
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2e3fa8b0-6cf9-30c9-b4f5-135ae98f93d6.roa
File: 2e3fa8b0-6cf9-30c9-b4f5-135ae98f93d6.roa (raw, json)
Hash identifier: 2btkIDL5xbh8P8AEPDQd25V7UriKmRyMOofFsmD+McE=
Subject key identifier: 8E:50:56:C4:EE:C9:10:E3:06:BC:9A:19:18:6E:43:54:36:69:A9:A9
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24DFB8D47EC784720429A1C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2e3fa8b0-6cf9-30c9-b4f5-135ae98f93d6.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 72.173.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:b8:d4:7e:c7:84:72:04:29:a1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=3940b3b5-af0b-4a4e-953d-11d3c0613b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b6:46:a4:11:5c:d1:73:2e:fb:37:42:8f:5a:
aa:50:9b:20:13:3f:67:55:64:72:78:c8:40:c2:54:
9e:91:d7:6d:f2:9e:33:07:d9:08:24:16:5d:42:55:
21:4f:55:83:af:3d:42:29:17:b3:1d:94:09:7b:dc:
e7:2a:44:50:98:86:5c:a3:b5:56:8d:98:cb:ca:02:
d0:24:de:59:f2:d0:63:f9:14:60:b3:7b:ce:9d:36:
12:75:82:29:de:f8:92:37:21:dd:83:5a:80:f2:d6:
76:45:d0:5d:cc:0b:d4:af:8c:fd:d6:12:4e:d1:31:
9e:71:39:32:89:48:fb:04:b4:90:42:4e:dc:f3:75:
5a:d0:a3:02:ba:c1:fb:fe:4c:9f:22:e4:a3:96:6a:
ea:71:e4:21:27:5b:f0:55:5e:1d:dc:1e:36:73:12:
69:07:05:3c:f9:b4:8c:80:85:bf:29:d0:57:70:2e:
d9:70:fc:18:76:b7:b6:6c:71:70:49:83:f6:7e:a7:
6a:64:c6:66:05:15:7c:2a:13:65:12:72:74:e3:9e:
70:b4:31:0c:6b:41:08:48:b2:27:72:75:78:2f:d3:
8c:bc:28:56:17:18:65:6f:21:b9:1c:03:bc:fc:28:
a7:f5:c3:a7:b6:ec:f5:95:dd:16:9b:dd:f3:49:0f:
38:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:50:56:C4:EE:C9:10:E3:06:BC:9A:19:18:6E:43:54:36:69:A9:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2e3fa8b0-6cf9-30c9-b4f5-135ae98f93d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.62.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:23:99:7a:7e:1b:4f:bb:cd:bc:f6:30:fb:4f:98:f4:39:47:
83:9b:75:e5:85:38:71:a0:c4:55:cc:e3:a5:8b:ac:86:9f:8f:
b5:2a:60:1e:37:6a:6d:04:ec:de:64:d4:5f:19:40:c4:6d:eb:
bc:21:38:b4:b3:8e:13:e3:d5:81:e3:a7:b8:81:59:5e:4d:a5:
e2:78:f7:56:ca:96:57:f1:3f:d4:31:9a:ab:c3:f6:2a:e1:b6:
80:7a:6d:1f:90:85:7e:6d:ca:f5:8a:81:61:d1:00:2e:92:5a:
43:5a:98:ce:58:bd:3e:53:54:b0:bc:f8:ea:3a:12:68:a6:0d:
4a:59:f7:d3:95:27:48:f6:74:22:df:eb:1e:4c:e4:80:54:13:
98:9e:7b:29:e4:f2:86:6e:07:7d:ed:bd:f0:ca:80:d0:ce:b9:
27:c9:ea:38:6f:ef:b6:f5:66:d1:d5:24:f5:70:cf:b5:01:28:
8a:28:a2:a0:4d:4d:ea:5d:e9:55:c7:85:d3:eb:e3:65:90:1f:
24:fb:ab:ef:f8:31:ca:05:08:73:08:8c:c2:22:75:7b:96:2b:
43:9e:58:47:14:32:e7:0a:25:9f:29:aa:3e:e2:a5:a9:ea:81:
96:12:a1:d7:16:bf:2a:89:6f:96:df:f9:5c:15:88:02:e0:67:
d0:2e:90:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:42:33 2026 by rpki-client