
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb51fa85-71e5-3173-a21a-b7f96e72eefa.roa
File: fb51fa85-71e5-3173-a21a-b7f96e72eefa.roa (raw, json)
Hash identifier: RzM1lQ1xK5rGkQpmeCY7YwSV8n4LARyvBTFqhu4kh+A=
Subject key identifier: 1E:6D:47:21:D7:4C:56:7B:81:1F:09:E5:83:E2:4D:3B:78:B2:EB:F5
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F49832D6126F3EA0DB9D1BA60
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb51fa85-71e5-3173-a21a-b7f96e72eefa.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 72.173.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 29 Oct 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:83:2d:61:26:f3:ea:0d:b9:d1:ba:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=05e77bfe-7576-43f0-8385-823bab149c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:78:c3:05:29:5a:c5:59:ce:0a:24:29:4e:69:
5e:ff:73:2c:6a:75:da:eb:f9:52:8c:33:97:e5:a5:
49:c3:b3:35:7a:f9:bb:32:90:5e:3c:77:a7:ac:b9:
d6:95:38:11:5f:5c:91:bc:f4:75:1d:5c:9e:c7:04:
94:f2:26:2c:fa:9c:be:6d:36:8c:a3:ce:14:37:8a:
55:7e:41:a3:5e:c2:b0:bf:7b:2a:6a:01:b7:b3:bb:
97:a5:6e:37:0d:54:fc:e7:ad:5a:f6:da:de:fe:85:
bf:91:76:8e:f5:62:e2:33:2f:c0:72:49:12:b6:22:
67:84:0a:ec:bd:85:98:dd:fd:69:6b:29:45:c3:05:
f5:92:66:2e:4a:6b:89:18:e3:fe:99:56:36:c1:b9:
e7:00:bf:cd:15:0d:71:4c:4d:a4:cc:b1:65:58:bb:
47:22:2b:b0:e4:d8:43:b1:14:ae:24:d3:13:3a:2a:
1d:7a:41:a2:a4:e7:09:14:aa:9a:c2:6f:2f:70:b6:
de:8d:93:ec:d7:eb:05:a1:20:fe:91:ee:cf:4f:48:
7b:66:67:cf:68:c1:c0:e8:4f:70:6d:43:dd:f7:04:
32:56:2c:d7:41:f0:3b:cb:cc:e2:e1:e1:0f:a5:f5:
d1:2e:51:5c:dc:6f:ed:3e:e1:73:2e:43:21:ed:06:
83:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6D:47:21:D7:4C:56:7B:81:1F:09:E5:83:E2:4D:3B:78:B2:EB:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb51fa85-71e5-3173-a21a-b7f96e72eefa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.164.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:59:e4:66:b1:fc:25:7e:50:b8:65:07:cc:c2:1b:20:09:bb:
dc:93:55:cd:32:34:42:cb:1a:4d:69:94:c8:ab:85:0a:0f:b5:
1c:cd:5e:57:8c:6c:1f:fc:bb:bd:f4:40:c5:84:55:8b:ca:3f:
27:e4:36:e6:a7:4b:de:46:81:4d:a5:cf:67:de:29:70:e3:ad:
7a:36:2e:34:74:16:24:c1:a5:46:af:d1:41:58:26:5a:fc:12:
94:c8:c5:52:1a:ff:5f:51:5e:84:fa:f9:df:ab:a8:b8:f0:80:
22:50:4e:28:3f:b0:8e:9f:c7:b9:5e:8d:fc:d8:9f:d1:e4:36:
f2:cc:21:5e:54:86:33:d1:87:33:b5:bb:7b:c5:af:74:e7:74:
0f:1b:aa:78:7b:ba:4c:d2:96:66:01:e4:31:5b:45:ed:d3:ad:
aa:3b:b6:1a:b7:f5:90:d2:40:3e:b7:13:a5:51:91:fb:46:65:
a1:94:99:fe:f1:d4:86:f0:2c:6a:d3:a3:4c:ae:64:aa:95:60:
12:ce:09:4f:58:6d:ca:dd:cb:d6:2e:e2:cc:4a:9c:24:95:5d:
11:1f:d7:6a:0e:c6:e1:68:17:26:fc:ab:ec:6a:db:a6:85:35:
04:7a:45:67:58:84:f2:b6:06:84:d6:b8:aa:2e:e4:62:77:84:
e0:98:a5:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jgy1hJvPqDbnRumAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MDVlNzdiZmUtNzU3Ni00M2YwLTgzODUtODIzYmFiMTQ5YzE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3jDBSlaxVnOCiQpTmle/3MsanXa6/lSjDOX
5aVJw7M1evm7MpBePHenrLnWlTgRX1yRvPR1HVyexwSU8iYs+py+bTaMo84UN4pV
fkGjXsKwv3sqagG3s7uXpW43DVT8561a9tre/oW/kXaO9WLiMy/AckkStiJnhArs
vYWY3f1paylFwwX1kmYuSmuJGOP+mVY2wbnnAL/NFQ1xTE2kzLFlWLtHIiuw5NhD
sRSuJNMTOiodekGipOcJFKqawm8vcLbejZPs1+sFoSD+ke7PT0h7ZmfPaMHA6E9w
bUPd9wQyVizXQfA7y8zi4eEPpfXRLlFc3G/tPuFzLkMh7QaD7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB5tRyHXTFZ7gR8J5YPiTTt4suv1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmI1MWZhODUtNzFlNS0z
MTczLWEyMWEtYjdmOTZlNzJlZWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH9Z5Gax/CV+ULhlB8zCGyAJu9yTVc0yNELLGk1plMirhQoPtRzNXleM
bB/8u730QMWEVYvKPyfkNuanS95GgU2lz2feKXDjrXo2LjR0FiTBpUav0UFYJlr8
EpTIxVIa/19RXoT6+d+rqLjwgCJQTig/sI6fx7lejfzYn9HkNvLMIV5UhjPRhzO1
u3vFr3TndA8bqnh7ukzSlmYB5DFbRe3Trao7thq39ZDSQD63E6VRkftGZaGUmf7x
1IbwLGrTo0yuZKqVYBLOCU9Ybcrdy9Yu4sxKnCSVXREf12oOxuFoFyb8q+xq26aF
NQR6RWdYhPK2BoTWuKou5GJ3hOCYpds=
-----END CERTIFICATE-----
Generated at Wed Oct 28 14:17:20 2026 by rpki-client