
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1d59a3a5-771d-3da3-86dd-e6f0b8cd577a.roa
File: 1d59a3a5-771d-3da3-86dd-e6f0b8cd577a.roa (raw, json)
Hash identifier: Eo59dOnL1ch6hrNxeVbEzapuo0lhSm7rfWuCqU+20UI=
Subject key identifier: 8E:EF:B5:B6:01:34:D6:D0:D9:08:69:50:97:09:E9:D8:CF:E8:F9:42
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E06B227A77F9D0974A1E00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1d59a3a5-771d-3da3-86dd-e6f0b8cd577a.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 72.173.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:6b:22:7a:77:f9:d0:97:4a:1e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=23a5395c-e043-4fd8-ad3b-1a8e7f8b0c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:63:a9:91:33:fa:ea:11:fd:31:b1:01:12:1a:
66:95:9a:86:fa:e1:b6:71:32:4d:46:e9:c0:9c:88:
3d:10:fd:1b:7f:b3:e4:29:53:e3:6f:d5:60:b0:22:
24:a6:01:50:a3:a4:36:67:38:d2:c1:ce:f7:de:3f:
ea:ee:b9:57:b1:18:9f:ee:cf:20:40:bf:ee:fa:4c:
39:36:c0:a3:46:af:9b:7b:b2:ad:fe:96:0d:a6:18:
a8:52:67:b4:c8:78:fb:2d:cd:ac:23:c3:52:d1:e8:
5b:d8:bf:75:7e:55:da:ea:d7:e3:5c:54:72:b6:6d:
ab:46:bf:3c:7b:4e:8f:3e:eb:2e:07:c2:f9:62:20:
e3:0c:9b:52:3b:4b:dd:64:a7:54:92:d1:59:43:81:
ee:30:b4:d2:fa:38:47:38:3c:af:a4:f9:56:b2:74:
70:0c:f8:cb:0a:95:b9:96:5f:91:64:ae:f8:c5:fa:
0d:b8:f3:f3:99:ca:2c:02:02:fc:98:fd:de:36:18:
53:6e:16:36:86:08:6d:c7:e9:ed:8d:eb:b2:98:4f:
69:c4:b9:37:76:9d:74:97:bc:16:fb:9a:a5:07:d1:
3b:36:c3:3f:3c:ab:92:f4:e7:9a:d7:b7:9f:0e:63:
20:a7:b7:6b:66:17:51:d0:d2:ba:47:c3:f3:09:5e:
1c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EF:B5:B6:01:34:D6:D0:D9:08:69:50:97:09:E9:D8:CF:E8:F9:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1d59a3a5-771d-3da3-86dd-e6f0b8cd577a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ca:08:76:8c:0a:13:eb:8d:10:c6:98:54:39:82:be:99:f8:b7:
67:dc:6b:b6:4d:76:1a:03:8d:ba:d0:60:6b:a6:52:45:97:0d:
03:5d:dd:b3:99:cb:69:9b:d8:47:d9:ac:cb:61:e1:5a:16:0b:
db:fc:18:72:87:e1:65:0e:e0:aa:06:20:f9:8e:12:e8:6e:5e:
29:16:8b:3a:da:ed:df:b6:71:84:39:53:9d:a2:59:9a:74:e4:
75:59:7b:2d:4c:47:bc:16:03:84:44:b1:3b:5d:8f:0c:88:c0:
52:c8:0e:96:87:e7:c7:b6:09:73:a9:54:f5:88:cb:df:8d:7b:
40:7b:76:8e:45:87:3d:7b:ce:d7:37:54:40:ba:59:ea:fa:32:
9b:0e:07:19:ce:a0:16:88:78:d6:73:54:32:f1:f5:4d:b4:69:
dd:b5:67:8d:fe:be:1b:e4:1c:be:cc:f4:22:20:bf:6a:cb:92:
3a:62:cc:16:c4:c7:b4:5d:3d:96:cd:a7:ff:27:14:d7:71:68:
b8:78:43:3a:84:8b:40:84:d2:c4:a2:c6:2f:59:9e:15:f0:d4:
ff:9e:48:44:d4:22:ba:8d:41:71:64:d8:9e:23:4a:d7:6c:3f:
96:94:a3:15:24:1e:aa:25:51:f6:96:7b:13:80:39:6c:4b:4e:
ff:8f:f1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:11:53 2026 by rpki-client