
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/626f0e04-73b1-3ec8-8af1-2b7980d162ad.roa
File: 626f0e04-73b1-3ec8-8af1-2b7980d162ad.roa (raw, json)
Hash identifier: 6UcPSOOxW2cnlUHWKVbKW1ALDMfqnsS1LTdeOYVcNu0=
Subject key identifier: EB:A9:A9:00:35:F6:48:F9:1E:B0:58:E0:FD:34:C6:FF:CC:AA:64:C3
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24DFBAD5E03DB99EE206A580
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/626f0e04-73b1-3ec8-8af1-2b7980d162ad.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 72.173.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:ba:d5:e0:3d:b9:9e:e2:06:a5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=f7d0aaa9-ae71-464e-b6cc-9a819c0b4bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:88:2e:c4:f0:32:36:c5:31:96:31:ee:db:84:
af:6f:1b:76:00:27:37:85:3a:be:57:51:87:41:67:
b2:d5:43:54:d6:ec:ae:d3:e5:40:2e:43:4f:24:c2:
5b:73:61:c6:0b:39:24:32:65:8d:33:51:ca:49:3a:
c8:5f:10:84:42:c9:87:e4:2c:b3:2d:35:12:0d:fb:
83:1b:5c:6d:38:3c:86:c2:9f:20:d3:5f:f9:07:f7:
74:57:c8:1b:48:75:28:3e:cb:b6:0b:fa:35:24:f6:
f4:06:f0:a9:23:2a:2c:0a:f3:d7:6d:ce:32:bd:fa:
59:bb:0e:f4:c5:3f:45:03:86:3d:67:e4:13:39:be:
5b:b1:e9:25:f0:1b:7b:98:6a:88:f6:8a:5c:5d:83:
5c:77:3f:61:a1:bb:59:45:e1:a4:71:8b:12:0a:28:
fd:c9:8c:b7:ca:4a:d1:e5:80:b5:12:4b:07:d7:cd:
9e:5a:9a:4a:48:e4:39:3e:d4:79:9d:fc:43:fd:00:
53:a6:78:4e:43:1c:63:ed:de:f3:68:76:55:2c:39:
1a:4e:9a:bc:b9:6d:c1:a7:26:01:db:65:0e:d3:c9:
de:72:b8:34:51:69:c3:7c:ca:48:f7:c4:1b:1a:99:
08:60:42:86:9a:0c:c9:59:36:b8:18:6f:85:f7:c6:
fa:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A9:A9:00:35:F6:48:F9:1E:B0:58:E0:FD:34:C6:FF:CC:AA:64:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/626f0e04-73b1-3ec8-8af1-2b7980d162ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:58:51:76:c9:8d:77:55:f8:80:56:45:8b:28:8d:95:43:47:
9b:3e:4d:0f:67:6b:0c:24:3a:d6:31:df:fa:23:13:b8:79:30:
52:26:e1:45:48:05:b7:df:34:9d:63:d1:7b:58:55:28:35:d3:
7a:e4:01:01:90:2f:9a:12:42:dc:f5:23:16:f0:d2:12:e1:15:
22:81:17:34:2a:30:70:4e:5a:58:90:fc:22:8c:86:3e:4b:3c:
b1:f4:6c:1c:64:b4:4b:ad:67:41:7a:a7:eb:3d:96:2d:80:44:
d0:39:c0:16:24:f5:f1:3a:b8:19:9f:69:17:44:64:d1:b6:70:
af:2a:dd:da:68:ca:62:f3:3d:d8:4c:f5:24:31:a1:12:6e:00:
7c:80:9f:5c:1c:9b:f9:d4:0a:c3:d5:a4:bc:e9:12:25:28:3a:
b4:49:7d:8d:f9:c7:68:9d:c1:56:5d:e5:12:3e:53:0d:2f:ed:
b8:83:2d:ff:27:8c:d1:22:49:ee:d4:68:fe:f2:ad:ed:c6:35:
ba:6d:a2:42:f0:78:53:ca:d4:00:dd:f7:b1:21:3c:27:76:fc:
29:8e:53:7a:17:c0:50:4d:0c:e7:15:d1:a1:35:32:06:3f:c9:
05:01:63:f1:7a:66:ff:bd:3f:bf:a2:01:2b:97:0a:96:9e:8d:
b7:42:32:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:52:19 2026 by rpki-client