
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/635ef67d-d529-3cb1-bf93-ed1dc3c00b1f.roa
File: 635ef67d-d529-3cb1-bf93-ed1dc3c00b1f.roa (raw, json)
Hash identifier: CKeHubybXF0e5jshLeWIbyj6fhIU85D7/00g6KPP+WE=
Subject key identifier: 66:C1:6C:E7:F5:37:72:4C:25:03:3E:E8:8C:9A:66:34:52:DC:26:AF
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24DFA95E9F776AB7CE3CC4C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/635ef67d-d529-3cb1-bf93-ed1dc3c00b1f.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 70.41.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:a9:5e:9f:77:6a:b7:ce:3c:c4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=455bfbc3-5172-46b9-bf92-7b18f55b63d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c3:37:97:dc:77:18:37:a4:97:2d:14:ab:5d:
08:2a:65:78:d3:f0:8a:dd:60:ef:93:a4:70:51:b6:
e9:e2:fd:60:89:f5:41:88:a6:6e:c1:7e:12:0c:74:
e2:8a:ce:f8:a8:50:89:2c:75:26:bd:fd:71:2e:74:
1a:19:20:1c:d1:b7:28:5e:42:60:f4:1d:4b:7b:d8:
a4:25:fc:8f:c1:25:41:d6:2c:97:d6:fc:d6:60:b2:
db:3a:e1:8d:96:01:08:7b:30:72:a4:35:81:53:c5:
76:0a:50:75:af:ee:1e:0f:38:14:1d:5d:5c:f6:a8:
97:f9:7b:49:87:ba:58:7e:f0:3f:1f:db:9e:8b:34:
f5:42:0e:1d:70:c5:d8:7b:ba:7c:29:bd:db:c0:d2:
ea:e6:08:d9:a7:5a:93:e9:0b:59:19:91:68:10:26:
ae:11:83:31:92:43:4f:54:5b:91:ed:98:34:fe:81:
ba:ec:92:3b:96:98:32:af:fe:06:97:3a:cd:3b:df:
fe:14:db:9b:45:b1:4a:62:1b:c6:ae:e6:a9:3a:98:
98:7b:6c:22:e7:3e:6c:82:17:7e:a7:a7:b0:f5:2a:
54:7b:f9:64:d3:87:83:e6:88:48:06:6e:55:95:e7:
39:0d:bf:4f:2b:95:14:14:7c:cf:d2:bc:ab:21:55:
51:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C1:6C:E7:F5:37:72:4C:25:03:3E:E8:8C:9A:66:34:52:DC:26:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/635ef67d-d529-3cb1-bf93-ed1dc3c00b1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:b9:1c:f2:10:33:17:d5:a4:05:48:60:8c:7e:95:e9:40:44:
d9:b3:e0:c4:3c:8d:4f:56:49:69:d5:08:53:43:a7:6d:fc:7a:
cc:8b:fe:0a:25:34:ed:b1:70:93:78:a2:da:5b:be:28:b8:8a:
4c:81:d9:13:68:4d:08:e5:36:35:62:0f:8b:48:e3:07:86:ea:
ea:55:05:b8:14:01:3f:2c:b6:94:0a:58:c3:5e:e7:8c:57:9a:
77:78:51:a2:25:e9:52:c4:7b:af:77:c4:50:df:81:ce:6f:6c:
25:0b:e3:95:20:f0:d4:31:43:37:7a:5e:da:23:25:9d:3c:e1:
2a:69:05:87:f3:e2:45:5e:ba:eb:c9:50:d9:13:39:73:9d:59:
e0:03:3a:7a:74:fd:09:4c:57:d2:49:2e:57:c0:15:8d:6f:34:
17:d6:e1:76:4e:63:7d:46:42:75:8c:ba:b3:36:1d:c7:05:d7:
69:a7:0a:c0:e9:00:32:cf:08:1c:24:de:ad:79:7e:f6:83:41:
bd:e6:b0:40:82:46:3d:63:71:1a:12:24:6d:e6:20:5c:00:05:
f4:d0:c2:80:3c:5a:bd:a2:56:3a:84:5e:55:42:da:91:5a:24:
5e:56:a5:92:54:ee:1a:76:97:4a:86:27:5c:16:a0:e4:1a:35:
3a:eb:3c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:03:18 2026 by rpki-client