
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/17beaaac-e961-30e1-89fd-dc056e3b1d78.roa
File: 17beaaac-e961-30e1-89fd-dc056e3b1d78.roa (raw, json)
Hash identifier: 4wgKtrbLpDveJoHV+3zP/vMakqOG3yy1Xf1W710+rYU=
Subject key identifier: 97:D1:60:18:7E:B4:52:B7:0D:09:BB:3B:0D:99:58:3D:B5:9D:A6:F1
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584EA79F0540433CFEB366AC7F00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/17beaaac-e961-30e1-89fd-dc056e3b1d78.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7155
IP address blocks: 70.41.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9f:05:40:43:3c:fe:b3:66:ac:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=8d4dc5f1-1807-4a25-9413-8fc686c271c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:26:03:9f:d6:ad:15:43:41:0f:16:ab:5d:68:
00:8f:91:2e:29:b2:14:31:5d:ae:75:03:f0:18:70:
e0:4c:a5:a4:78:6e:04:bc:3c:8a:87:21:22:29:60:
b7:7b:c5:32:84:53:87:43:4b:83:00:32:b4:19:10:
eb:2e:3a:09:c8:66:23:43:88:0e:83:5f:c5:22:fc:
fd:95:dd:98:82:13:c0:da:ee:2f:fc:b0:71:e1:7e:
65:af:4b:f8:f9:d8:43:a3:a5:63:f1:7e:d4:fe:4e:
7e:71:c4:ea:49:67:77:a7:52:bb:2e:99:4b:45:58:
d7:42:6d:da:21:e8:ae:5c:ee:a7:e3:11:fb:5d:7b:
2f:70:44:e9:b1:5f:2b:30:d6:a8:23:dd:a3:a4:67:
33:bd:30:e2:ed:13:d2:7e:d0:53:09:e3:98:c6:d1:
a4:3f:c0:c9:21:cd:f3:4c:78:8a:38:92:86:8f:10:
d3:19:ed:17:e1:93:ff:46:0c:45:97:39:55:87:ef:
14:fc:63:80:8f:93:55:78:67:87:58:c6:97:f8:28:
62:7b:8d:92:ea:ab:72:af:06:3e:2a:bf:95:e4:49:
fd:bc:d9:90:d4:49:de:74:76:20:05:9a:31:ad:aa:
1d:67:e8:ec:c4:a0:42:9b:bb:f6:d7:1e:23:e4:89:
28:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D1:60:18:7E:B4:52:B7:0D:09:BB:3B:0D:99:58:3D:B5:9D:A6:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/17beaaac-e961-30e1-89fd-dc056e3b1d78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:dd:c7:11:e7:1d:88:b6:a0:fa:e3:43:96:63:90:07:6c:62:
76:a4:0c:c0:32:fd:3f:c3:b6:1e:c9:95:38:27:55:96:95:7f:
12:e3:03:76:68:2a:22:9a:41:10:89:d5:63:43:6a:d7:c2:f8:
c4:82:ba:81:df:d1:d4:48:af:93:77:18:93:cb:24:cc:f4:d1:
49:ed:e2:3f:96:e7:15:ad:96:77:dd:73:38:66:1d:ae:7d:25:
eb:cb:61:1c:9d:e8:2e:6d:a8:79:7f:5e:56:c4:75:6f:94:9b:
a5:3e:cc:1f:bb:2e:8b:dc:cf:32:1e:fc:06:6c:41:1a:db:63:
2f:3c:b9:d7:1f:88:6d:0f:0a:11:f1:56:53:90:dd:b7:ee:d9:
d8:89:e6:d3:dd:db:f4:22:d1:d9:85:b5:b6:61:41:35:e9:1d:
21:b2:3e:4a:01:45:ff:6f:1b:19:bf:1b:09:a7:31:87:d0:4a:
7f:1d:18:32:b9:29:bc:a7:58:fe:c3:43:77:2f:aa:36:bc:b9:
43:ff:bd:05:62:09:1a:37:e8:78:32:0c:6f:61:20:ab:f1:b1:
b2:b7:58:79:7f:c5:0b:f0:04:be:e1:da:f1:bd:39:c4:be:07:
fe:ee:77:3c:12:24:a4:42:6d:84:6e:a7:1c:63:bf:11:eb:28:
0b:f6:57:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnwVAQzz+s2asfwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
OGQ0ZGM1ZjEtMTgwNy00YTI1LTk0MTMtOGZjNjg2YzI3MWMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyYDn9atFUNBDxarXWgAj5EuKbIUMV2udQPw
GHDgTKWkeG4EvDyKhyEiKWC3e8UyhFOHQ0uDADK0GRDrLjoJyGYjQ4gOg1/FIvz9
ld2YghPA2u4v/LBx4X5lr0v4+dhDo6Vj8X7U/k5+ccTqSWd3p1K7LplLRVjXQm3a
IeiuXO6n4xH7XXsvcETpsV8rMNaoI92jpGczvTDi7RPSftBTCeOYxtGkP8DJIc3z
THiKOJKGjxDTGe0X4ZP/RgxFlzlVh+8U/GOAj5NVeGeHWMaX+Chie42S6qtyrwY+
Kr+V5En9vNmQ1EnedHYgBZoxraodZ+jsxKBCm7v21x4j5IkoKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJfRYBh+tFK3DQm7Ow2ZWD21nabxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTdiZWFhYWMtZTk2MS0z
MGUxLTg5ZmQtZGMwNTZlM2IxZDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARimZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABndxxHnHYi2oPrjQ5ZjkAdsYnakDMAy/T/Dth7JlTgnVZaVfxLjA3Zo
KiKaQRCJ1WNDatfC+MSCuoHf0dRIr5N3GJPLJMz00Unt4j+W5xWtlnfdczhmHa59
JevLYRyd6C5tqHl/XlbEdW+Um6U+zB+7LovczzIe/AZsQRrbYy88udcfiG0PChHx
VlOQ3bfu2diJ5tPd2/Qi0dmFtbZhQTXpHSGyPkoBRf9vGxm/GwmnMYfQSn8dGDK5
KbynWP7DQ3cvqja8uUP/vQViCRo36HgyDG9hIKvxsbK3WHl/xQvwBL7h2vG9OcS+
B/7udzwSJKRCbYRupxxjvxHrKAv2V4g=
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:44:50 2026 by rpki-client