
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0fe02132-0b80-36a6-a779-6399e4ac9fbb.roa
File: 0fe02132-0b80-36a6-a779-6399e4ac9fbb.roa (raw, json)
Hash identifier: zhlJuVhHEicT8aNVu7l5t1uZoUOeUyrUiEtRWdKkFmQ=
Subject key identifier: 71:0B:80:5F:91:CA:31:AE:70:50:1A:3D:4C:33:9E:A4:FE:09:82:11
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584E059C1869A489B745DBB43980
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0fe02132-0b80-36a6-a779-6399e4ac9fbb.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 7155
IP address blocks: 172.242.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 13 Jun 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9c:18:69:a4:89:b7:45:db:b4:39:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=3ca9b008-b53e-45d0-83be-05eeb5d6f638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:66:be:15:8a:54:4f:18:74:da:ff:8a:8e:ae:
1e:e9:ad:b1:88:a2:55:fb:0c:e4:43:9b:1c:1a:32:
50:49:d4:6d:96:00:d5:0b:f9:69:ad:b1:59:e1:50:
e3:5d:c3:23:6a:e3:f6:41:e1:39:a8:d6:08:f5:7d:
9b:07:c1:f9:72:14:7e:86:da:d8:81:31:7f:f1:07:
de:a5:dd:1c:11:94:87:1d:58:42:ae:94:2e:aa:3e:
02:c6:43:ee:4b:25:b5:3b:41:2e:9e:b5:ad:99:9e:
e8:7c:62:b0:3e:a9:dc:87:1b:ba:c4:05:57:02:ee:
29:68:b4:9b:6d:1a:08:7e:4c:3e:2f:6f:0b:be:c2:
78:4d:99:3d:76:cc:84:89:cc:0e:1c:fe:59:04:37:
ac:25:0f:e1:4e:6f:ac:61:77:37:4f:c6:eb:78:20:
89:01:04:da:a3:97:ed:b0:ac:08:7f:de:10:51:8a:
45:7d:fb:a0:51:40:d4:eb:e9:36:8c:7a:3d:ff:77:
e7:07:b1:b6:ca:47:83:6e:12:7c:41:86:3f:3d:a6:
79:07:40:2d:41:37:79:52:53:ff:79:b1:8d:f3:ed:
aa:d5:71:86:7c:0b:2f:da:fd:17:2d:31:4f:df:d9:
a2:2b:b0:ab:1b:1b:db:76:03:fd:b1:15:4d:d2:b2:
17:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0B:80:5F:91:CA:31:AE:70:50:1A:3D:4C:33:9E:A4:FE:09:82:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0fe02132-0b80-36a6-a779-6399e4ac9fbb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.185.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:62:9c:b4:b1:5d:97:dd:19:d3:1d:8c:41:b4:c8:2e:65:ce:
94:97:9a:aa:ca:81:0a:27:49:3d:1e:a8:5c:e1:37:dc:c0:ec:
c5:32:25:a9:dd:2d:72:b7:72:13:c8:19:80:be:5c:77:ad:e3:
70:75:10:ca:75:91:9e:25:f9:fd:17:69:fa:80:d2:82:4c:ff:
74:50:7c:37:bc:43:e6:28:d0:be:15:96:3b:4e:b4:75:56:33:
29:88:ee:d4:1c:8c:ae:94:1b:8c:86:9b:28:7f:38:04:14:af:
4d:ce:53:b1:12:2a:b2:d3:2d:e4:f6:df:3d:c5:fe:f4:f9:71:
22:50:d4:be:5e:70:e7:03:26:9d:f8:bf:5e:42:88:3f:70:7f:
9c:e6:a4:8f:98:63:0d:60:ef:11:6d:41:d4:b2:5f:f5:2a:81:
4c:d8:d4:e3:cf:a2:78:61:b8:fd:1d:c0:37:91:4f:16:47:ab:
04:fb:99:e5:97:44:0d:35:3e:18:6c:a1:0d:0a:a4:60:93:3f:
98:e6:78:0a:47:c5:b2:f7:bb:c6:9d:c3:0d:0f:c7:39:f4:67:
da:66:f7:63:83:82:3c:ed:ab:5d:cf:a6:f2:38:37:cd:4e:87:
00:bf:26:96:d5:c6:58:ef:3a:19:a3:92:a2:e2:a5:66:bf:10:
92:15:ef:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnBhppIm3Rdu0OYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
M2NhOWIwMDgtYjUzZS00NWQwLTgzYmUtMDVlZWI1ZDZmNjM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Wa+FYpUTxh02v+Kjq4e6a2xiKJV+wzkQ5sc
GjJQSdRtlgDVC/lprbFZ4VDjXcMjauP2QeE5qNYI9X2bB8H5chR+htrYgTF/8Qfe
pd0cEZSHHVhCrpQuqj4CxkPuSyW1O0EunrWtmZ7ofGKwPqnchxu6xAVXAu4paLSb
bRoIfkw+L28LvsJ4TZk9dsyEicwOHP5ZBDesJQ/hTm+sYXc3T8breCCJAQTao5ft
sKwIf94QUYpFffugUUDU6+k2jHo9/3fnB7G2ykeDbhJ8QYY/PaZ5B0AtQTd5UlP/
ebGN8+2q1XGGfAsv2v0XLTFP39miK7CrGxvbdgP9sRVN0rIXpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHELgF+RyjGucFAaPUwznqT+CYIRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMGZlMDIxMzItMGI4MC0z
NmE2LWE3NzktNjM5OWU0YWM5ZmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPK5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFxinLSxXZfdGdMdjEG0yC5lzpSXmqrKgQonST0eqFzhN9zA7MUyJand
LXK3chPIGYC+XHet43B1EMp1kZ4l+f0XafqA0oJM/3RQfDe8Q+Yo0L4VljtOtHVW
MymI7tQcjK6UG4yGmyh/OAQUr03OU7ESKrLTLeT23z3F/vT5cSJQ1L5ecOcDJp34
v15CiD9wf5zmpI+YYw1g7xFtQdSyX/UqgUzY1OPPonhhuP0dwDeRTxZHqwT7meWX
RA01PhhsoQ0KpGCTP5jmeApHxbL3u8adww0Pxzn0Z9pm92ODgjztq13PpvI4N81O
hwC/JpbVxljvOhmjkqLipWa/EJIV728=
-----END CERTIFICATE-----
Generated at Thu Jun 11 21:25:51 2026 by rpki-client