
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dfd6560a-3fd0-307c-984a-c9e12d68fd5d.roa
File: dfd6560a-3fd0-307c-984a-c9e12d68fd5d.roa (raw, json)
Hash identifier: hAjyVbfPbJIB483xTaGV6pfggxvUC1xqd+sKZCrsF/s=
Subject key identifier: A6:30:15:6A:E1:A6:0A:98:3B:5E:69:3A:7C:48:53:ED:FE:89:E3:63
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E062A992385D7A87A84B80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dfd6560a-3fd0-307c-984a-c9e12d68fd5d.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 70.41.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:62:a9:92:38:5d:7a:87:a8:4b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=29c34be4-f158-4f84-8716-bd044ebb1adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ad:bc:ce:89:10:f6:98:43:4d:22:3b:94:61:
b2:b6:86:1c:d5:7b:6c:58:4e:dd:f1:d0:55:ad:db:
94:1a:d3:85:73:f4:3f:05:73:06:01:1c:f2:21:fa:
54:66:72:6b:67:21:ea:00:de:14:e2:4e:c7:76:f6:
56:54:f3:43:31:d1:2d:51:fa:cf:c9:2c:3d:fb:df:
8e:e8:f3:42:6e:86:64:02:45:92:3a:da:79:12:15:
de:74:fb:52:db:89:e7:08:5d:4b:d0:4a:db:6b:ba:
4e:40:f7:70:12:59:83:16:2d:38:13:4f:40:7c:7f:
be:42:6b:12:50:be:71:6e:35:5c:58:7d:3a:8e:56:
cd:74:fe:73:3d:5d:2e:ef:69:ce:17:a2:c7:0b:0c:
dc:ab:3b:d6:85:77:b1:33:9a:2a:1c:e7:f0:f9:53:
65:e1:bc:ed:e3:96:96:d6:bf:00:06:ac:54:b6:8a:
42:4c:5f:98:fc:11:d7:ec:98:1f:8c:73:c3:fa:e7:
2d:67:d8:0d:0d:5b:db:5e:5d:3d:c8:e0:f2:2c:3f:
f3:12:2f:98:91:8f:4c:f8:91:c7:db:36:e8:4c:33:
03:db:c6:7c:38:49:67:16:27:5a:cf:22:7f:e8:cf:
20:12:99:03:31:6d:5c:56:61:a2:8a:fe:1e:45:f7:
7a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:30:15:6A:E1:A6:0A:98:3B:5E:69:3A:7C:48:53:ED:FE:89:E3:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dfd6560a-3fd0-307c-984a-c9e12d68fd5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:45:e2:16:88:13:83:75:8a:c9:4d:3f:34:12:dc:91:3d:4b:
56:51:0d:5b:30:2c:83:06:3f:f7:c3:b4:a1:24:2a:84:05:b7:
08:92:a2:e3:34:6d:a0:22:dd:08:d1:6c:48:6b:56:15:6d:71:
45:73:e3:9e:ae:2e:f7:4f:45:96:ae:11:f2:32:d2:36:38:ce:
6d:ea:52:40:64:8d:87:45:d2:8b:8b:a7:f8:ca:cf:7a:1e:30:
b1:8d:ae:ea:53:e3:33:94:e1:d7:c4:45:c7:7a:ad:67:02:5e:
a8:a9:bb:07:e4:5a:02:1b:6c:e4:b8:a1:bb:d9:b9:d6:ab:55:
83:8b:06:73:c3:19:5a:19:ee:29:df:c8:a3:9b:7b:cc:f7:4b:
5e:38:86:3c:00:f2:31:ea:e2:2b:fb:96:a9:78:dc:5a:51:ca:
1d:ee:cb:3e:7e:be:56:9d:ea:e5:39:89:0c:37:cd:f4:12:79:
b8:02:8c:71:ea:aa:91:7a:5d:8d:68:a1:37:ec:a5:8e:eb:1d:
82:df:da:cb:90:ad:70:d1:2b:cf:00:3e:e9:84:98:dd:0d:0e:
b0:48:57:b4:39:af:6d:af:65:ce:11:bf:ef:6c:e2:9c:2d:f4:
41:ba:42:62:fc:a3:2c:52:3a:26:43:ea:5a:4d:60:e8:62:d3:
a5:05:e5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:51:20 2026 by rpki-client