
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5ee095b8-59da-3921-8e77-c6e3de85af8b.roa
File: 5ee095b8-59da-3921-8e77-c6e3de85af8b.roa (raw, json)
Hash identifier: oo91HYhUkBD0AmTCVphI9VRzBQPq6G2LRNahTK1qABE=
Subject key identifier: 2C:74:8E:B0:67:EF:DA:7D:D2:FA:65:68:C4:D6:FB:64:61:68:80:E3
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24DFBC25F3B79ECFA0C933F0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5ee095b8-59da-3921-8e77-c6e3de85af8b.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 72.173.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:bc:25:f3:b7:9e:cf:a0:c9:33:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=bf88b069-4ba0-456d-98b8-db0701cba242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fa:79:04:56:44:ad:e5:33:78:79:0b:e8:1a:
d6:c9:eb:43:fe:e5:2a:70:6a:46:0e:41:6b:af:6a:
73:cf:4a:6a:61:6e:bb:d9:81:0a:52:ac:f4:09:8b:
1c:25:d2:a9:9b:28:32:66:56:17:3f:d7:00:7e:48:
b0:9f:64:4c:23:df:aa:a2:82:8a:fd:95:3e:61:52:
9d:0d:f5:03:be:c0:4c:e5:3a:24:27:74:05:74:bb:
69:06:e3:9a:8a:85:04:7a:31:8c:cc:3a:2a:3e:fe:
82:48:0e:e8:95:ec:4d:97:7f:6c:d3:6c:0c:1d:40:
4e:3b:29:48:fe:c0:c4:95:41:78:1d:90:65:dd:fc:
e8:80:da:bd:0e:ab:9d:b0:97:a7:71:c7:e5:49:73:
69:97:83:f7:1e:ae:8f:0d:71:0c:33:96:21:6e:10:
ed:89:87:25:7d:5a:07:5e:9b:9e:0e:47:56:5d:08:
ee:8f:c8:78:9b:0f:84:4f:bd:50:f1:ef:87:f3:3c:
b2:6f:78:d3:42:68:9a:77:0e:65:c7:3e:2d:41:76:
4a:10:1c:77:20:36:8c:be:bc:66:4b:08:08:ad:22:
e9:bc:7c:88:28:3a:64:e6:7f:10:d8:2f:0a:8b:00:
ae:ef:ca:25:8a:48:3c:a0:ae:0d:b2:61:6d:1f:46:
3d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:74:8E:B0:67:EF:DA:7D:D2:FA:65:68:C4:D6:FB:64:61:68:80:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5ee095b8-59da-3921-8e77-c6e3de85af8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.143.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:54:e3:7f:8c:e5:42:3b:08:83:78:d6:0e:0a:cb:ff:a2:b4:
4d:2e:ad:32:3c:28:eb:4a:7f:db:33:1e:04:fb:a9:42:6b:59:
bd:bc:39:6d:73:06:c8:ea:84:22:57:58:b4:3f:04:17:43:16:
c3:7a:7c:23:77:7f:04:39:3f:f0:52:50:1d:f3:0f:00:fa:85:
ac:c8:83:26:c3:78:4f:33:45:a0:57:05:0c:af:f0:a2:56:61:
db:fd:01:32:45:6d:1a:cf:29:9f:65:fd:d0:49:36:02:92:e4:
5e:93:a7:46:78:c8:3a:0d:64:6e:89:d8:6f:06:53:d6:40:c9:
13:07:8a:d1:af:96:36:cb:eb:18:d9:7a:6b:a5:09:21:0d:3c:
f2:d4:4b:c2:c5:09:ff:9f:e5:2e:9b:28:80:e1:db:4b:87:ae:
33:87:95:d1:78:b7:c5:d3:c7:53:45:5b:88:09:8d:f6:aa:43:
ae:a5:cf:82:4f:f0:c1:16:11:e5:8c:13:2a:76:b4:81:25:0c:
29:e1:a7:d2:a5:1f:a5:72:fc:cf:8b:3f:c0:d1:1a:93:b6:42:
04:4d:48:72:9e:4d:81:e3:c5:90:de:4f:ce:63:dd:54:bf:40:
fb:b9:f1:c4:8b:0c:5f:5e:63:7a:9e:ea:50:34:c9:c1:87:11:
27:c9:af:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:29:51 2026 by rpki-client