
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/65bdf332-173b-3f95-87e0-e5fe62a8633a.roa
File: 65bdf332-173b-3f95-87e0-e5fe62a8633a.roa (raw, json)
Hash identifier: Pi/kJC6iNNrcgdCzLzOggeSwk2H9ER2KiaJkY06EuA0=
Subject key identifier: 67:34:64:C3:9D:A1:4F:97:21:63:B8:79:0F:F2:C6:94:79:34:FE:13
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584EA79D613515C43EE6E4F76E80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/65bdf332-173b-3f95-87e0-e5fe62a8633a.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 40306
IP address blocks: 72.173.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9d:61:35:15:c4:3e:e6:e4:f7:6e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=3df83727-9902-459f-9040-9bed2f10955a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:99:28:af:7b:52:7f:2d:e5:78:70:43:a1:e3:
c9:a6:4c:98:58:18:2e:b7:cc:3c:58:1f:65:54:93:
91:d3:86:f3:89:70:ff:05:53:f4:80:ed:42:b4:4b:
1c:02:96:1e:79:9c:92:50:7c:00:43:6c:a8:c0:df:
05:6e:c0:b2:3b:80:b7:62:72:61:a0:92:c1:67:39:
e4:83:06:6e:94:41:10:af:49:64:60:85:f4:be:a0:
67:97:da:de:f9:b3:cf:53:a4:d4:6a:5d:75:0e:5d:
51:f4:d4:c8:d9:ea:30:1c:77:3b:ca:a6:94:2a:9d:
a2:00:3f:f8:f3:68:c0:7a:e3:9c:fc:f9:4c:ff:1d:
41:e4:f4:1c:c4:77:c4:3c:57:a6:7e:cd:14:78:f8:
8a:88:15:fd:55:42:0b:d1:6b:91:b8:2d:c8:db:21:
94:63:57:f8:7f:be:53:9b:61:68:d6:2c:3c:cc:ef:
ab:cf:4b:01:84:69:bb:d6:ea:64:9e:f8:84:35:2c:
59:94:16:51:a3:ea:b0:86:af:cc:60:b4:28:67:10:
3f:f0:8b:dd:ef:6f:61:b3:b2:17:b8:06:49:bc:f1:
32:10:7b:a9:af:d4:f5:c8:90:e1:f4:31:2d:fc:5b:
91:c4:86:e0:17:8b:ba:12:87:b9:92:95:6d:3f:29:
5f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:34:64:C3:9D:A1:4F:97:21:63:B8:79:0F:F2:C6:94:79:34:FE:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/65bdf332-173b-3f95-87e0-e5fe62a8633a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.177.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:73:cd:0b:65:8f:da:88:05:69:e5:b3:b1:cb:b4:ee:ac:f4:
0e:63:9b:cb:47:82:b4:9e:f6:9f:84:89:a1:db:bc:d2:5c:16:
a2:e5:9a:4c:30:3f:4e:aa:87:05:74:b8:23:d9:1d:5d:37:42:
6d:90:e9:00:3c:1f:9b:87:30:09:f7:29:9c:8c:aa:7f:28:96:
db:ec:de:14:a7:42:e3:8d:55:fe:71:1c:eb:7a:be:12:30:fb:
b4:91:5a:ed:a7:55:14:58:66:a8:58:f9:7d:e5:e8:bb:92:27:
59:f1:3c:c6:cb:e6:5a:47:82:20:a9:21:04:0f:66:a6:74:e7:
63:56:ff:67:f9:7f:dc:a2:55:7f:3e:92:c5:c5:c1:dc:56:92:
38:83:05:19:3e:d7:17:11:d3:8c:62:92:28:73:b0:c4:33:0a:
d7:a2:e9:f3:29:be:ff:35:12:af:0c:c8:71:a4:e4:fb:98:b2:
f1:fc:b3:ab:a3:a8:a6:f9:b7:b3:ed:3b:4d:a1:c8:61:c2:1b:
c8:42:61:2d:b6:ea:56:d6:81:75:12:a0:5b:b7:c9:38:f1:6d:
01:22:1f:32:f6:8e:a6:dc:f5:3a:c7:66:04:6b:de:0a:b3:7f:
89:3f:22:a0:36:dc:32:75:4e:0c:e6:b9:9f:80:fb:d8:c8:d6:
4a:74:ca:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnWE1FcQ+5uT3boAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
M2RmODM3MjctOTkwMi00NTlmLTkwNDAtOWJlZDJmMTA5NTVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZkor3tSfy3leHBDoePJpkyYWBgut8w8WB9l
VJOR04bziXD/BVP0gO1CtEscApYeeZySUHwAQ2yowN8FbsCyO4C3YnJhoJLBZznk
gwZulEEQr0lkYIX0vqBnl9re+bPPU6TUal11Dl1R9NTI2eowHHc7yqaUKp2iAD/4
82jAeuOc/PlM/x1B5PQcxHfEPFemfs0UePiKiBX9VUIL0WuRuC3I2yGUY1f4f75T
m2Fo1iw8zO+rz0sBhGm71upknviENSxZlBZRo+qwhq/MYLQoZxA/8Ivd729hs7IX
uAZJvPEyEHupr9T1yJDh9DEt/FuRxIbgF4u6Eoe5kpVtPylfzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGc0ZMOdoU+XIWO4eQ/yxpR5NP4TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjViZGYzMzItMTczYi0z
Zjk1LTg3ZTAtZTVmZTYyYTg2MzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2xMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE5zzQtlj9qIBWnls7HLtO6s9A5jm8tHgrSe9p+EiaHbvNJcFqLlmkww
P06qhwV0uCPZHV03Qm2Q6QA8H5uHMAn3KZyMqn8oltvs3hSnQuONVf5xHOt6vhIw
+7SRWu2nVRRYZqhY+X3l6LuSJ1nxPMbL5lpHgiCpIQQPZqZ052NW/2f5f9yiVX8+
ksXFwdxWkjiDBRk+1xcR04xikihzsMQzCtei6fMpvv81Eq8MyHGk5PuYsvH8s6uj
qKb5t7PtO02hyGHCG8hCYS226lbWgXUSoFu3yTjxbQEiHzL2jqbc9TrHZgRr3gqz
f4k/IqA23DJ1TgzmuZ+A+9jI1kp0yoY=
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:15:02 2026 by rpki-client