
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/265785d5-88d3-3b7c-808d-f7032445583c.roa
File: 265785d5-88d3-3b7c-808d-f7032445583c.roa (raw, json)
Hash identifier: CxyFdIr5GMrOnmxPpcBOnvTZzpXc1yzaG+UXBzhtz+8=
Subject key identifier: A1:9B:78:AC:D5:B0:AE:B2:4A:8A:01:DD:B6:B0:65:BA:2F:A8:0A:D5
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24DFBD4AB760CB15BD7B3F80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/265785d5-88d3-3b7c-808d-f7032445583c.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 72.173.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:bd:4a:b7:60:cb:15:bd:7b:3f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=8be45d6a-da9b-42ac-a0b6-1ed31a037cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:df:e8:b4:f3:ca:02:f4:d8:31:2b:8a:b4:25:
0c:e2:90:17:f4:97:31:c5:c4:9a:fd:d0:e7:dc:92:
46:e8:10:12:21:6c:06:c7:6a:60:fa:0b:19:ed:fc:
50:b1:26:db:e2:b1:79:16:76:27:40:1c:e3:a0:12:
87:18:e9:95:60:37:80:78:f6:3f:60:a5:cb:ce:a2:
0a:50:8c:27:ab:c4:fd:51:7d:26:51:6f:44:62:93:
21:a6:92:5a:ce:25:d0:96:1f:72:57:af:f5:68:20:
ec:2a:a9:0a:f6:93:c1:61:92:0f:40:fa:83:3b:de:
33:06:20:85:d5:09:be:0a:2d:63:88:51:cc:02:af:
58:99:19:36:08:af:e5:05:4d:63:31:87:2f:70:45:
b1:3e:60:97:ce:2e:40:7e:d8:c8:4c:9f:3f:65:e0:
2c:ca:be:0d:1b:b5:4f:8c:a5:12:1b:df:01:b5:36:
06:11:81:fc:f3:e3:01:d6:fb:23:e5:0e:88:e5:fc:
84:0e:3f:d7:ce:1c:85:b4:2e:f4:4e:6f:ee:7b:8d:
19:35:94:fb:70:39:4d:01:36:56:d1:a7:fb:f6:8c:
c2:8c:2a:0a:06:20:40:3c:c3:39:b0:b8:79:f8:c9:
3a:d3:11:91:d3:a4:ea:d7:6b:53:3a:53:1c:70:17:
4d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9B:78:AC:D5:B0:AE:B2:4A:8A:01:DD:B6:B0:65:BA:2F:A8:0A:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/265785d5-88d3-3b7c-808d-f7032445583c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.198.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:5d:c2:96:35:84:fe:33:6e:6d:fe:cb:55:d8:f6:81:af:d6:
68:0d:c6:6b:86:d8:0d:ac:d9:83:e5:40:70:e5:ae:3d:bd:d3:
60:e4:58:3b:43:d4:b8:7a:4a:0e:af:21:82:91:b4:a8:39:74:
80:f0:4d:74:69:52:35:3f:16:3a:36:c2:46:8d:3c:3c:44:ff:
61:ef:bd:82:33:7b:4f:fc:81:e0:db:86:46:23:52:38:ad:be:
da:f2:05:38:87:60:19:53:43:71:8f:1e:94:b1:46:a3:2b:bd:
57:38:59:d7:94:db:10:3a:7c:d8:7c:9a:50:b5:00:c8:c2:f5:
5c:e7:3a:e0:96:67:0f:3d:9d:a7:71:4c:2d:27:c7:76:4e:3b:
bb:08:6f:1d:0c:e6:3b:94:39:0d:26:bd:44:95:24:85:f2:79:
5e:11:4b:5d:d6:fc:11:bb:6b:b2:9b:91:5e:e0:84:18:c1:00:
7f:ed:34:f3:c0:ae:ed:da:4a:d8:4b:a0:f3:84:73:cf:65:49:
b3:d8:96:a7:95:2a:76:40:04:52:83:f8:29:4c:41:a9:4e:46:
a1:5f:a7:c6:7e:7e:da:71:e6:78:38:62:3c:8a:32:7e:8c:15:
46:bf:c9:ff:6e:71:d6:b5:5e:b0:23:85:a8:b7:7d:44:9d:30:
87:22:11:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:53:30 2026 by rpki-client