
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2c9121b5-c305-3491-b3e2-eafeec645052.roa
File: 2c9121b5-c305-3491-b3e2-eafeec645052.roa (raw, json)
Hash identifier: qJ0jMw+YbONKauYe1NMi/SzJE9tzpeRUDshHbpLB/uQ=
Subject key identifier: CE:C1:63:C5:BE:A6:8E:15:20:0B:91:E4:F3:E6:BE:DB:34:90:B3:7E
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E0605DE7790D28C356ABC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2c9121b5-c305-3491-b3e2-eafeec645052.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 70.41.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:60:5d:e7:79:0d:28:c3:56:ab:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=08208345-2a68-43c3-bad6-9d0460849042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a3:3c:61:da:58:95:c1:82:bf:c4:82:74:5d:
2d:cd:40:9b:c9:7c:00:17:9b:05:bf:4a:04:fe:2f:
61:97:db:c8:31:cc:36:ec:b8:c1:aa:0c:e1:4f:f1:
f7:a6:f9:18:08:6c:6b:02:5b:6c:5f:6e:cc:82:69:
9c:a0:d3:b6:fe:c4:65:9c:34:8b:e0:34:63:06:ed:
52:c2:39:09:7a:b4:bc:7d:27:4e:06:60:8f:fc:56:
37:b8:98:d9:65:bd:15:64:08:00:4e:fa:dd:e4:e1:
76:c0:9e:28:07:65:e1:38:07:af:78:64:44:a1:18:
1c:5c:2e:1d:a7:3e:31:ac:22:25:5b:2a:5d:e4:7d:
18:9c:a1:52:d5:a0:d4:73:3d:95:f5:66:5b:68:61:
b9:66:a3:00:88:3a:bf:01:84:e1:56:8c:17:22:75:
c4:89:5d:99:26:e9:80:80:fc:11:6b:35:0b:17:a8:
ac:83:e7:ad:1a:bc:3d:9d:74:2f:5d:db:14:81:1b:
e2:72:e1:69:7d:c2:70:94:74:19:6f:87:fc:a3:11:
36:75:44:e2:98:15:d9:3d:81:79:97:b7:f5:71:d4:
75:c0:6e:af:90:fa:9a:92:41:c0:1c:7f:54:93:36:
c6:19:06:21:7c:94:ac:96:71:06:69:30:19:70:69:
0b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C1:63:C5:BE:A6:8E:15:20:0B:91:E4:F3:E6:BE:DB:34:90:B3:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2c9121b5-c305-3491-b3e2-eafeec645052.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.185.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:10:6e:69:84:eb:39:e1:3f:4b:4d:3f:e4:e5:19:49:38:42:
26:5e:63:25:a7:1b:a6:0d:f2:c1:2e:33:f6:aa:96:26:b5:43:
88:95:46:0f:85:94:ec:8d:4c:e5:e8:2d:7f:b7:00:89:41:63:
8d:9a:80:86:50:7d:7a:5d:ec:bc:7d:f5:5c:60:d9:9e:db:00:
a1:0d:ea:21:f1:83:ed:5d:66:71:b2:9a:c0:80:7b:07:83:8c:
75:5b:bb:f1:a2:86:20:d4:b0:bd:65:be:b7:1c:0e:c6:08:4a:
07:00:60:30:a4:4b:f7:4d:b2:13:4e:a5:fa:e4:1e:ef:8d:80:
66:66:53:19:2e:89:bd:ff:05:63:d7:1f:e0:c1:e2:c4:b5:a8:
3a:44:95:56:b7:89:96:d9:35:8a:94:0d:12:3f:8f:18:79:94:
55:96:92:8e:92:51:3a:f1:ee:1b:44:c4:c5:b3:89:8a:8e:4b:
0f:56:ba:fe:3c:ea:41:f4:9e:ff:b5:10:87:2d:ed:ba:ae:11:
5e:5c:5c:30:63:da:fb:54:b5:4f:9b:03:e7:b8:8c:5d:28:0f:
7d:92:3e:61:cc:c6:46:64:5f:ad:51:0f:ba:62:77:97:5c:e8:
d5:68:29:c0:52:00:e8:3b:3a:94:a0:c2:3a:e3:76:23:4f:1f:
12:bd:37:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:25:06 2026 by rpki-client