
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/675039ce-cff0-376c-8b63-51645ec4d3ea.roa
File: 675039ce-cff0-376c-8b63-51645ec4d3ea.roa (raw, json)
Hash identifier: INDUKdkgdyxtQIpxR7l3uOS2/6xaS3C3/Z4wnhXIkg0=
Subject key identifier: F7:CC:57:B1:DC:4A:EF:F3:0C:B3:D1:F8:BB:BA:A0:23:AD:F1:AE:92
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24DFB789CD676086F4A03720
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/675039ce-cff0-376c-8b63-51645ec4d3ea.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 72.173.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:b7:89:cd:67:60:86:f4:a0:37:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=ec7282d9-28ac-4a9e-8d6e-37f00100cbe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:28:a9:de:d4:20:4c:e3:b2:bf:e0:76:27:c0:
d6:b2:4c:41:53:01:ec:67:f5:c0:aa:fa:52:e2:70:
a4:bf:25:b1:ae:c8:38:22:ae:87:22:23:f8:74:77:
17:ed:48:47:7c:d9:01:b9:d1:f4:84:9a:d9:47:02:
d5:3e:8c:b4:b9:af:02:50:9f:9c:d6:ad:7f:95:60:
23:49:55:94:23:df:be:02:94:22:60:e6:b2:d5:fe:
0d:02:2e:83:f5:9c:41:27:56:e8:8a:2c:c7:5d:52:
f1:18:bb:ad:44:7c:7b:a1:58:ae:71:d8:0b:6d:f4:
9a:82:66:7a:07:2b:a7:68:04:0c:0d:bc:9d:89:2f:
3d:6e:5c:39:3c:66:70:01:9c:93:fc:ad:d6:23:a9:
2f:6f:b4:5a:aa:0d:21:ed:7a:93:4f:31:84:ea:7c:
cc:ef:fb:9a:68:f4:f2:5b:44:e5:3b:c7:54:e1:e1:
43:66:bd:79:a0:8b:a9:03:c7:aa:c5:33:3c:bf:e7:
33:79:0b:b1:12:f9:a3:cf:1c:57:cf:90:71:0a:45:
32:9d:f1:0a:c0:04:84:01:31:89:12:29:50:87:78:
74:91:5b:e3:4d:8d:67:f9:84:70:12:b2:d6:e5:56:
61:27:2b:01:d1:7d:da:a6:16:b7:cf:5c:b6:a7:27:
53:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CC:57:B1:DC:4A:EF:F3:0C:B3:D1:F8:BB:BA:A0:23:AD:F1:AE:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/675039ce-cff0-376c-8b63-51645ec4d3ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:85:5c:ff:8f:9c:f9:36:3b:36:ae:ee:a4:d9:ac:42:47:47:
a9:0d:37:79:20:e9:ba:58:65:bb:66:e9:41:f9:70:a0:07:98:
53:7f:b5:b6:41:cd:7e:aa:99:00:76:75:07:0e:05:a5:94:ad:
f0:10:8b:21:53:07:a9:10:63:48:75:28:bd:00:ba:c6:7d:12:
67:4b:ae:51:18:c0:71:6f:f7:db:2e:1f:18:6e:13:e9:35:ad:
a3:ea:e4:f6:4d:db:34:aa:7c:a4:fd:1c:f8:ac:7b:0c:28:c4:
0a:c0:88:f5:3c:31:5d:51:51:57:12:90:fa:a8:02:35:56:9f:
c6:84:b4:36:14:83:5f:c6:0a:41:84:d3:fe:c4:e5:f0:01:62:
0f:c1:53:c9:19:10:ec:cd:54:63:3b:09:20:61:a3:cf:c7:6c:
29:bf:4c:2f:2e:d7:22:fe:29:3a:a4:d1:63:ff:b0:a6:df:b8:
b2:9a:e9:71:5a:79:04:16:fe:0d:19:47:aa:6c:0d:0f:b5:b5:
28:40:44:35:19:fc:39:03:06:40:c9:46:63:d0:01:fe:10:5e:
18:75:10:00:29:0c:f3:33:20:3b:ff:db:25:70:68:db:59:0c:
15:64:fd:11:a7:68:7f:1e:dc:40:9c:d9:4e:3e:1c:1b:13:5b:
80:8b:1e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:29:51 2026 by rpki-client