
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8d76183f-edfc-3108-b18d-5f19ea04fdea.roa
File: 8d76183f-edfc-3108-b18d-5f19ea04fdea.roa (raw, json)
Hash identifier: MPlXG3FGZbhtXKv9M+6c/v2HfybDF1VGDjeaSD5mYuI=
Subject key identifier: F5:57:0C:AB:AD:17:A7:26:22:AE:3F:A3:85:5A:64:BF:04:8E:00:53
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584E059B5C462280CFC13D370300
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8d76183f-edfc-3108-b18d-5f19ea04fdea.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 40306
IP address blocks: 72.173.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 13 Jun 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9b:5c:46:22:80:cf:c1:3d:37:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=19fda5b8-6332-420e-8951-4e8ee18caa94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7c:96:a5:de:4a:88:b0:5b:90:38:38:be:da:
74:a1:6d:38:3f:a0:04:92:30:1c:89:14:29:86:b7:
20:85:33:ef:58:5f:eb:bb:ea:99:e7:0e:1e:2e:9b:
1e:00:2b:79:df:b3:db:4e:cd:87:26:73:1a:04:a2:
9e:23:04:a0:0b:1d:b0:34:3b:79:49:91:41:c6:65:
0e:e1:b4:a6:3c:fb:10:a2:ad:d9:25:24:01:02:5b:
2f:0d:13:20:61:ae:fd:aa:a9:aa:89:c6:5a:4a:f2:
a3:04:02:b7:80:96:77:cc:74:03:09:76:e7:ba:19:
9c:ce:9c:15:bc:31:0e:34:38:00:4a:cc:3a:da:4f:
18:49:ee:c1:73:68:2b:64:75:1d:db:f0:ab:a7:80:
37:9c:e1:fa:d3:df:2a:c1:b8:03:1d:c4:42:a8:5d:
40:f9:d0:ba:8e:88:7a:49:da:a4:83:35:42:48:9b:
f7:63:5e:27:1e:d0:24:5d:96:fe:ed:5b:0f:ed:d4:
c7:08:23:9b:24:ee:fd:f4:ec:20:61:60:51:d3:f3:
1e:a1:b6:6b:c5:ef:84:aa:88:fb:36:08:b7:50:1b:
4c:83:74:4a:e9:00:25:da:dc:4f:46:a3:86:5e:32:
5e:58:74:f5:a5:b8:8c:64:71:27:80:7d:c2:07:f0:
a8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:57:0C:AB:AD:17:A7:26:22:AE:3F:A3:85:5A:64:BF:04:8E:00:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8d76183f-edfc-3108-b18d-5f19ea04fdea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:44:fb:c2:91:e4:48:a1:09:89:1d:dd:41:3e:5a:37:83:8d:
3f:3c:82:c3:5c:02:fc:22:79:21:68:69:52:c6:20:e1:e9:9b:
32:04:ec:47:a6:60:9d:91:ea:f8:76:7f:74:ac:42:66:ab:d3:
08:e5:0c:e4:7a:5e:22:f5:61:ec:f6:56:b5:14:be:5e:68:c3:
92:11:19:5f:2e:14:b9:de:55:6b:fd:e3:41:8f:f0:41:c5:c5:
5b:d7:10:bb:a8:86:a6:1d:e3:6e:86:45:b3:25:fd:00:03:d0:
96:aa:89:6f:49:61:bd:19:20:5c:b9:34:04:34:a1:1d:88:9b:
2d:df:23:9c:d0:ec:7f:ee:eb:83:9f:0d:00:81:a9:a8:38:d9:
33:28:40:95:4f:f7:85:5a:8a:48:9b:45:e1:48:e7:3b:f1:07:
29:bb:8c:4e:6a:34:67:cd:b2:15:09:29:58:d6:2b:db:24:6b:
4d:8e:ab:e8:8f:1b:ed:dd:d1:e6:83:de:c5:ef:5b:1d:4e:84:
ac:ff:55:fb:64:f5:28:5c:6a:b7:2c:ec:01:c1:e9:6b:ae:3a:
40:8b:8a:0c:3b:8c:e2:03:ab:aa:74:c3:45:3a:0b:41:6f:9b:
15:28:85:97:dc:d7:04:fd:cd:71:b3:5a:94:16:bf:30:ae:a1:
d1:0a:2c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:05:11 2026 by rpki-client