
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/598431a4-b0bd-360e-b698-960bdedf297f.roa
File: 598431a4-b0bd-360e-b698-960bdedf297f.roa (raw, json)
Hash identifier: YlvvQDeyAMvs2Fz4Ph6vBxVA+glS7PHHKYOHfoRrsxw=
Subject key identifier: 0A:16:C2:7A:89:EA:74:48:C2:3C:AF:DE:C0:47:50:A9:81:9C:94:DC
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24DFBA533336C572F527533C
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/598431a4-b0bd-360e-b698-960bdedf297f.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 72.173.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:ba:53:33:36:c5:72:f5:27:53:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=309ea4a8-d1eb-4997-b7ea-472092fdb3eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8a:6a:76:20:52:7c:78:93:5e:c7:f0:2d:ee:
fc:84:ee:3d:94:cf:04:d5:b4:25:e0:87:73:68:d6:
d0:e7:90:81:92:87:a4:61:7b:23:dd:5a:cf:aa:1a:
7d:d3:56:d3:98:80:2e:36:16:5c:22:f7:94:72:93:
2f:7b:6f:92:5e:72:f5:74:9b:b6:8a:9e:f1:cb:00:
31:19:1d:9e:35:29:4e:aa:f6:36:2a:d4:9a:f0:55:
8e:2a:e5:ec:71:7a:1b:3d:78:d2:21:bf:8b:87:08:
74:09:55:a3:53:a1:0b:3b:43:e9:c1:a5:9b:9d:23:
b7:45:a6:9b:3d:f5:d3:3c:ec:d7:ad:5b:e3:62:01:
e3:53:96:33:0c:1d:9e:00:7b:6e:50:7e:44:c7:b0:
e1:19:0e:e8:b8:50:36:fc:b2:91:3c:84:e1:1b:e1:
4d:28:d6:3f:81:ac:68:5d:3e:af:50:6a:e2:5c:70:
6f:01:ab:0a:68:b5:4f:08:fb:e0:53:35:00:46:d0:
e1:ce:4b:29:86:ef:39:eb:b4:28:88:3e:1a:f6:20:
c0:3a:4a:b0:b0:21:54:78:71:1b:d8:04:a9:f1:9d:
aa:87:3f:c4:7f:4b:c1:ef:67:05:f7:61:98:bb:8e:
66:43:48:07:89:c2:6e:d6:91:2f:85:33:8e:8b:5a:
ca:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:16:C2:7A:89:EA:74:48:C2:3C:AF:DE:C0:47:50:A9:81:9C:94:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/598431a4-b0bd-360e-b698-960bdedf297f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.98.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:80:55:d4:fd:c4:34:d2:55:01:d3:63:a4:8f:b2:bd:e7:b5:
3f:84:9f:d9:00:d5:35:6f:c4:d5:bf:84:89:33:47:5b:e7:3c:
9d:41:5f:6b:ba:16:87:b4:24:b6:84:8c:7f:9c:3a:0d:e4:6e:
2f:18:d2:af:60:cf:84:f2:c9:1d:30:dc:18:96:d3:25:88:38:
08:6b:88:d3:61:9a:ea:a5:e5:e2:87:f2:9c:e6:41:f8:f3:bb:
7e:d6:87:1c:3f:40:09:20:36:56:4b:3d:6a:d5:9d:68:a0:5b:
c8:22:1b:3e:fb:d4:68:c0:0e:ed:04:8a:dc:63:2d:29:89:45:
b2:30:99:1c:95:2a:30:6a:55:2d:42:6b:89:53:09:00:52:38:
3f:6a:d4:da:26:df:1f:ce:65:d3:5e:5f:d6:9b:bb:17:63:12:
43:2b:a0:bb:2f:22:52:9e:65:5b:d7:a1:7f:78:b7:68:77:20:
9b:60:fd:6e:b0:e4:70:fb:0e:d6:17:ba:d5:3b:c9:d2:82:f1:
dc:05:30:d0:31:48:c4:96:a5:4d:11:7f:52:fb:3b:64:07:25:
df:8e:bd:a9:d0:12:96:9f:3b:56:59:e8:d9:80:f4:53:07:96:
71:86:1d:bd:a9:ba:58:81:bd:d1:93:f0:88:f2:0f:ee:22:ba:
47:96:43:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:52:24 2026 by rpki-client