
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c0c6878-fc61-3292-9950-ea5a62cc6a32.roa
File: 4c0c6878-fc61-3292-9950-ea5a62cc6a32.roa (raw, json)
Hash identifier: ZqUwrXQiMHgK5bskOJ9VWRoWXNvRF61tWz6p0gQ4YXI=
Subject key identifier: C5:00:82:97:03:46:20:C5:0E:36:46:45:85:DE:55:A9:D4:74:C0:0E
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24DFB9FD8CEDEB99AC79DF20
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c0c6878-fc61-3292-9950-ea5a62cc6a32.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 72.173.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:b9:fd:8c:ed:eb:99:ac:79:df:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=789132b5-4272-42db-8543-5bf26d33ecef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:05:67:bd:ac:35:b4:e0:44:94:34:3a:81:d9:
b9:03:9d:4c:4e:3d:3a:33:99:99:51:c8:a6:fd:43:
b4:85:e4:69:cc:97:d7:3e:fd:98:8d:cd:28:c7:2b:
33:a1:39:c6:c0:be:c9:03:e2:67:75:75:00:f8:e8:
e3:e9:af:a1:b8:5b:14:13:ea:82:e0:fd:4f:0b:50:
39:ca:19:d2:c6:24:b4:f5:1f:9b:0c:f5:fc:b3:3d:
ee:af:c2:c3:12:20:bc:ab:f4:a1:d7:7c:9b:e3:9e:
c4:80:32:26:2a:2d:57:d2:a5:ff:0e:67:b1:35:e7:
32:d9:7f:d3:87:3f:d5:0c:c0:75:bb:c2:ad:da:f3:
2f:ff:73:bd:67:20:62:27:f9:18:02:a6:02:e8:49:
3d:c1:71:7f:18:35:cb:48:db:ab:e0:53:18:68:29:
cc:7b:f8:52:20:48:9d:3d:91:ee:c3:85:a8:10:c6:
9b:d7:35:35:88:ea:d0:aa:51:5e:e9:e3:d4:8b:f9:
c3:be:64:38:b1:62:b1:fc:21:b5:6c:7d:33:80:76:
9b:70:5f:85:75:ee:d4:36:99:d1:4a:5d:19:94:31:
77:d5:d5:3f:d9:89:e9:a8:e7:f9:4e:bc:6a:de:75:
84:54:82:69:aa:08:b8:98:31:95:bb:e1:e9:95:47:
78:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:00:82:97:03:46:20:C5:0E:36:46:45:85:DE:55:A9:D4:74:C0:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c0c6878-fc61-3292-9950-ea5a62cc6a32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:03:28:47:69:03:00:81:04:37:e7:cd:88:95:b7:cc:b0:9e:
bd:6d:67:2b:93:5b:d7:b9:e9:2c:51:6b:46:e7:d6:23:b3:b9:
df:d7:cb:6f:50:2c:14:2e:6f:e4:a0:a3:0f:99:ef:bd:a1:84:
d8:1f:d5:f4:9c:fd:6e:32:7c:32:dc:11:12:a2:8a:87:5f:c6:
14:7a:4a:b7:a3:c3:6b:1a:66:a6:42:c0:cb:8c:23:d9:a4:66:
bb:87:02:83:ff:90:be:1e:46:40:2d:6e:6e:e8:ee:31:5a:dc:
62:f7:e0:e5:6f:7c:c8:71:e9:b9:98:d5:80:4c:a8:73:e1:ed:
60:13:83:c5:03:dd:41:e1:00:45:4d:01:2f:46:6d:72:05:87:
7d:74:14:5d:8b:59:7c:d6:ec:46:ac:ca:06:81:da:4e:14:b7:
86:bb:3f:43:9a:42:0c:6f:10:c9:3c:9f:09:61:f6:52:a3:90:
18:f1:f5:1c:ff:66:1c:90:5b:07:bb:d0:9b:d2:a2:be:67:70:
3e:78:af:f5:61:ef:8d:4d:1a:bd:39:07:77:0a:76:5b:f9:43:
76:f7:f2:1d:55:63:0e:20:47:47:a5:b1:0a:35:9a:e5:7e:a7:
fe:a3:fa:0b:35:25:e1:9e:5e:22:41:05:93:da:7e:81:2a:07:
2e:3e:ab:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:53:29 2026 by rpki-client