
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c2f5f3bb-fa00-3151-8707-1d7d835666f2.roa
File: c2f5f3bb-fa00-3151-8707-1d7d835666f2.roa (raw, json)
Hash identifier: prfr2FSk5f70V/61k8OlvxIiY+KFro5hTpTK6sMdagc=
Subject key identifier: 32:95:66:EC:EB:36:C3:8E:AF:13:E7:F2:4F:BF:01:EB:EA:16:05:FE
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584E059C18ACDE6F17A1FD71D600
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c2f5f3bb-fa00-3151-8707-1d7d835666f2.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 7155
IP address blocks: 172.242.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9c:18:ac:de:6f:17:a1:fd:71:d6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=dac2204e-c570-4312-bc48-9e5bc566320e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7f:72:2e:bc:d7:7c:20:e1:5b:22:6d:c5:3d:
6c:f5:f0:15:12:f7:ae:1a:b5:d2:85:5e:6f:0d:d8:
0a:09:4b:42:79:41:b1:df:d7:50:30:5a:8a:9e:47:
65:38:69:76:77:39:42:7a:e2:96:8e:15:8d:cf:5b:
9c:41:ed:6e:3b:30:7e:9a:c2:08:ec:b3:de:1c:02:
18:be:fc:5c:da:4d:79:dc:e3:17:5e:ac:dc:08:ac:
01:60:22:6c:8e:74:ac:c8:8a:f6:22:d0:9e:fe:cd:
79:c4:b7:31:c3:37:96:81:c2:23:de:65:3f:2d:9e:
fc:1c:b1:73:26:e4:55:b4:f5:0c:4b:cb:a3:10:4d:
f3:3e:75:75:88:3f:6e:f0:48:42:ff:48:a8:24:64:
7e:52:cf:0c:c5:f1:83:28:7c:6e:1b:a8:f7:27:09:
8f:d6:6a:ad:fb:c3:a4:36:a9:91:ff:62:b4:0c:1d:
84:8d:a7:cb:43:70:22:36:da:e8:b7:d8:29:91:25:
8c:42:de:14:6d:06:61:a6:16:31:23:3d:1c:35:4b:
bf:13:d9:b3:5f:45:c3:f5:47:ef:38:30:3a:04:31:
25:9b:40:be:9e:63:e4:e6:82:8d:b4:59:02:39:9f:
a1:5d:a3:58:e5:1e:fd:80:d1:73:2a:55:0f:6a:5a:
d5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:95:66:EC:EB:36:C3:8E:AF:13:E7:F2:4F:BF:01:EB:EA:16:05:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c2f5f3bb-fa00-3151-8707-1d7d835666f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:d4:c4:12:17:74:af:ac:8f:2d:61:2a:71:c5:5c:26:02:2e:
b6:af:cb:6f:60:65:ef:43:76:69:fd:ea:52:45:c8:8d:23:30:
65:ab:ba:cd:43:3b:0b:a1:58:2c:d6:0f:20:ff:21:30:0f:02:
b5:dc:cf:0d:53:f0:72:15:90:19:96:95:11:bf:6d:7e:cb:1f:
49:0f:5b:0b:29:45:a2:a9:96:a8:1a:c1:96:d6:b5:e9:26:ed:
35:53:dd:93:14:95:ad:84:0f:b4:69:f0:01:b4:fa:94:0f:41:
50:1f:7e:cc:bd:25:c5:b5:2a:d1:d3:56:f0:14:b8:23:38:ff:
bb:10:b3:e9:19:70:ef:21:e3:13:ee:13:cf:74:fb:50:e8:be:
cd:f5:95:c7:16:eb:94:ac:18:c7:4e:fe:14:8e:7c:b9:19:fa:
48:58:f3:1f:74:d4:2d:db:a6:93:f3:ec:1e:88:2a:02:35:65:
13:0a:0b:58:e6:02:4e:ad:97:2e:4d:6b:35:1f:59:7c:2a:7f:
f4:db:b7:9b:46:dc:05:10:ac:56:f9:24:55:a6:ea:3c:d2:60:
e3:16:c6:ff:a2:23:40:f9:c1:96:68:19:17:e1:32:26:b4:0a:
5c:af:80:de:59:e3:58:f7:5f:63:18:e4:a7:19:40:fd:a7:31:
1e:e9:5d:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnBis3m8Xof1x1gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
ZGFjMjIwNGUtYzU3MC00MzEyLWJjNDgtOWU1YmM1NjYzMjBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX9yLrzXfCDhWyJtxT1s9fAVEveuGrXShV5v
DdgKCUtCeUGx39dQMFqKnkdlOGl2dzlCeuKWjhWNz1ucQe1uOzB+msII7LPeHAIY
vvxc2k153OMXXqzcCKwBYCJsjnSsyIr2ItCe/s15xLcxwzeWgcIj3mU/LZ78HLFz
JuRVtPUMS8ujEE3zPnV1iD9u8EhC/0ioJGR+Us8MxfGDKHxuG6j3JwmP1mqt+8Ok
NqmR/2K0DB2EjafLQ3AiNtrot9gpkSWMQt4UbQZhphYxIz0cNUu/E9mzX0XD9Ufv
ODA6BDElm0C+nmPk5oKNtFkCOZ+hXaNY5R79gNFzKlUPalrVlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDKVZuzrNsOOrxPn8k+/AevqFgX+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzJmNWYzYmItZmEwMC0z
MTUxLTg3MDctMWQ3ZDgzNTY2NmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABfUxBIXdK+sjy1hKnHFXCYCLravy29gZe9Ddmn96lJFyI0jMGWrus1D
OwuhWCzWDyD/ITAPArXczw1T8HIVkBmWlRG/bX7LH0kPWwspRaKplqgawZbWtekm
7TVT3ZMUla2ED7Rp8AG0+pQPQVAffsy9JcW1KtHTVvAUuCM4/7sQs+kZcO8h4xPu
E890+1Dovs31lccW65SsGMdO/hSOfLkZ+khY8x901C3bppPz7B6IKgI1ZRMKC1jm
Ak6tly5NazUfWXwqf/Tbt5tG3AUQrFb5JFWm6jzSYOMWxv+iI0D5wZZoGRfhMia0
ClyvgN5Z41j3X2MY5KcZQP2nMR7pXRQ=
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:10:47 2026 by rpki-client