
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fe50e68b-6d4f-3eb8-9cb0-8db5ae9f8a6f.roa
File: fe50e68b-6d4f-3eb8-9cb0-8db5ae9f8a6f.roa (raw, json)
Hash identifier: wfLiNreBaBsN7FKSwFSer/kdDqYIRzBiJ3fZhpxS6Lg=
Subject key identifier: 62:CB:0C:A4:1C:46:14:0E:78:38:99:B0:E2:68:4C:89:6A:B6:C3:22
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E0691CCCAC4BF6E9F09D80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fe50e68b-6d4f-3eb8-9cb0-8db5ae9f8a6f.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 72.173.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:69:1c:cc:ac:4b:f6:e9:f0:9d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=1c8f3cd0-e2f3-4689-98e2-6e775127ed45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c1:a6:9a:57:01:2b:7c:af:db:df:2c:59:79:
1b:be:04:1b:b4:e8:20:f4:19:fe:0a:98:cb:53:80:
db:c2:7b:8f:6b:54:fc:8c:d8:0c:57:b9:c4:30:d2:
9b:f7:f1:57:81:d8:a2:b6:03:01:5c:4d:b6:5d:73:
8e:a8:43:e0:3b:87:45:e7:1c:b3:0f:98:55:ec:ae:
51:26:a7:e8:7c:39:38:d8:74:df:09:54:c2:d1:b1:
b6:d9:b1:5a:21:50:fd:78:ae:fa:cd:ee:4b:12:c7:
5f:b8:eb:15:fb:d7:f6:7f:3d:4d:40:f2:01:b0:70:
1a:04:4a:ac:d6:23:ea:d5:27:c9:59:c0:6d:6c:d4:
1d:0e:23:ec:eb:2f:b4:7a:8b:aa:63:ce:f4:67:06:
7c:5e:e5:d8:54:e2:39:c1:11:24:0b:90:c1:f0:87:
b8:f2:90:b6:5d:a1:a2:ba:7e:d1:39:7a:fe:72:e2:
71:61:a1:1c:fb:2d:86:b3:d1:ef:45:36:1e:1d:f5:
31:fa:ec:a4:ba:2e:aa:18:88:e7:9d:67:0e:19:00:
a6:8a:c7:37:f9:3d:c5:c1:3a:34:88:94:da:98:60:
7c:b1:00:9d:87:d7:b9:1e:88:a3:d6:f3:21:a2:e1:
5c:35:c5:ae:7f:80:79:d4:49:48:d5:a0:27:be:84:
05:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CB:0C:A4:1C:46:14:0E:78:38:99:B0:E2:68:4C:89:6A:B6:C3:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fe50e68b-6d4f-3eb8-9cb0-8db5ae9f8a6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:fc:33:96:e7:30:af:a9:75:87:3c:53:48:a5:5c:84:19:60:
76:b6:eb:c5:d9:97:b7:3a:62:02:53:29:bf:bf:7a:06:21:63:
06:d2:90:ca:85:32:2f:d4:f6:b5:13:a8:d4:60:fe:4c:c1:81:
04:71:83:ea:03:85:6f:3c:a2:c9:08:54:04:b0:9c:61:0e:d2:
bc:18:03:40:4b:1e:67:21:99:1f:28:e8:b6:2d:0c:3f:da:41:
6c:b4:5b:02:2a:f1:e0:dc:67:98:b6:16:4c:6b:34:d9:bd:cf:
81:47:0b:16:7f:02:41:7a:2e:20:bf:33:73:a0:d7:03:14:05:
63:0e:44:3e:01:93:3a:cf:55:63:ae:79:29:fe:0a:1c:34:86:
90:b6:64:b3:13:82:7f:5e:9a:8a:b2:3f:82:6b:73:15:cb:a1:
32:87:fc:2e:b7:e4:b7:d2:71:2e:18:56:b4:2c:2f:7c:7c:35:
a9:7a:5a:90:bf:e3:d8:d1:9d:3d:79:fe:ef:4a:2c:2e:24:aa:
fb:d0:c9:03:6e:8c:b6:96:60:bc:68:48:a4:75:fe:c4:4f:3b:
7a:ae:53:43:40:e9:e9:58:cd:0b:06:47:5f:f5:99:6b:23:29:
6f:66:bc:c0:5c:93:23:5c:00:32:28:80:96:6f:17:a6:95:e5:
3d:31:7b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:27:37 2026 by rpki-client