
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e620e2fd-02a1-39ae-aa3f-6fe650e2a4e3.roa
File: e620e2fd-02a1-39ae-aa3f-6fe650e2a4e3.roa (raw, json)
Hash identifier: U/4GhwZn5Qb+rfq6ibHWwRUuw3GQrs5d6L6/lShVtZ4=
Subject key identifier: C1:B6:CC:E6:21:99:6F:50:70:CB:C1:E0:BC:3E:34:2B:F5:00:65:4F
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24DFB174623CBB839D2AE180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e620e2fd-02a1-39ae-aa3f-6fe650e2a4e3.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 70.41.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:b1:74:62:3c:bb:83:9d:2a:e1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=d4ba77bf-329f-4557-a616-a09d22fdcec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f1:4a:42:7a:9a:ad:76:12:22:0b:23:d1:b2:
10:81:a8:e5:33:e7:c0:41:b1:c3:f1:f0:45:f7:64:
53:87:a5:6e:5a:df:9c:b8:9c:09:b2:3a:8e:21:2d:
80:98:30:2b:5f:b9:f8:f6:d0:65:26:92:2c:0b:32:
f7:fe:11:d8:40:e1:6f:11:af:f8:c1:1b:b9:da:ff:
a1:9e:8d:ed:e0:99:52:37:e0:20:94:34:40:e9:bc:
60:80:20:a1:83:49:91:ad:45:c9:56:ef:5d:5b:a1:
1b:0f:38:03:76:b4:6f:a2:4b:f9:69:44:00:59:dc:
87:01:41:ed:ba:fc:76:c8:b4:c6:06:01:47:e5:f5:
9b:81:b1:7f:5b:47:c4:46:be:d7:9d:bf:53:e9:b1:
ef:30:09:52:14:3e:d9:d3:88:ff:f0:91:01:b4:fe:
0a:f2:2c:84:f8:21:99:0e:d4:78:91:57:d2:84:ef:
24:b5:27:87:55:7a:0d:22:ce:24:a4:e3:fb:bb:2f:
e9:24:f3:24:51:de:02:c5:9e:98:5b:04:30:e7:0a:
4d:47:b2:a7:b9:94:34:db:c6:f5:17:af:2d:3f:25:
e6:0e:a3:e1:15:13:d4:05:f6:71:b2:93:fa:c1:be:
b4:3e:d4:d7:ff:3f:f0:b8:db:55:5c:27:b9:3d:e8:
37:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B6:CC:E6:21:99:6F:50:70:CB:C1:E0:BC:3E:34:2B:F5:00:65:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e620e2fd-02a1-39ae-aa3f-6fe650e2a4e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:9f:54:2b:09:82:23:34:be:3b:3e:47:2c:d9:bd:d1:85:f6:
1b:59:f3:44:a2:fd:40:f4:d3:01:3e:37:ba:34:ae:eb:b7:50:
af:87:7c:ec:18:bb:0e:36:f1:63:90:40:44:90:f1:2d:fa:8e:
84:59:fa:7c:0d:00:af:c6:99:72:b2:fe:bd:50:15:ba:43:fa:
e1:e4:8c:68:76:31:df:82:bf:05:23:5d:10:aa:8a:ec:2d:27:
a5:f7:07:55:6b:d3:b8:08:19:e8:8f:e5:09:89:ec:5c:e4:ed:
4e:1f:7f:9e:8a:06:16:2d:db:f5:35:66:40:c7:61:1e:27:85:
e6:eb:68:68:64:03:64:3b:a1:28:5a:ff:2c:a8:55:bf:d2:24:
73:0a:d1:a0:01:be:1b:4e:81:2c:e3:56:d6:b4:84:4e:dd:28:
69:c0:c7:69:24:ac:90:64:bd:6d:d8:64:d1:af:69:b9:ff:11:
ed:05:47:f6:88:a4:93:90:76:e6:09:8c:e8:8c:4f:19:90:92:
3c:2b:39:74:62:cb:9f:cf:9c:2e:74:4a:6b:e8:37:39:e3:43:
a2:dd:6d:6f:5d:50:60:69:5c:8d:64:28:a2:56:95:4f:6e:c7:
5e:7f:1a:3f:d5:df:87:64:b1:ba:a7:a1:62:68:a0:b6:fd:a2:
3d:37:de:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:49:41 2026 by rpki-client