
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/530d0736-af5d-3319-a89b-f18df081b641.roa
File: 530d0736-af5d-3319-a89b-f18df081b641.roa (raw, json)
Hash identifier: tAprOALTZWVKhPwtiQSLr4kBuRsu5Chiy/9rR/5LfLc=
Subject key identifier: 5A:72:81:02:F6:39:92:43:35:3C:D6:3C:B8:10:E5:49:08:38:53:10
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584E059BE3706B5F9DA224653890
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/530d0736-af5d-3319-a89b-f18df081b641.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 7155
IP address blocks: 72.173.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 13 Jun 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9b:e3:70:6b:5f:9d:a2:24:65:38:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=e8e22e56-02a2-40cd-99cc-bf9a72f23e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:30:c5:27:9f:e5:7e:ba:c4:f2:04:0b:24:05:
1e:40:ca:a3:f4:83:1d:6f:2a:62:7a:c5:ad:4f:8a:
bf:82:1f:f0:5f:a4:81:15:8c:84:8e:4f:dc:49:0c:
b4:5a:6f:ab:b3:ec:ab:1c:25:fa:69:02:f1:f1:4f:
88:a9:49:1a:21:cc:35:1a:6e:3c:26:ee:e7:08:9e:
76:5b:81:8b:72:98:e1:95:c8:fc:2e:52:0c:c4:6e:
b3:03:01:d4:85:07:89:4d:b3:34:9c:0c:3c:91:14:
71:72:b7:96:69:4e:b5:3b:97:ea:17:04:15:d8:13:
9b:27:90:f2:42:98:be:54:a7:11:bc:85:a3:de:60:
95:9c:13:03:c8:12:11:38:f2:3a:84:a8:5d:b7:4d:
5d:06:06:39:81:06:bd:25:0a:01:be:c3:29:10:1f:
df:34:8d:ef:05:f7:54:d9:99:06:bf:69:5b:6e:64:
62:b0:ee:92:22:63:27:63:76:19:ed:02:37:8d:4e:
ee:f3:67:25:f7:c6:ec:f6:97:c8:df:48:1e:d1:c7:
e8:5c:4f:d3:39:d7:01:89:23:03:f5:42:a0:eb:30:
c6:64:70:b4:f8:70:6c:bf:85:de:f3:32:82:d7:a3:
0d:0a:20:40:3f:09:50:cd:da:1e:b5:9d:be:e5:b7:
31:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:72:81:02:F6:39:92:43:35:3C:D6:3C:B8:10:E5:49:08:38:53:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/530d0736-af5d-3319-a89b-f18df081b641.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:d9:92:03:d0:72:f5:21:77:b4:e8:c5:7e:9a:eb:88:bc:50:
40:53:78:85:6b:3d:8f:d2:eb:d4:c3:35:39:56:47:8a:2c:ed:
6a:78:f2:ae:52:43:6a:90:2e:f7:aa:4b:88:26:03:9a:1b:03:
48:1a:42:0c:01:3d:d6:5f:02:bc:1f:85:93:68:12:ad:bc:9b:
88:ec:e8:96:ad:9f:8d:f1:53:d7:56:5f:d4:85:ec:65:ca:90:
11:f1:0d:66:6b:3d:c1:34:79:c5:75:d4:a4:0e:2c:ee:3a:39:
29:fc:83:57:98:74:40:a9:14:52:7b:28:ab:10:c0:d0:65:b6:
17:ef:98:29:65:54:82:6b:dd:53:d6:7a:26:e8:56:a4:38:76:
e8:e1:ea:0b:0c:43:04:45:9b:56:c6:24:0b:72:dc:26:4e:6f:
fd:2a:49:2d:4a:30:b2:f1:48:a8:bf:7e:fd:42:37:15:b2:05:
c1:65:66:54:af:11:fd:d3:8f:7d:a9:a6:6d:28:09:81:a6:0c:
95:57:33:ed:6b:7b:57:1f:53:8a:4b:51:0a:27:40:45:3d:31:
a9:3c:25:23:30:dc:d6:94:6a:21:27:69:88:9f:0c:0d:a7:71:
4e:ec:7c:bf:1c:cf:7a:9d:8e:de:70:e6:2d:b7:a0:48:6a:05:
c6:93:ef:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:27:47 2026 by rpki-client