
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4a94422c-a0a2-34a9-ad6f-586fed650b7c.roa
File: 4a94422c-a0a2-34a9-ad6f-586fed650b7c.roa (raw, json)
Hash identifier: gHVBokengAOeQl236mmnc3Pz0eXqOzeWVBzrZQNi8/g=
Subject key identifier: 3F:FD:A7:14:16:A4:C6:1E:B7:C6:00:0C:1D:31:B0:83:48:81:DD:BA
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584EA79D903F493CE457DCA6B990
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4a94422c-a0a2-34a9-ad6f-586fed650b7c.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7155
IP address blocks: 72.173.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9d:90:3f:49:3c:e4:57:dc:a6:b9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=bdf0b9af-9b0b-4539-87f1-371946cedb08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4a:61:37:88:04:e3:de:45:fe:dd:8d:c4:c8:
b1:4a:b1:0f:a2:7c:d5:f1:2a:02:b3:38:73:8a:42:
8a:6d:b0:a0:bc:9a:a5:0f:b8:24:7e:4f:94:60:ef:
b2:c1:be:30:a5:8d:b9:2d:30:9f:41:21:d0:e1:fa:
bb:50:d2:18:f6:1e:3b:99:15:16:6c:4a:6d:79:f6:
49:96:7b:2a:3b:9f:79:d5:ab:92:6c:cc:8a:aa:4b:
f9:d2:1f:87:31:49:dd:00:36:4d:64:fc:2e:e2:a9:
ea:d9:12:f2:36:d2:e7:07:a5:25:c5:3c:ab:91:3b:
eb:84:d1:28:8d:72:cf:85:aa:7f:d7:38:30:e9:d7:
48:d0:fa:47:eb:3b:85:2e:dd:e8:05:85:ce:55:62:
ee:ed:7d:b8:cc:29:00:61:9e:30:21:12:03:03:78:
d1:07:83:b8:d6:fd:bd:e0:1e:56:1b:8b:76:00:db:
74:80:9f:36:fe:3b:30:9e:41:2f:36:e4:fa:c0:81:
04:06:d5:89:2c:a3:d0:7e:a4:89:b5:84:db:74:06:
f6:7d:28:85:bd:10:53:61:e3:16:64:a1:f3:67:68:
c6:cf:2a:9e:3f:89:9f:00:5c:2b:a5:0f:73:a9:f7:
be:fb:3f:ae:f4:6f:f7:04:f1:f6:ab:fd:de:b9:5e:
85:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FD:A7:14:16:A4:C6:1E:B7:C6:00:0C:1D:31:B0:83:48:81:DD:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4a94422c-a0a2-34a9-ad6f-586fed650b7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.178.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:21:33:fe:fc:c7:70:15:32:a0:c5:2f:e3:ce:32:14:10:de:
bd:19:10:33:6f:0c:d3:7a:73:5b:5c:cd:c4:92:5f:87:b3:83:
1d:00:09:70:1b:88:0b:aa:98:99:00:c0:7e:ca:c0:51:58:0b:
33:63:2e:3a:88:37:cb:c9:fb:f3:2d:1f:e6:cd:e7:a5:01:a4:
84:ef:5c:6f:2d:48:51:04:a4:53:ff:d8:99:c2:36:7b:ad:1f:
3e:4b:41:13:ff:26:0b:da:17:91:28:d2:e7:93:26:91:78:73:
31:fe:ce:ff:fd:bf:4b:bc:6a:13:65:47:e6:81:18:97:96:16:
6a:5c:66:c3:69:78:22:43:82:1f:c1:b6:cc:83:b4:f3:25:34:
66:ea:7f:ff:a4:f7:65:c4:89:9b:c9:fd:c2:bb:5d:02:86:81:
36:68:ca:86:53:a6:74:23:a7:ec:a8:10:b5:ee:11:99:3d:f9:
dd:6b:e7:1d:24:3d:8a:7e:15:ef:af:30:e7:0a:e5:b1:91:8f:
b5:59:93:9a:84:0c:27:98:5e:0d:0a:20:11:dd:29:dc:3d:ab:
b1:b3:e7:02:74:94:e0:b9:61:00:c8:92:bf:97:a5:c9:6e:5a:
dc:14:45:39:30:c0:0a:af:a4:68:bb:f3:64:7d:e8:07:2c:ba:
e0:09:fa:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnZA/STzkV9ymuZAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YmRmMGI5YWYtOWIwYi00NTM5LTg3ZjEtMzcxOTQ2Y2VkYjA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5EphN4gE495F/t2NxMixSrEPonzV8SoCszhz
ikKKbbCgvJqlD7gkfk+UYO+ywb4wpY25LTCfQSHQ4fq7UNIY9h47mRUWbEptefZJ
lnsqO5951auSbMyKqkv50h+HMUndADZNZPwu4qnq2RLyNtLnB6UlxTyrkTvrhNEo
jXLPhap/1zgw6ddI0PpH6zuFLt3oBYXOVWLu7X24zCkAYZ4wIRIDA3jRB4O41v29
4B5WG4t2ANt0gJ82/jswnkEvNuT6wIEEBtWJLKPQfqSJtYTbdAb2fSiFvRBTYeMW
ZKHzZ2jGzyqeP4mfAFwrpQ9zqfe++z+u9G/3BPH2q/3euV6FEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD/9pxQWpMYet8YADB0xsINIgd26MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNGE5NDQyMmMtYTBhMi0z
NGE5LWFkNmYtNTg2ZmVkNjUwYjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2yMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIYhM/78x3AVMqDFL+POMhQQ3r0ZEDNvDNN6c1tczcSSX4ezgx0ACXAb
iAuqmJkAwH7KwFFYCzNjLjqIN8vJ+/MtH+bN56UBpITvXG8tSFEEpFP/2JnCNnut
Hz5LQRP/JgvaF5Eo0ueTJpF4czH+zv/9v0u8ahNlR+aBGJeWFmpcZsNpeCJDgh/B
tsyDtPMlNGbqf/+k92XEiZvJ/cK7XQKGgTZoyoZTpnQjp+yoELXuEZk9+d1r5x0k
PYp+Fe+vMOcK5bGRj7VZk5qEDCeYXg0KIBHdKdw9q7Gz5wJ0lOC5YQDIkr+Xpclu
WtwURTkwwAqvpGi782R96AcsuuAJ+hY=
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:00:52 2026 by rpki-client