
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/936fa4c3-1957-37f6-8e85-0c16e33783a6.roa
File: 936fa4c3-1957-37f6-8e85-0c16e33783a6.roa (raw, json)
Hash identifier: HQ28fBXmCJibXSeNeognZhvIEK/KxUIZ+rMrBlyrtCY=
Subject key identifier: 3E:08:A4:90:F1:9A:34:C6:5F:AA:CB:06:DA:C2:12:B9:F3:8C:43:83
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24DFB5F33BAF911F33E36620
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/936fa4c3-1957-37f6-8e85-0c16e33783a6.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 70.41.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:b5:f3:3b:af:91:1f:33:e3:66:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=37fed95d-330e-4454-95d1-10fed78615b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:51:17:ef:31:cb:f0:2e:73:8c:a4:45:47:d1:
96:87:87:c2:91:be:2f:96:18:a3:33:90:6f:16:57:
0f:5b:2f:4d:5f:ba:d1:ca:69:59:86:31:73:90:72:
1f:44:1e:d1:75:0a:4c:08:c3:91:fe:e0:5b:e1:9f:
31:07:0f:49:1c:e1:a5:28:f0:5c:28:d6:27:7a:7b:
30:58:df:85:18:68:fe:14:4b:b4:f5:55:d0:20:18:
15:5e:5a:dc:49:40:16:5c:b3:57:08:1c:1d:df:ab:
de:3a:87:0a:e1:91:bf:61:d9:51:3b:cf:36:db:22:
45:09:5f:b2:a8:c9:78:ae:e8:45:01:b6:ed:69:8f:
d8:e6:48:3d:a9:82:96:40:10:9c:a6:19:86:d9:38:
63:cf:39:b3:59:50:0a:05:54:f0:17:d2:bc:a9:8b:
de:62:fb:af:c6:f3:84:9b:6b:53:ac:1a:b9:e1:87:
00:8c:fd:c3:f5:8a:7e:7f:4a:71:fa:17:3d:dc:b5:
ac:ed:52:d3:81:3a:cb:91:21:22:7a:0e:90:f2:8b:
45:c6:38:23:20:c4:68:66:12:83:c8:f6:8b:f9:7c:
7c:61:03:ec:c1:10:ef:d6:a1:fc:46:7f:fa:de:1b:
e5:56:59:11:fc:80:67:99:7c:b7:00:75:22:6d:af:
7a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:08:A4:90:F1:9A:34:C6:5F:AA:CB:06:DA:C2:12:B9:F3:8C:43:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/936fa4c3-1957-37f6-8e85-0c16e33783a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.227.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:f5:3f:5f:53:af:c5:2a:6d:7b:ea:20:e9:74:8f:ef:aa:f4:
d0:a5:71:c7:d9:f8:93:fd:91:9f:93:e1:91:58:85:a0:e7:de:
44:ce:b7:ea:81:79:89:6b:40:06:9e:71:18:97:69:09:18:39:
c3:38:f8:88:66:48:8d:b5:9d:58:d1:ce:14:61:01:1e:f1:36:
86:cd:b4:1e:cb:95:8d:38:c6:45:45:1c:72:30:24:f8:0f:fa:
8c:e1:eb:1c:f1:17:b8:61:0b:36:5d:bc:0a:a2:d8:3b:ea:28:
6a:0b:f0:46:e0:95:50:ea:46:63:b7:78:79:89:f3:7e:d2:e3:
0f:b4:e6:47:57:8a:5e:40:46:14:63:c2:d7:97:2b:6a:6b:8c:
46:7c:7b:2f:62:ce:21:6a:02:43:ff:8c:9f:cb:e8:31:b9:d6:
5b:42:b5:b4:01:0b:9f:8c:d7:28:cf:cc:d3:ed:12:f2:50:84:
1b:7b:f1:99:79:e5:1e:1a:9d:a9:5f:8b:88:b5:fa:e3:ff:36:
45:dd:aa:81:30:57:2a:83:c0:ef:63:fb:1c:d7:bb:8d:b4:cc:
58:44:9a:ca:65:8d:df:34:60:3b:7b:3c:43:39:66:5b:c2:70:
73:f3:a5:82:a3:af:eb:0d:e3:61:ea:db:35:42:e2:74:e4:46:
c9:55:e0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:01:34 2026 by rpki-client