
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8fcbc406-b6e8-386d-9ced-54007cb22509.roa
File: 8fcbc406-b6e8-386d-9ced-54007cb22509.roa (raw, json)
Hash identifier: IIdBULD0oNG80w+/I6oImP03u//AoaRKsiqt9s/YwyY=
Subject key identifier: BE:9E:EF:A4:1D:F1:8D:AD:8A:2F:BC:72:BD:9C:C6:85:57:CA:E2:D1
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24DFF6B30E631FF413C2CB60
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8fcbc406-b6e8-386d-9ced-54007cb22509.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 172.242.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:f6:b3:0e:63:1f:f4:13:c2:cb:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=7bfee00f-be35-4707-90db-07f19f9e0bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c4:bd:82:0e:99:ea:33:e8:03:d5:ce:74:6e:
10:ad:2d:9d:bc:b6:de:85:85:b2:8f:a4:d6:ea:6d:
26:c1:d7:d9:fe:00:94:46:32:1a:03:7c:b6:e2:38:
00:c7:5b:2b:c5:8e:b8:bb:8a:cc:96:f8:ac:4c:2f:
1a:28:f4:0b:5d:35:fb:a2:b3:1a:43:a0:1c:6d:a7:
ca:5c:74:97:1c:31:a8:3a:8b:1f:27:17:17:a4:0b:
64:41:88:dd:bd:09:9f:ff:9c:c8:fa:ab:2e:46:8c:
99:3d:9e:af:f5:5b:cb:25:dd:95:c9:10:f3:3b:e3:
2a:07:06:19:21:b2:cc:95:60:88:ce:07:57:eb:e0:
5c:b6:30:c7:26:7f:be:d0:66:e2:4f:19:a3:14:06:
4f:b8:0e:31:2b:fc:d4:38:3f:96:6a:a4:79:14:e7:
28:36:3a:f1:bc:73:06:aa:1b:35:4a:6e:c0:47:da:
8b:a7:5c:0d:e0:47:c7:24:67:20:0c:89:55:e3:0b:
e1:24:6f:c2:70:3f:05:8c:48:b5:ea:eb:7a:07:6f:
10:75:01:10:43:a1:69:c0:b9:7e:a6:df:09:e2:32:
1a:b4:8c:91:47:3a:fd:dc:b7:ff:4f:f3:95:71:13:
51:26:bd:64:7e:5a:b2:4d:87:c9:9a:8d:6a:30:be:
a5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9E:EF:A4:1D:F1:8D:AD:8A:2F:BC:72:BD:9C:C6:85:57:CA:E2:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8fcbc406-b6e8-386d-9ced-54007cb22509.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:e9:1d:fe:3c:72:16:1f:f9:ed:9b:e1:af:5a:d0:6d:e0:c6:
c3:62:45:ff:04:38:2d:1a:a9:87:52:4e:2b:da:65:40:22:4d:
d3:58:36:f9:24:7f:4a:06:4e:a0:26:3c:e0:0e:25:f9:7f:24:
2c:42:a9:4f:a5:a1:44:3b:62:7f:46:bb:f1:ff:28:59:bb:f9:
82:88:1e:16:46:f2:1f:9b:76:ef:34:73:cd:2a:a2:0e:6e:cb:
8a:70:bb:f7:f1:d2:62:27:15:93:06:7e:02:65:be:43:8c:cc:
dc:f5:8d:0c:45:68:50:7e:8d:32:94:c0:d5:8b:4f:a8:47:69:
63:f4:3a:00:02:dd:73:4c:90:e0:e6:03:15:2e:a3:1b:f7:b6:
81:e2:e4:1c:42:30:c8:77:8d:7a:31:19:4d:47:b5:6d:0f:f2:
0b:fc:f6:25:b9:09:42:8f:cb:28:8e:82:c3:c1:68:e0:6f:fa:
0b:90:71:bb:c0:8f:f6:79:8b:56:03:ac:1e:dd:f5:65:88:d0:
0a:66:a8:1a:c4:cf:70:38:b2:6d:59:d4:3c:57:67:7e:5a:f4:
1c:c3:ff:5e:60:97:1a:67:b5:f3:cf:65:45:90:35:00:9e:85:
c7:3a:52:47:ee:bb:b7:3a:53:dc:63:48:ef:f2:26:20:34:af:
eb:7c:ee:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3/azDmMf9BPCy2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
N2JmZWUwMGYtYmUzNS00NzA3LTkwZGItMDdmMTlmOWUwYmNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMS9gg6Z6jPoA9XOdG4QrS2dvLbehYWyj6TW
6m0mwdfZ/gCURjIaA3y24jgAx1srxY64u4rMlvisTC8aKPQLXTX7orMaQ6AcbafK
XHSXHDGoOosfJxcXpAtkQYjdvQmf/5zI+qsuRoyZPZ6v9VvLJd2VyRDzO+MqBwYZ
IbLMlWCIzgdX6+BctjDHJn++0GbiTxmjFAZPuA4xK/zUOD+WaqR5FOcoNjrxvHMG
qhs1Sm7AR9qLp1wN4EfHJGcgDIlV4wvhJG/CcD8FjEi16ut6B28QdQEQQ6FpwLl+
pt8J4jIatIyRRzr93Lf/T/OVcRNRJr1kflqyTYfJmo1qML6lSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL6e76Qd8Y2tii+8cr2cxoVXyuLRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGZjYmM0MDYtYjZlOC0z
ODZkLTljZWQtNTQwMDdjYjIyNTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHXpHf48chYf+e2b4a9a0G3gxsNiRf8EOC0aqYdSTivaZUAiTdNYNvkk
f0oGTqAmPOAOJfl/JCxCqU+loUQ7Yn9Gu/H/KFm7+YKIHhZG8h+bdu80c80qog5u
y4pwu/fx0mInFZMGfgJlvkOMzNz1jQxFaFB+jTKUwNWLT6hHaWP0OgAC3XNMkODm
AxUuoxv3toHi5BxCMMh3jXoxGU1HtW0P8gv89iW5CUKPyyiOgsPBaOBv+guQcbvA
j/Z5i1YDrB7d9WWI0ApmqBrEz3A4sm1Z1DxXZ35a9BzD/15glxpntfPPZUWQNQCe
hcc6Ukfuu7c6U9xjSO/yJiA0r+t87mo=
-----END CERTIFICATE-----
Generated at Fri Mar 13 07:06:49 2026 by rpki-client