
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6ff0a3db-e0f2-39a6-9465-bd9bd594b4dd.roa
File: 6ff0a3db-e0f2-39a6-9465-bd9bd594b4dd.roa (raw, json)
Hash identifier: 1OLD1AwVneDu4lm1TdkM3V7tnKr0wzLWefibDC0+fnA=
Subject key identifier: 8D:AA:91:1E:5E:98:79:1D:EE:D0:95:3B:67:B7:45:73:AC:4E:A4:68
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E0684C9D88C9EA3476B940
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6ff0a3db-e0f2-39a6-9465-bd9bd594b4dd.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 72.173.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:68:4c:9d:88:c9:ea:34:76:b9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=0bb63fa8-a35e-435c-9f52-c680141748ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:33:61:75:62:9c:26:61:77:a5:72:70:65:11:
01:1e:a5:f5:a5:0e:c6:72:6e:4f:1c:74:94:f6:59:
fe:98:01:91:49:5e:d7:e6:67:aa:23:2b:b5:42:10:
bf:82:50:d1:d1:f4:be:a9:9c:fe:5d:5d:be:1c:18:
64:3a:f9:b9:90:bb:11:a3:0d:d0:2f:ad:86:32:23:
ae:7d:26:17:af:68:4f:f2:8a:3c:bf:0e:25:a5:ec:
7e:d6:a1:70:e6:0a:c2:70:37:64:90:5a:f0:f4:f5:
66:70:76:7a:38:16:c4:3d:25:fb:ee:46:b5:77:21:
62:b7:8a:f4:b9:d7:fa:8f:d9:52:8c:9e:ce:8e:1e:
8b:7a:9e:09:04:46:73:2d:04:f3:31:2e:46:a3:fe:
2e:64:1e:95:d9:b6:21:a3:3a:38:99:a7:0e:88:3a:
21:94:cd:6f:df:86:59:00:45:db:40:c5:ed:c7:8f:
1f:94:d5:bc:44:c6:fa:bc:8d:b6:dc:45:5c:ff:5f:
d2:dc:f7:3e:d4:c4:05:cc:f3:9e:07:95:c8:6a:be:
f3:95:1c:a6:3f:d3:64:91:95:9d:47:08:b9:c3:9c:
f5:ad:c0:2f:c0:d6:b7:40:97:63:ab:3d:6f:f8:48:
8b:6d:bd:5f:b7:ec:5b:bd:b8:57:aa:be:ec:b5:2c:
a8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AA:91:1E:5E:98:79:1D:EE:D0:95:3B:67:B7:45:73:AC:4E:A4:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6ff0a3db-e0f2-39a6-9465-bd9bd594b4dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:3d:a5:73:0e:82:fc:d3:c0:33:bf:a3:ec:28:f9:d8:43:a6:
a9:f0:89:3e:6a:49:76:12:43:70:f0:0e:5c:e5:38:2e:d6:90:
cf:80:bb:d6:57:13:09:28:a7:97:66:29:34:79:41:34:05:69:
0e:b7:df:26:cb:e8:27:10:59:4b:a4:40:36:ab:20:9f:80:dd:
ba:83:8f:e7:0e:a2:5a:98:1a:a3:d2:5f:47:99:cf:7d:f6:b2:
64:86:d8:9f:6a:2d:ae:26:1d:a4:18:67:a9:9c:29:c8:89:79:
91:39:0b:1d:89:02:d8:6f:ab:cf:c5:19:f4:89:57:b1:20:57:
47:d3:d0:e3:9e:8f:8f:75:0d:c2:8c:49:62:74:64:24:72:0a:
c9:75:a5:dd:53:6a:c6:26:5e:30:71:ab:3f:b6:26:1d:e6:81:
d3:a0:5b:1f:4d:3d:06:14:df:51:ff:07:4f:dd:7e:9d:3c:99:
51:93:84:79:87:bb:b0:1d:93:c0:25:9e:fd:75:00:30:a2:af:
27:fe:7a:ae:8d:ec:0f:01:af:e4:af:44:1c:8f:98:02:5a:58:
dd:29:85:47:1b:51:80:08:5d:1f:34:71:c8:58:2e:b6:52:f5:
e5:8b:5a:a4:d6:7a:ab:cd:74:54:1c:ab:18:e9:2d:8c:4e:28:
28:58:67:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:26:57 2026 by rpki-client