
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/552b455d-a8ab-371e-aa09-c9af65c1ed17.roa
File: 552b455d-a8ab-371e-aa09-c9af65c1ed17.roa (raw, json)
Hash identifier: J7mFRtlXjGh0N7CWkaGyC9oR7ZhuyE/r0wlG/vvvGVw=
Subject key identifier: ED:8B:EC:B6:99:A3:AE:26:C6:9D:05:95:72:82:E1:08:51:2D:7E:F2
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584E059BE00B7A034878AB64EC80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/552b455d-a8ab-371e-aa09-c9af65c1ed17.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 7155
IP address blocks: 70.41.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 13 Jun 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9b:e0:0b:7a:03:48:78:ab:64:ec:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=a29c3f48-4faf-4945-acc1-0e75ac618ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a4:86:c1:51:ae:25:61:64:8a:e1:6f:82:fb:
7f:8c:1b:9e:d6:76:4a:94:1b:3f:d2:10:ae:ac:1f:
a5:4b:b6:f2:86:47:25:0f:37:9c:30:5a:2f:99:3e:
48:bb:9f:8a:fc:b6:19:2f:78:1d:bf:fa:fe:a8:3c:
49:21:a3:13:ea:38:0f:00:c7:01:5e:a7:ef:e4:69:
f8:46:0e:04:db:74:ee:06:96:98:16:9b:02:a7:d3:
c1:b5:e3:32:55:1c:4c:ce:2c:b3:92:32:28:13:4e:
38:2f:d1:0a:e7:30:40:b5:c7:cb:18:1b:ed:26:06:
57:19:aa:bc:f2:ed:20:c3:02:3b:e7:f3:95:78:ee:
bc:b3:43:fe:bb:2b:67:52:26:fa:a4:ba:18:35:12:
11:b1:c4:ee:ac:f6:30:85:27:a9:39:e5:8c:4f:62:
70:0d:b3:32:b1:e9:dc:14:d1:98:78:37:30:1d:d3:
71:2f:28:f0:bd:68:22:91:39:2c:ad:7e:f2:4e:6c:
f4:58:e8:93:9e:47:c2:51:06:23:d5:b7:69:b0:e0:
50:94:20:2f:4b:ec:f5:26:b8:7f:3b:37:10:f3:8d:
13:67:08:76:24:9b:f3:44:23:91:a4:e1:6f:79:95:
7e:f9:b0:be:4b:49:ce:8f:46:5b:ad:2c:bf:bd:7a:
84:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8B:EC:B6:99:A3:AE:26:C6:9D:05:95:72:82:E1:08:51:2D:7E:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/552b455d-a8ab-371e-aa09-c9af65c1ed17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.172.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:4e:d0:da:ae:cf:b1:8b:4c:94:11:17:61:d5:3f:68:54:51:
02:fc:2a:d7:a8:ec:98:41:3d:b0:83:9e:74:41:58:3f:24:0d:
4a:e7:e2:05:e1:9d:45:cd:1f:5c:6d:68:6e:a4:91:3e:66:4a:
88:a4:43:5d:03:4d:f4:d9:62:08:d3:29:82:50:68:ac:99:0a:
6b:bd:4e:f1:8a:b0:c9:13:9f:18:1a:d5:37:05:d7:ba:45:57:
10:0a:f4:2b:7d:35:22:9d:3e:d3:5e:3f:ab:61:63:0f:ff:64:
9c:0e:32:a3:c3:3a:aa:05:73:71:7e:95:1d:94:aa:d5:b8:98:
07:9a:7c:c4:dd:00:8c:14:0d:43:67:e5:2e:73:a6:28:f2:4c:
02:e8:80:54:5b:d9:7a:a0:72:fa:7e:b6:5b:96:5f:d8:d6:56:
88:b1:76:8f:0c:5a:82:d0:c5:e4:09:2b:19:05:25:5b:6f:57:
91:59:79:45:de:7e:ae:52:fe:75:90:b0:8c:b5:96:35:03:49:
7c:b1:94:02:dd:e4:f9:65:96:1b:12:b0:b8:9e:1c:d3:d8:c8:
40:81:72:9b:c8:cd:b4:3d:9b:2d:b9:03:5c:ca:45:21:fe:15:
b1:e1:93:74:bc:a4:1d:42:9f:7d:c4:98:1f:8e:58:5f:da:4b:
71:bb:37:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:24:49 2026 by rpki-client