
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/17beaaac-e961-30e1-89fd-dc056e3b1d78.roa
File: 17beaaac-e961-30e1-89fd-dc056e3b1d78.roa (raw, json)
Hash identifier: TLbG0HS/nMl0NLyXLGAGy+2yCz8k1ZWIpa4Gtl1DueA=
Subject key identifier: 39:A7:29:0A:7F:FE:26:28:5B:E2:C0:EE:58:87:D2:2F:C1:BB:A2:8B
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E05F4A85A93962873B4040
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/17beaaac-e961-30e1-89fd-dc056e3b1d78.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 70.41.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:5f:4a:85:a9:39:62:87:3b:40:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=d15af3a9-245c-4eb3-b1ae-045369e8ba1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:23:7d:d1:86:1d:5b:c9:3c:ab:0e:a8:d9:6b:
0a:1f:3c:dd:4e:db:b7:be:ef:fd:bf:e1:48:d6:17:
ce:35:f8:64:56:dc:73:44:fe:a8:4c:fe:93:7d:86:
be:c7:19:fc:fe:28:d6:c3:d9:82:77:5f:89:96:27:
e1:4b:01:d8:ec:7e:d4:8f:71:62:18:f6:26:12:9a:
0d:9c:42:2e:70:a0:78:83:dd:50:91:31:eb:03:34:
e7:52:ed:a8:f1:b0:97:e0:2e:7a:58:c6:20:01:cc:
0e:39:00:3e:6b:d6:1f:0d:68:08:f5:6f:dc:a4:26:
e5:fe:ab:6c:d6:4a:9a:11:7b:5a:ce:7a:e8:05:40:
60:b6:53:12:ad:ac:94:77:39:3a:26:c6:98:f2:97:
4e:c2:db:d1:87:c9:fa:14:41:b4:4b:9e:4b:4f:e4:
24:ba:b0:05:5e:f0:3f:93:31:d8:43:57:0a:6b:10:
37:b7:45:ba:4b:f6:31:c8:4b:cd:e7:6e:94:c0:fd:
2a:01:10:e8:39:e9:b7:0a:7e:cc:87:5d:c1:61:11:
79:b7:84:d9:19:5d:8f:9a:f5:9a:dc:51:4f:cf:45:
e7:7b:22:d3:90:91:06:2e:f8:71:c0:00:3b:c2:55:
23:0f:1d:4d:a6:11:54:44:d9:be:b3:ec:5e:f6:8d:
5f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A7:29:0A:7F:FE:26:28:5B:E2:C0:EE:58:87:D2:2F:C1:BB:A2:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/17beaaac-e961-30e1-89fd-dc056e3b1d78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c5:ac:ae:08:28:96:95:e7:f3:e8:70:71:f3:4c:49:44:e5:3d:
b1:29:df:0e:b8:3b:a9:3b:b8:92:6e:a1:08:5a:07:e6:b6:a9:
88:7e:f2:46:d5:da:5f:67:f5:be:2b:98:a2:33:9c:e8:4b:69:
40:1a:ac:97:44:3e:90:ae:08:bb:c9:fd:f2:db:62:8a:84:91:
de:4a:0b:27:1b:bc:99:fb:82:ab:9b:21:e7:f4:39:44:b7:25:
79:05:5a:a0:a4:d1:59:92:10:1a:2b:c5:89:8b:02:d8:6f:2b:
4f:35:44:50:9a:ca:08:cf:8a:98:3e:38:ab:fc:8c:15:51:a8:
de:87:f1:6f:e7:c7:29:1d:95:f3:27:5f:57:56:40:f0:89:02:
db:a3:d6:9c:b2:36:43:54:3b:78:ec:4d:eb:9a:fd:12:02:f8:
53:e4:48:0e:71:21:19:cf:1d:41:cb:76:13:18:1e:c0:88:43:
44:a7:74:c3:df:a7:40:cd:7e:d2:53:55:b0:ac:0c:00:eb:98:
07:ab:4d:c4:35:45:78:85:34:6f:4e:cb:b6:03:3e:d1:53:ee:
1d:5f:af:62:ff:54:ec:b5:2f:b2:d5:ca:98:ba:1b:91:28:b6:
15:f8:e7:e2:23:46:30:a9:2d:d7:d8:26:a3:17:4d:1c:b0:a8:
a1:e8:7d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:26:56 2026 by rpki-client