
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2c466fda-aeab-3981-884c-527a4ca04060.roa
File: 2c466fda-aeab-3981-884c-527a4ca04060.roa (raw, json)
Hash identifier: kMUKKe85tLHUAbIZe5gO3fNFZr2aErjX/r97SSjq5aE=
Subject key identifier: 10:33:5A:D4:35:88:28:64:DF:24:E7:31:94:DE:94:68:DE:31:72:81
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24DFF61CEE8DD57D0997F980
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2c466fda-aeab-3981-884c-527a4ca04060.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 162.72.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:f6:1c:ee:8d:d5:7d:09:97:f9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=44b240b7-0e3d-4afc-afb2-e7416bf290d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c3:81:29:ec:7a:f8:88:68:e8:0d:05:c5:9f:
11:d6:13:43:c9:db:94:bd:03:23:8d:86:b5:de:44:
61:a7:dd:2c:50:ca:9d:72:c4:67:81:5a:09:8e:cb:
45:50:33:50:94:10:60:40:dd:93:e2:36:8b:1a:b5:
28:95:70:47:b5:71:e0:96:e9:60:57:4d:d1:e6:f5:
89:ed:29:13:47:b1:bb:25:28:fd:25:68:44:70:8b:
36:24:0b:29:4c:51:82:cf:e4:59:26:94:81:94:08:
58:f8:d0:34:9c:56:5e:cb:18:c7:26:3f:a4:ca:ee:
26:8c:f8:95:ee:83:2b:28:42:09:61:d6:52:4f:d0:
a7:ae:c7:cb:4a:be:f3:b7:ff:3e:7e:8b:2c:04:cf:
c3:6a:cc:8b:b1:c6:3a:78:03:f9:20:da:75:f8:17:
ca:e9:43:b0:ca:ef:0b:63:60:5d:ae:3f:f8:8d:69:
5b:ef:41:a0:93:99:58:d4:93:7c:38:f9:84:db:5c:
10:c0:48:4f:d7:13:ba:92:8f:f9:30:0e:2c:94:5d:
59:35:06:4e:fc:23:86:25:7f:57:8c:13:6f:d3:b0:
74:a0:cb:cd:74:72:ad:0b:9c:a7:39:2a:00:d2:15:
c7:f7:69:67:6f:67:aa:2a:26:84:45:fa:35:d9:6b:
d8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:33:5A:D4:35:88:28:64:DF:24:E7:31:94:DE:94:68:DE:31:72:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2c466fda-aeab-3981-884c-527a4ca04060.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
162.72.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:ba:c6:e1:8f:44:98:9f:c2:fa:80:19:a3:96:e1:c9:2b:5a:
21:d6:19:e2:8f:b1:38:03:5b:2f:13:dd:40:db:27:c2:12:c4:
5c:e1:7d:f5:b7:61:0f:0f:b7:5a:59:a6:55:b5:43:bc:a0:ea:
00:9b:2e:a8:df:9a:bc:dd:6c:9c:2d:20:5d:61:31:b5:85:ec:
1d:f5:9f:9e:55:25:80:f2:05:6a:0b:ce:9d:38:48:f4:2f:dd:
28:db:39:c4:d7:c4:fe:53:04:28:12:2b:61:01:d1:68:86:5b:
4d:a8:c7:e3:ee:ec:19:59:91:d5:2c:2b:14:41:26:b4:f8:88:
d9:c7:0d:9e:3a:f4:82:8f:2f:30:35:54:4b:4c:d9:8d:0d:2c:
02:02:20:29:1d:8b:af:8b:bb:84:e8:bc:11:cd:86:e3:a5:5c:
84:8f:93:07:0b:68:4d:16:05:57:2d:b4:c2:e4:88:a1:58:7c:
98:57:52:ff:7b:6b:57:3d:45:12:4c:87:25:72:cb:57:37:2d:
17:32:77:6d:8d:52:7e:1d:00:80:13:92:00:94:71:b7:6f:e6:
07:d7:ba:53:9c:0b:2e:ed:bc:59:25:7c:86:11:8d:d9:43:af:
45:ee:28:ca:b0:bc:2b:7b:2a:94:9e:55:1f:eb:7f:52:95:6b:
9a:53:5e:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3/Yc7o3VfQmX+YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
NDRiMjQwYjctMGUzZC00YWZjLWFmYjItZTc0MTZiZjI5MGQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8OBKex6+Iho6A0FxZ8R1hNDyduUvQMjjYa1
3kRhp90sUMqdcsRngVoJjstFUDNQlBBgQN2T4jaLGrUolXBHtXHglulgV03R5vWJ
7SkTR7G7JSj9JWhEcIs2JAspTFGCz+RZJpSBlAhY+NA0nFZeyxjHJj+kyu4mjPiV
7oMrKEIJYdZST9CnrsfLSr7zt/8+fossBM/DasyLscY6eAP5INp1+BfK6UOwyu8L
Y2Bdrj/4jWlb70Ggk5lY1JN8OPmE21wQwEhP1xO6ko/5MA4slF1ZNQZO/COGJX9X
jBNv07B0oMvNdHKtC5ynOSoA0hXH92lnb2eqKiaERfo12WvYSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBAzWtQ1iChk3yTnMZTelGjeMXKBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmM0NjZmZGEtYWVhYi0z
OTgxLTg4NGMtNTI3YTRjYTA0MDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokjuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG26xuGPRJifwvqAGaOW4ckrWiHWGeKPsTgDWy8T3UDbJ8ISxFzhffW3
YQ8Pt1pZplW1Q7yg6gCbLqjfmrzdbJwtIF1hMbWF7B31n55VJYDyBWoLzp04SPQv
3SjbOcTXxP5TBCgSK2EB0WiGW02ox+Pu7BlZkdUsKxRBJrT4iNnHDZ469IKPLzA1
VEtM2Y0NLAICICkdi6+Lu4TovBHNhuOlXISPkwcLaE0WBVcttMLkiKFYfJhXUv97
a1c9RRJMhyVyy1c3LRcyd22NUn4dAIATkgCUcbdv5gfXulOcCy7tvFklfIYRjdlD
r0XuKMqwvCt7KpSeVR/rf1KVa5pTXtQ=
-----END CERTIFICATE-----
Generated at Fri Mar 13 05:52:02 2026 by rpki-client