
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9bac2d5b-e2cf-3737-9287-1bdd916748a3.roa
File: 9bac2d5b-e2cf-3737-9287-1bdd916748a3.roa (raw, json)
Hash identifier: bkI9GusHKGCdRrETz/qlRilc9rD6PYlLJATme2Kk58E=
Subject key identifier: D4:3B:59:03:15:6C:1A:D4:58:AD:5D:C2:D6:F3:3D:32:A1:4F:24:2C
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584E059BE51A8536F2A82015FE00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9bac2d5b-e2cf-3737-9287-1bdd916748a3.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 7155
IP address blocks: 72.173.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9b:e5:1a:85:36:f2:a8:20:15:fe:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=a0008b3f-adfc-4c91-8642-f5b6cdeb0e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ff:1b:92:81:7f:33:d3:ca:72:2c:52:20:ad:
95:3e:14:72:4e:a1:72:41:a9:ea:ac:ec:8d:cf:2b:
37:b0:6f:eb:32:8e:33:e4:78:ec:09:00:61:60:e4:
1d:93:b0:37:51:c4:eb:02:03:1c:0f:57:28:e8:20:
41:9a:4f:f1:52:ab:3b:93:68:11:72:de:7c:f1:7e:
9a:14:55:ef:78:03:cf:39:ce:cc:12:c6:d0:81:55:
e5:ee:09:b3:a3:33:b5:27:0f:e9:2e:c4:a2:4e:70:
27:77:a2:18:1c:ba:bf:25:b8:57:5d:b8:4b:05:1f:
04:af:2c:80:0e:5b:7e:51:ce:2c:11:e4:af:84:6f:
a9:75:4d:1c:73:05:e9:4a:cc:c9:b2:9b:95:f1:d0:
30:d1:4a:54:e4:a9:66:82:e7:f5:f2:0d:21:2f:4c:
8e:f9:81:0e:3f:29:f4:4f:00:ce:3f:1b:8c:5a:93:
3e:df:99:d4:4c:8c:80:be:68:8d:c6:81:89:11:30:
85:c1:8b:99:b6:6f:86:0d:e6:37:11:b4:de:d6:8a:
de:c3:c5:2b:48:9e:d4:8f:7b:3e:88:fb:cb:a1:56:
16:bb:09:f5:45:06:0a:22:39:01:10:b1:c0:15:81:
0d:48:24:3b:fe:8b:9c:2d:e8:d5:59:69:03:56:95:
da:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:3B:59:03:15:6C:1A:D4:58:AD:5D:C2:D6:F3:3D:32:A1:4F:24:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9bac2d5b-e2cf-3737-9287-1bdd916748a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.144.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:a9:92:b1:79:d7:9c:4e:48:8c:16:62:61:65:fd:2e:41:65:
38:98:c3:32:3c:37:ca:37:6c:2d:97:87:1f:68:06:4d:73:cb:
d5:b3:ff:dc:6e:ae:9c:af:9f:f8:49:cb:ff:04:15:d3:a4:14:
89:8f:9e:13:c6:37:02:df:b2:1f:5e:f9:bf:8c:dc:4c:e5:6c:
3b:7d:94:02:48:68:04:c9:3a:92:6d:95:95:b4:6b:21:2f:06:
51:b8:51:10:70:c8:3a:28:b5:e2:42:f6:a9:9d:aa:45:80:e1:
36:fc:f3:bc:8b:90:d4:01:7f:11:7a:8f:0e:19:38:33:72:db:
15:47:9a:4d:61:9c:25:57:3b:97:be:75:2f:f1:e8:5d:32:b9:
7d:d8:84:0c:f0:31:cb:a6:7b:21:36:23:0a:47:c3:81:71:27:
f4:ef:53:f5:82:be:48:c8:48:8d:94:aa:44:4a:1d:95:88:af:
37:5a:c9:cf:ab:0f:4e:64:1c:64:c4:ec:e6:a4:bd:d9:80:bb:
3c:2f:a8:c7:c6:20:44:de:07:47:cf:54:07:08:11:19:f1:b1:
fd:c2:ea:99:04:9d:32:09:3c:1b:ef:c8:95:5b:e1:39:0b:f5:
35:53:37:c1:b1:89:7a:ed:60:97:04:60:a7:cc:27:ac:65:c9:
de:ca:97:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm+UahTbyqCAV/gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
YTAwMDhiM2YtYWRmYy00YzkxLTg2NDItZjViNmNkZWIwZTIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnP8bkoF/M9PKcixSIK2VPhRyTqFyQanqrOyN
zys3sG/rMo4z5HjsCQBhYOQdk7A3UcTrAgMcD1co6CBBmk/xUqs7k2gRct588X6a
FFXveAPPOc7MEsbQgVXl7gmzozO1Jw/pLsSiTnAnd6IYHLq/JbhXXbhLBR8EryyA
Dlt+Uc4sEeSvhG+pdU0ccwXpSszJspuV8dAw0UpU5Klmguf18g0hL0yO+YEOPyn0
TwDOPxuMWpM+35nUTIyAvmiNxoGJETCFwYuZtm+GDeY3EbTe1orew8UrSJ7Uj3s+
iPvLoVYWuwn1RQYKIjkBELHAFYENSCQ7/oucLejVWWkDVpXa7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNQ7WQMVbBrUWK1dwtbzPTKhTyQsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOWJhYzJkNWItZTJjZi0z
NzM3LTkyODctMWJkZDkxNjc0OGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAepkrF515xOSIwWYmFl/S5BZTiYwzI8N8o3bC2Xhx9oBk1zy9Wz/9xu
rpyvn/hJy/8EFdOkFImPnhPGNwLfsh9e+b+M3EzlbDt9lAJIaATJOpJtlZW0ayEv
BlG4URBwyDooteJC9qmdqkWA4Tb887yLkNQBfxF6jw4ZODNy2xVHmk1hnCVXO5e+
dS/x6F0yuX3YhAzwMcumeyE2IwpHw4FxJ/TvU/WCvkjISI2UqkRKHZWIrzdayc+r
D05kHGTE7OakvdmAuzwvqMfGIETeB0fPVAcIERnxsf3C6pkEnTIJPBvvyJVb4TkL
9TVTN8GxiXrtYJcEYKfMJ6xlyd7Kl5g=
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:46:27 2026 by rpki-client