:5d:22:ec:50:5f:c6:a8:71:23:ca:
4f:74:43:5e:65:94:7c:e4:b9:2b:3d:7d:92:b4:db:
90:e9:6a:33:e8:e2:c3:80:b6:c1:e1:9f:e1:28:a1:
2b:25:88:98:83:a9:61:9f:be:19:02:b2:25:4a:47:
7e:14:b0:5a:24:71:44:ac:6d:1c:79:7e:da:e4:0d:
43:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:14:1D:AD:DD:03:F4:AC:F1:CE:FE:81:2D:0F:20:5A:47:ED:1F:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e955eb09-8f12-3934-854d-fb35921011e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.43.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:0f:3f:b7:84:7d:7c:22:c4:b9:72:6e:48:9f:0a:77:f6:c7:
a4:b2:8f:c6:fe:66:27:4f:cf:4f:12:19:fa:ce:7b:73:78:db:
fa:bf:8c:17:3a:d8:8f:d3:ba:e9:03:12:a3:80:9d:d7:00:2e:
ec:59:48:e5:d2:78:11:75:12:f6:24:ff:e9:5b:f9:05:67:29:
91:b8:3e:70:23:d7:ce:c9:4e:80:a7:77:76:c4:80:e1:26:c6:
0a:86:c9:7a:36:fa:dd:ad:eb:fc:2d:f8:fb:ba:1c:25:88:b4:
6a:00:7a:a8:00:b0:5c:d0:73:1f:d9:ef:15:eb:62:88:c7:3d:
33:77:eb:fb:3a:23:01:d8:4f:65:2d:02:cd:39:95:cf:6b:18:
ba:f9:20:29:ed:d2:f2:e6:b5:cc:e8:ba:78:38:a6:cb:6f:05:
e2:31:d5:ea:4f:4c:e3:24:50:07:5c:53:af:65:7b:62:66:93:
88:b7:82:5a:ff:fc:57:a2:af:a4:07:35:6f:47:dc:76:a7:a8:
53:b4:68:07:84:db:10:5b:42:62:02:b4:a0:ac:54:e9:65:20:
26:a3:70:f1:86:b6:94:48:db:79:a2:e6:e8:8d:54:5e:a9:21:
dd:3e:ca:f4:67:57:7e:fc:44:3a:9d:82:a0:b2:f6:0b:46:c5:
b3:12:ad:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3/+k6ReyHAj5EwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
M2VlYmMzMzAtMDJiOS00NzE0LWI3MGYtOGUzNmYwZTQyNmRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvB8xiB0a1TFODtoL4WLdElDidXwchKNTFLVg
FxTEGLmZxrutAxG0ydxe4m4r/LvWtjOZES87wgTuS8zsrnUo01szOv5J/nMeBqJ7
669vbitsTGVGSWS+eXmB8Dw4rM7JURT1wgg8VR8iTHjwWKX1i/9pmPVdGPMEZJbJ
V9n5QgvzfSDZNjlVLx2m45g3lBg3kgfsBh+VmNdz4zEK6wSh1D7AvIx7SLKP1WZO
yRp23RdZGWS6iNRYHF0i7FBfxqhxI8pPdENeZZR85LkrPX2StNuQ6Woz6OLDgLbB
4Z/hKKErJYiYg6lhn74ZArIlSkd+FLBaJHFErG0ceX7a5A1DYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCkUHa3dA/Ss8c7+gS0PIFpH7R8BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTk1NWViMDktOGYxMi0z
OTM0LTg1NGQtZmIzNTkyMTAxMWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACEPP7eEfXwixLlybkifCnf2x6Syj8b+ZidPz08SGfrOe3N42/q/jBc6
2I/TuukDEqOAndcALuxZSOXSeBF1EvYk/+lb+QVnKZG4PnAj187JToCnd3bEgOEm
xgqGyXo2+t2t6/wt+Pu6HCWItGoAeqgAsFzQcx/Z7xXrYojHPTN36/s6IwHYT2Ut
As05lc9rGLr5ICnt0vLmtczoung4pstvBeIx1epPTOMkUAdcU69le2Jmk4i3glr/
/Feir6QHNW9H3HanqFO0aAeE2xBbQmICtKCsVOllICajcPGGtpRI23mi5uiNVF6p
Id0+yvRnV378RDqdgqCy9gtGxbMSrWA=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:09:39 2026 by rpki-client