
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9bac2d5b-e2cf-3737-9287-1bdd916748a3.roa
File: 9bac2d5b-e2cf-3737-9287-1bdd916748a3.roa (raw, json)
Hash identifier: xmGqckbi8BI/vTKuB5z4rs5eQfgo2lvWfd6odfjU5bY=
Subject key identifier: 79:B5:3A:2F:44:F7:EB:A8:E0:E4:28:14:38:5B:B7:CA:B6:B4:A6:A2
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584EA79F18833810C9C17EBBC180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9bac2d5b-e2cf-3737-9287-1bdd916748a3.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7155
IP address blocks: 72.173.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9f:18:83:38:10:c9:c1:7e:bb:c1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=fa5f9225-b9da-4383-86e6-95e860c7cce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7e:3a:bc:49:dd:c0:b9:28:87:1b:07:1c:c7:
46:f7:60:9c:46:ec:e8:37:f5:4c:5b:30:69:4d:77:
9e:22:23:ec:a0:86:13:c1:5f:5a:ae:57:cf:18:72:
a4:c1:d4:6a:12:6b:03:ea:0e:fa:7c:9f:2f:8a:17:
72:0f:91:68:49:8d:f6:6b:b7:2e:d3:45:aa:1c:c6:
c7:84:be:d9:2c:41:3c:57:9c:6e:bd:09:df:c9:2d:
27:66:b6:1d:e5:b7:05:0d:dd:55:f2:21:1a:ac:83:
62:e6:f4:96:ff:46:3a:3d:a0:40:8e:5f:03:e4:01:
2d:fb:33:73:3a:c1:e5:02:05:aa:9f:7e:c2:6e:40:
30:8f:8b:86:2f:2d:89:7f:62:41:05:7d:da:16:f1:
a1:e1:e1:d3:4a:d5:97:60:ee:dd:c9:d5:ec:ea:31:
03:d5:84:6b:ea:64:5e:ea:b3:54:ae:b1:07:21:d4:
22:ba:25:bc:be:5a:dd:bc:4a:17:a1:a1:75:8b:b5:
9c:3a:76:db:9e:fb:34:a6:f3:74:85:4f:c7:d7:0c:
2e:4d:03:65:f6:52:64:1a:a5:9a:b5:0a:03:1d:81:
48:80:3b:3a:6d:ec:5b:3f:ee:ea:97:3b:66:74:10:
e7:28:94:9d:8d:b2:b4:6e:94:db:70:ca:3e:ea:01:
29:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B5:3A:2F:44:F7:EB:A8:E0:E4:28:14:38:5B:B7:CA:B6:B4:A6:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9bac2d5b-e2cf-3737-9287-1bdd916748a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.144.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:2d:38:94:59:ef:d8:a5:5e:16:cd:b0:37:77:09:36:5e:f6:
7b:7b:53:df:ed:57:2a:9a:bc:ab:1b:b4:3b:0b:2d:ff:de:15:
b0:47:ce:30:30:32:bd:48:20:f9:c4:f1:ee:ec:74:ef:a1:87:
c9:2d:18:8b:f5:3d:75:a3:b2:75:37:b2:37:01:4a:99:6d:31:
47:d4:93:4b:87:a0:35:fa:56:82:64:2f:88:1a:94:a3:be:4d:
87:4e:88:88:8a:33:c8:76:69:ce:0b:a0:97:e4:39:83:83:44:
70:0a:1a:38:be:17:2f:26:d2:71:9d:b7:61:66:1b:69:ed:3a:
2b:a6:22:8b:5c:29:fa:8d:d2:1b:f4:ce:90:f9:e4:ac:c9:b8:
2d:84:4e:2a:04:69:fb:ad:4d:8e:bc:33:fb:32:d7:f1:b5:11:
3e:bc:b6:e9:d7:0c:da:c1:d1:20:02:f7:96:78:4f:fa:fa:fe:
94:0b:4b:c6:4b:b5:39:46:d9:d9:88:fa:9a:c8:19:fa:bf:20:
8a:e5:f0:89:c5:bc:49:01:98:9d:a4:f3:e6:63:d4:b5:23:98:
f8:dc:b5:61:be:92:f0:9b:14:37:0b:0a:92:64:a1:78:1e:c7:
91:12:e2:8c:8e:ea:ba:29:a8:0c:19:0c:f1:f4:b7:1d:5e:03:
76:6d:0a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:15:21 2026 by rpki-client