
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e6a05a47-1c39-38c2-b4b2-7fe094a0ae54.roa
File: e6a05a47-1c39-38c2-b4b2-7fe094a0ae54.roa (raw, json)
Hash identifier: 0XUSxv+0QKqPCUw8wR+uR8Q6MD+e9mRIGVVyvceesp8=
Subject key identifier: 63:B8:19:7D:88:E6:6E:02:F7:64:36:7D:0E:2B:64:E1:B4:C8:46:93
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E0035542C6086FD446D780
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e6a05a47-1c39-38c2-b4b2-7fe094a0ae54.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 172.243.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:03:55:42:c6:08:6f:d4:46:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=105a54c2-0ff1-4856-8f54-4fae73a50dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:11:96:d7:4f:d5:c3:4c:8b:a7:18:62:fd:bc:
09:21:b0:83:a3:10:40:56:7a:b1:ec:4d:4f:d9:ec:
89:44:7d:97:eb:53:47:46:6f:e8:96:76:91:1c:6e:
5b:8c:49:12:ff:9e:c0:9f:3f:83:4a:c0:98:28:91:
66:68:73:c8:a7:9f:af:dc:c6:de:4d:a5:8f:4a:ba:
39:f2:c5:a9:aa:3f:ee:72:4c:58:32:9b:ef:85:0e:
3b:49:15:cd:c6:f9:11:3a:b2:94:c7:29:54:ca:ca:
4e:7e:ae:ad:81:08:d2:6e:51:07:87:e9:05:bd:8d:
1a:19:91:61:5e:9d:cd:02:3f:d4:37:ed:f0:5c:4d:
77:f7:fb:71:15:37:7e:87:86:80:dd:79:8e:b8:bc:
71:96:21:e9:cc:a7:02:80:ba:31:d8:81:82:5f:4e:
3a:50:80:b6:76:c9:e4:e6:7b:01:0b:d5:6c:49:76:
3d:a5:f3:94:56:c9:a2:e5:7d:cc:ca:c5:ff:a8:7d:
51:d1:48:33:79:42:a4:28:de:43:63:2e:cd:22:35:
85:93:cd:ff:f2:26:b0:8f:92:5c:75:81:dd:69:b3:
de:4a:cb:0c:00:53:c6:6b:fa:51:19:37:9e:d7:ab:
af:41:a9:f8:d4:75:a9:00:b0:4c:c2:ff:cc:2c:39:
6c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B8:19:7D:88:E6:6E:02:F7:64:36:7D:0E:2B:64:E1:B4:C8:46:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e6a05a47-1c39-38c2-b4b2-7fe094a0ae54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:67:b0:2f:a8:d8:b5:51:61:30:1b:c0:a7:3d:e1:5d:0f:dc:
60:d6:97:d6:75:0b:59:9b:c0:f7:34:dd:10:c9:0b:0f:55:aa:
fb:6e:ba:92:80:43:12:08:dc:24:2b:08:42:03:16:5d:a6:12:
3f:23:ce:e0:10:ba:94:19:cc:0b:a1:ac:45:c8:59:59:8a:03:
b6:59:a7:77:92:6f:9c:bc:e5:98:39:60:79:39:51:31:9c:c3:
d9:92:79:3a:9b:d0:8a:d2:5a:05:d0:be:78:dc:35:f1:33:1b:
bf:76:c3:03:99:76:e0:1e:a8:54:9d:79:aa:11:67:15:c8:b8:
4f:71:5f:64:7e:4d:09:6c:a9:83:09:d5:31:cb:1c:5a:b3:8b:
dc:ab:aa:56:65:4e:13:a9:b8:2b:30:a8:5b:5d:45:62:1d:4d:
82:6d:a9:e2:d9:87:91:67:00:9d:00:26:5e:a9:f9:31:b6:c1:
85:57:65:95:0a:db:73:8e:ff:52:31:0a:9a:09:e7:c5:14:65:
22:90:52:91:33:75:7c:2d:2e:8d:d4:09:a5:b9:55:20:1a:b5:
e6:4c:69:4b:a2:90:15:f8:54:eb:0c:d4:ea:5a:83:7f:97:b5:
1e:3d:4c:a6:58:93:86:5c:64:3c:7e:08:45:3c:0f:2c:7c:83:
13:04:a7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:43:28 2026 by rpki-client