
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/552b455d-a8ab-371e-aa09-c9af65c1ed17.roa
File: 552b455d-a8ab-371e-aa09-c9af65c1ed17.roa (raw, json)
Hash identifier: //EMlzdsr7Bf3ZmwftsAs57jPhV9ryUHqlBqbwEIIRQ=
Subject key identifier: F9:AD:24:ED:D0:48:CB:E6:2A:01:29:25:BF:2D:03:4E:22:9E:65:1F
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584EA79F06A580B75E761851E900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/552b455d-a8ab-371e-aa09-c9af65c1ed17.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7155
IP address blocks: 70.41.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9f:06:a5:80:b7:5e:76:18:51:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=70acfccf-e0a4-4c08-aa5a-2f52f064eab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:06:d5:18:05:85:f8:e8:7f:fc:42:53:c9:7b:
fc:22:5b:7a:79:a8:5a:45:80:47:81:cb:fa:2b:be:
67:7c:cd:56:39:c4:d8:7b:de:3c:d3:62:f4:8d:39:
f7:b7:2d:e7:a0:83:21:24:4c:52:56:f8:a4:48:5b:
98:0c:1c:57:51:7b:59:e8:8d:55:5e:1c:f6:72:f2:
b6:f1:4a:fe:e3:64:02:d8:42:13:fd:5f:a2:27:64:
a3:4c:2d:65:f5:5c:e0:6c:c9:91:a9:6d:f7:f9:7e:
29:d8:bf:97:bd:36:a7:c3:74:39:4e:cd:3c:06:25:
5c:4e:05:fe:fa:b8:16:9c:f3:31:a4:31:b8:35:d8:
7c:92:3e:73:b8:e5:c5:8b:d0:da:b8:99:6d:36:0d:
9a:77:6a:24:d6:36:7e:47:d8:1a:11:af:75:19:19:
10:f6:38:21:ba:c5:8a:d4:a8:6e:52:d3:3a:2a:14:
bc:75:ce:60:a9:7b:ed:50:09:77:10:03:1c:f0:ed:
19:c7:e7:75:83:dd:c5:d7:b7:0c:d3:e8:5c:51:d6:
ea:28:3d:16:a7:d7:fb:fe:43:c6:81:f0:9e:a0:bb:
22:f9:07:24:73:cc:50:74:50:fc:b9:bf:e1:08:a6:
32:2c:ac:e1:a5:83:44:51:08:78:07:21:36:f2:7f:
eb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AD:24:ED:D0:48:CB:E6:2A:01:29:25:BF:2D:03:4E:22:9E:65:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/552b455d-a8ab-371e-aa09-c9af65c1ed17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.172.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:e0:bf:0e:e6:97:c8:6d:17:df:f7:bb:9b:92:91:9e:d2:d1:
3f:b5:04:dc:e2:8d:e4:fa:5e:03:26:bd:9b:3c:07:c6:aa:2f:
ad:45:f2:a9:17:99:93:23:07:4a:b9:2e:05:31:4a:e6:26:5f:
1b:fc:63:d7:f6:68:48:63:9e:4b:7e:e8:be:51:e5:e6:08:c6:
1e:a2:dc:d3:d0:45:60:23:83:5a:f7:4b:f2:59:ce:09:71:8e:
71:13:35:50:84:3f:cb:ca:e9:6d:a5:a2:0d:f2:32:a8:16:41:
07:b1:1b:eb:58:6e:20:df:bd:88:e4:ae:99:f4:ac:2b:96:c0:
76:54:3f:63:d8:89:f5:de:22:4d:c4:30:21:a8:96:63:58:28:
b0:89:20:33:18:26:5f:31:c5:bd:c7:81:39:e1:75:78:02:3d:
16:f8:cf:2d:5c:f7:cb:74:10:df:0b:65:88:ed:3a:dc:54:48:
3d:d4:55:38:3a:86:05:c7:a1:70:bc:54:0d:76:55:05:28:3a:
11:83:2a:98:ef:9a:c8:cf:75:09:bb:40:5c:ff:f7:47:bb:af:
55:31:ed:d6:03:93:c9:50:57:f1:c6:88:0d:3f:71:fe:7a:ea:
fe:d2:b8:ed:c8:c7:67:22:45:1b:fe:a8:15:6c:87:87:7d:4e:
26:c0:ec:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnwalgLdedhhR6QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NzBhY2ZjY2YtZTBhNC00YzA4LWFhNWEtMmY1MmYwNjRlYWI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAbVGAWF+Oh//EJTyXv8Ilt6eahaRYBHgcv6
K75nfM1WOcTYe94802L0jTn3ty3noIMhJExSVvikSFuYDBxXUXtZ6I1VXhz2cvK2
8Ur+42QC2EIT/V+iJ2SjTC1l9VzgbMmRqW33+X4p2L+XvTanw3Q5Ts08BiVcTgX+
+rgWnPMxpDG4Ndh8kj5zuOXFi9DauJltNg2ad2ok1jZ+R9gaEa91GRkQ9jghusWK
1KhuUtM6KhS8dc5gqXvtUAl3EAMc8O0Zx+d1g93F17cM0+hcUdbqKD0Wp9f7/kPG
gfCeoLsi+Qckc8xQdFD8ub/hCKYyLKzhpYNEUQh4ByE28n/rswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPmtJO3QSMvmKgEpJb8tA04inmUfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTUyYjQ1NWQtYThhYi0z
NzFlLWFhMDktYzlhZjY1YzFlZDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARimsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAPgvw7ml8htF9/3u5uSkZ7S0T+1BNzijeT6XgMmvZs8B8aqL61F8qkX
mZMjB0q5LgUxSuYmXxv8Y9f2aEhjnkt+6L5R5eYIxh6i3NPQRWAjg1r3S/JZzglx
jnETNVCEP8vK6W2log3yMqgWQQexG+tYbiDfvYjkrpn0rCuWwHZUP2PYifXeIk3E
MCGolmNYKLCJIDMYJl8xxb3HgTnhdXgCPRb4zy1c98t0EN8LZYjtOtxUSD3UVTg6
hgXHoXC8VA12VQUoOhGDKpjvmsjPdQm7QFz/90e7r1Ux7dYDk8lQV/HGiA0/cf56
6v7SuO3Ix2ciRRv+qBVsh4d9TibA7LE=
-----END CERTIFICATE-----
Generated at Thu Sep 10 12:40:15 2026 by rpki-client