
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/188f921f-09e0-34fe-8a14-d0112f68652e.roa
File: 188f921f-09e0-34fe-8a14-d0112f68652e.roa (raw, json)
Hash identifier: eOMgf8aHK3BeyA92wIZAPX0WmOW3YRuvywCWx1EJ9PU=
Subject key identifier: 74:49:99:81:B0:DE:35:01:A5:7A:DC:D1:87:BB:3E:0B:6E:3E:CA:49
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E068695941A74321C766C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/188f921f-09e0-34fe-8a14-d0112f68652e.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 72.173.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:68:69:59:41:a7:43:21:c7:66:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=a4b3fa15-399b-417e-838e-27ee0fc08784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c7:4a:6d:9a:18:61:1c:29:b4:01:9b:c9:66:
e2:d6:49:a6:45:2c:5d:44:ba:95:1c:4a:7c:66:46:
a9:c6:0f:7b:56:75:ee:88:23:b1:95:17:47:8d:7a:
5d:a3:44:08:10:6c:0c:8e:f1:d3:1a:73:fd:02:26:
cb:74:43:00:3a:cd:a4:06:b8:bd:48:4f:6d:2a:69:
42:0f:0d:9a:11:9c:9e:3c:c8:15:55:4c:87:aa:7a:
1a:53:58:96:1e:ec:0c:d0:dd:e7:45:f9:24:54:43:
31:01:a6:16:74:a6:6c:3d:75:de:fc:b0:55:7c:ed:
79:20:bd:85:b5:00:d1:5e:53:92:29:7f:73:5f:64:
8f:f7:ed:50:ab:52:b3:b9:b9:6f:01:2b:e2:75:50:
f2:4d:4b:bd:f9:7a:d7:9b:29:2a:95:c0:d1:0f:61:
a0:51:9d:61:ea:cd:3e:50:b2:60:62:67:34:33:98:
6d:a0:74:d3:7e:4c:00:ca:40:03:b0:ef:6e:1c:71:
e3:81:83:fb:89:56:2d:1a:d6:72:fe:1c:d4:af:aa:
1a:46:6b:78:a2:9c:93:7d:14:34:90:b0:27:e5:a0:
b1:d5:a9:64:dd:ca:55:a2:51:83:44:c5:16:b7:5e:
b4:a8:5b:c3:c1:11:66:66:0c:21:7d:23:06:5d:dc:
f1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:49:99:81:B0:DE:35:01:A5:7A:DC:D1:87:BB:3E:0B:6E:3E:CA:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/188f921f-09e0-34fe-8a14-d0112f68652e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.172.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:f4:84:a5:72:36:f3:bb:34:a4:be:93:be:cd:1d:ba:f0:d0:
9a:c7:41:50:23:9e:4c:19:49:4f:2e:c6:9b:19:e2:e2:8f:83:
7c:25:6d:e5:3a:ab:4d:05:3e:65:4a:88:4d:a8:11:f8:90:e6:
c7:ef:80:60:67:c2:11:2e:93:4a:66:26:28:04:81:09:5f:24:
e3:ee:f0:78:eb:5f:9f:42:e6:b6:28:9a:6a:b7:01:0f:c1:a9:
dd:83:39:e3:8f:2c:94:27:0d:d3:17:e4:81:cc:c5:50:df:3a:
08:f8:2e:02:31:c4:ed:c3:3b:b5:a5:bd:4f:98:6f:42:66:6a:
b4:f1:99:a9:56:da:24:70:2f:58:86:ca:b9:3f:b7:df:e9:0b:
92:27:02:ef:77:3d:4b:98:49:cf:1d:18:c1:54:93:07:09:4d:
a1:2b:69:93:cd:c1:4f:cf:7c:90:a1:21:cb:4a:7e:95:bd:b7:
95:98:2d:f0:5c:46:ae:ae:31:c8:e1:2f:80:de:86:1d:d2:18:
fd:67:8f:c8:01:7a:ab:ac:16:ef:65:75:6c:44:f0:1d:97:83:
cc:8c:34:73:38:67:a9:d2:20:f1:40:ac:13:a8:89:eb:53:d9:
71:44:83:3f:ba:cf:1f:a6:af:8f:91:15:4a:db:a0:b5:bf:01:
6b:43:93:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4GhpWUGnQyHHZsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
YTRiM2ZhMTUtMzk5Yi00MTdlLTgzOGUtMjdlZTBmYzA4Nzg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8dKbZoYYRwptAGbyWbi1kmmRSxdRLqVHEp8
Zkapxg97VnXuiCOxlRdHjXpdo0QIEGwMjvHTGnP9AibLdEMAOs2kBri9SE9tKmlC
Dw2aEZyePMgVVUyHqnoaU1iWHuwM0N3nRfkkVEMxAaYWdKZsPXXe/LBVfO15IL2F
tQDRXlOSKX9zX2SP9+1Qq1KzublvASvidVDyTUu9+XrXmykqlcDRD2GgUZ1h6s0+
ULJgYmc0M5htoHTTfkwAykADsO9uHHHjgYP7iVYtGtZy/hzUr6oaRmt4opyTfRQ0
kLAn5aCx1alk3cpVolGDRMUWt160qFvDwRFmZgwhfSMGXdzxbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHRJmYGw3jUBpXrc0Ye7PgtuPspJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTg4ZjkyMWYtMDllMC0z
NGZlLThhMTQtZDAxMTJmNjg2NTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2sMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABz0hKVyNvO7NKS+k77NHbrw0JrHQVAjnkwZSU8uxpsZ4uKPg3wlbeU6
q00FPmVKiE2oEfiQ5sfvgGBnwhEuk0pmJigEgQlfJOPu8HjrX59C5rYommq3AQ/B
qd2DOeOPLJQnDdMX5IHMxVDfOgj4LgIxxO3DO7WlvU+Yb0JmarTxmalW2iRwL1iG
yrk/t9/pC5InAu93PUuYSc8dGMFUkwcJTaEraZPNwU/PfJChIctKfpW9t5WYLfBc
Rq6uMcjhL4Dehh3SGP1nj8gBequsFu9ldWxE8B2Xg8yMNHM4Z6nSIPFArBOoietT
2XFEgz+6zx+mr4+RFUrboLW/AWtDk1o=
-----END CERTIFICATE-----
Generated at Fri Mar 13 05:52:44 2026 by rpki-client