
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f0dcdea7-f612-3505-8252-f58b2324d1c9.roa
File: f0dcdea7-f612-3505-8252-f58b2324d1c9.roa (raw, json)
Hash identifier: tM4EqNUnEzQaTBv3dQTR8K4+mRpsJ1MyDQT3YrUZw00=
Subject key identifier: 70:CD:D5:AF:90:0E:0E:3B:B9:B3:7A:80:45:AE:C7:7F:6D:AF:94:57
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584E059B99C06DDE45ACBC42DE00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f0dcdea7-f612-3505-8252-f58b2324d1c9.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 7155
IP address blocks: 172.243.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 13 Jun 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9b:99:c0:6d:de:45:ac:bc:42:de:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=64662b9a-ec3f-4d1d-b132-ea8122eb4342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9c:13:9b:08:ab:fc:4e:40:a5:36:55:f2:15:
9d:8b:ef:4f:a0:b3:8f:bc:cb:f2:3f:c9:f8:78:17:
5d:7a:90:d6:c1:d7:b5:68:e8:8d:98:74:8f:ed:53:
8b:97:dc:a7:00:d1:50:16:88:70:b1:e2:c9:d8:f9:
4d:9c:1c:ac:48:ae:9e:55:47:9e:67:18:02:b9:d5:
44:9d:2c:cd:b5:07:d1:57:64:57:9f:ff:ab:28:a0:
a3:ad:ed:e8:15:05:44:88:e8:52:c1:58:60:2e:33:
97:62:e5:52:82:3f:6f:ed:13:a1:e6:cf:6b:2a:74:
28:ed:5c:37:f4:dd:89:03:de:72:21:a3:63:ff:41:
56:55:c7:b7:16:fe:b1:61:8f:57:55:fc:11:20:4e:
f7:bf:0e:f3:5f:9d:4d:ae:1a:36:5b:08:46:9b:52:
77:a0:d0:89:c0:30:ad:60:85:19:59:32:66:6c:ff:
86:48:27:8f:0b:cf:58:a2:a4:62:8c:5b:b6:20:b6:
9c:e1:f4:4d:98:8a:f4:6a:2e:80:70:e6:64:0e:23:
f9:8e:9a:00:07:65:04:46:1b:2a:c8:85:43:09:c5:
65:65:42:4f:39:d9:0e:56:c7:c3:1a:30:73:8b:26:
dd:c1:ff:3d:90:34:d8:e4:3c:d6:7a:9d:bd:ad:01:
60:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CD:D5:AF:90:0E:0E:3B:B9:B3:7A:80:45:AE:C7:7F:6D:AF:94:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f0dcdea7-f612-3505-8252-f58b2324d1c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.22.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:15:a4:70:a2:4e:1b:1b:05:4a:da:38:32:ab:8e:0b:7e:40:
c3:9a:57:cf:31:c6:43:30:42:a5:ec:19:08:7a:ab:9c:dd:ca:
2e:b7:70:dd:36:50:28:8e:df:a1:6e:d8:b9:a6:cf:e6:80:4d:
99:be:95:1e:3c:65:06:8e:13:3b:60:d4:0b:60:99:c9:22:e9:
4f:b4:5c:ea:98:82:13:25:23:25:76:81:4e:c5:d4:4d:d8:30:
41:95:1a:bf:87:28:72:3d:96:ac:49:e5:ab:f3:0e:0d:c3:51:
57:b2:e0:cf:42:8f:42:d8:c4:05:af:6f:28:28:c6:37:a4:ae:
25:f4:45:f2:92:2b:38:45:4e:aa:1d:10:d0:f7:65:3e:52:c9:
0f:8b:25:f4:ec:f4:24:68:e2:0f:eb:32:b1:52:08:29:f7:b2:
28:2a:bf:f3:52:dc:92:8e:5e:0d:a5:e5:fb:39:08:8b:77:e2:
b4:94:8c:38:99:bc:9d:cd:b7:d2:0b:25:4b:a1:f0:23:d0:5e:
55:f6:ff:79:35:4f:0a:a0:3c:43:6c:cf:28:03:e9:4e:a0:63:
3a:bd:6d:20:93:bb:5b:d1:31:3c:97:7d:aa:72:aa:ba:09:4d:
be:b6:69:cd:3e:fd:0d:68:c8:8e:bf:02:16:43:12:05:07:65:
52:2b:0a:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm5nAbd5FrLxC3gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
NjQ2NjJiOWEtZWMzZi00ZDFkLWIxMzItZWE4MTIyZWI0MzQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJwTmwir/E5ApTZV8hWdi+9PoLOPvMvyP8n4
eBddepDWwde1aOiNmHSP7VOLl9ynANFQFohwseLJ2PlNnBysSK6eVUeeZxgCudVE
nSzNtQfRV2RXn/+rKKCjre3oFQVEiOhSwVhgLjOXYuVSgj9v7ROh5s9rKnQo7Vw3
9N2JA95yIaNj/0FWVce3Fv6xYY9XVfwRIE73vw7zX51Nrho2WwhGm1J3oNCJwDCt
YIUZWTJmbP+GSCePC89YoqRijFu2ILac4fRNmIr0ai6AcOZkDiP5jpoAB2UERhsq
yIVDCcVlZUJPOdkOVsfDGjBziybdwf89kDTY5DzWep29rQFgGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHDN1a+QDg47ubN6gEWux39tr5RXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjBkY2RlYTctZjYxMi0z
NTA1LTgyNTItZjU4YjIzMjRkMWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADwVpHCiThsbBUraODKrjgt+QMOaV88xxkMwQqXsGQh6q5zdyi63cN02
UCiO36Fu2Lmmz+aATZm+lR48ZQaOEztg1Atgmcki6U+0XOqYghMlIyV2gU7F1E3Y
MEGVGr+HKHI9lqxJ5avzDg3DUVey4M9Cj0LYxAWvbygoxjekriX0RfKSKzhFTqod
END3ZT5SyQ+LJfTs9CRo4g/rMrFSCCn3sigqv/NS3JKOXg2l5fs5CIt34rSUjDiZ
vJ3Nt9ILJUuh8CPQXlX2/3k1TwqgPENszygD6U6gYzq9bSCTu1vRMTyXfapyqroJ
Tb62ac0+/Q1oyI6/AhZDEgUHZVIrCjA=
-----END CERTIFICATE-----
Generated at Thu Jun 11 21:27:44 2026 by rpki-client