
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/949c78eb-f726-38ad-800c-c1c120d82748.roa
File: 949c78eb-f726-38ad-800c-c1c120d82748.roa (raw, json)
Hash identifier: YIf5LjtcToaJ4XOZXYZYgv++GJHT4oIAjuHjhnH/joA=
Subject key identifier: 73:70:6D:A4:06:23:54:D2:FD:AD:97:07:8A:A6:41:DD:EE:F5:D6:B4
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584E059BE17C13DB60C56DFCCF00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/949c78eb-f726-38ad-800c-c1c120d82748.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 7155
IP address blocks: 70.41.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 13 Jun 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9b:e1:7c:13:db:60:c5:6d:fc:cf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=213cad4c-09d5-473a-8b27-fd4cf3091192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:15:40:9a:cb:7a:b1:f9:a5:a9:1a:9b:49:8b:
1c:4e:b7:33:42:90:8f:8c:60:fd:46:91:10:07:7e:
4b:ec:c6:23:39:a3:39:8c:3c:0a:22:27:67:d3:df:
3c:8f:cf:36:d4:c7:0e:48:75:90:cb:84:1e:75:1f:
e3:74:ed:be:a1:a0:5b:68:86:48:ee:8d:de:1e:7c:
73:e2:aa:85:f4:4c:94:1b:6d:b2:94:76:70:d6:47:
52:de:32:a1:76:b4:e4:a7:c7:d6:64:92:82:ad:eb:
4b:e8:b8:8a:29:e8:10:66:2b:83:8e:cc:1f:6a:0b:
00:6e:86:38:5f:97:c5:58:32:38:04:af:d6:d3:76:
4e:be:9c:eb:91:ce:e7:cb:48:a1:4a:ef:12:aa:d9:
29:70:f8:42:30:07:f4:79:cf:97:74:1a:c6:31:2f:
4c:68:92:08:8a:df:e3:f3:d2:07:b0:8a:e7:f9:ea:
04:8c:19:c6:12:26:3f:e7:65:b6:ef:68:0a:b7:14:
19:ed:c5:d4:f8:f1:37:89:cb:01:17:73:d0:9d:14:
85:45:25:d7:4b:76:90:48:55:f4:47:57:b1:7b:8d:
13:2b:c9:80:4d:c6:e1:dd:20:72:71:04:39:f3:bc:
a7:9f:5f:1a:64:55:1b:1c:3d:3e:6c:b8:00:c5:97:
ea:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:70:6D:A4:06:23:54:D2:FD:AD:97:07:8A:A6:41:DD:EE:F5:D6:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/949c78eb-f726-38ad-800c-c1c120d82748.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.218.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:df:de:0f:8c:67:80:3d:92:90:ca:3d:5e:80:e9:d0:44:c2:
08:01:5b:bb:90:0e:83:7a:85:01:de:8c:c8:50:89:53:0e:0b:
4a:5b:81:de:d5:f6:e7:d3:91:dc:26:0b:63:bb:02:75:20:ef:
fc:3d:01:d6:37:37:44:99:ad:b5:76:3b:1d:cb:ab:93:06:8d:
65:a2:69:8f:41:43:18:28:52:ea:82:af:51:dc:d6:c9:99:83:
92:56:0c:32:96:2d:3c:ed:ce:68:89:e7:e9:dd:48:7d:4c:16:
c2:a9:d1:45:6a:bd:a0:12:d4:59:c9:2e:d3:49:2c:ca:82:79:
46:30:f5:29:65:80:8a:b1:9c:be:a5:e3:9a:4f:f3:f2:42:f3:
2f:53:09:66:79:30:55:f6:0c:62:35:4f:eb:92:27:f3:68:18:
ef:5d:ef:4f:a3:71:9d:c4:09:c9:ed:67:91:5e:39:89:ae:d5:
bd:06:2b:7c:27:de:4e:28:e7:f6:a9:7b:40:ea:5e:e6:49:b6:
68:9d:fe:19:b6:07:62:ea:36:1e:10:8c:e3:c8:13:42:1f:71:
29:b8:8f:ae:fd:aa:58:52:5e:11:51:ea:75:47:f7:80:8b:c5:
ab:37:64:45:c6:bc:ae:83:15:d6:45:aa:20:2f:7a:cb:4a:4a:
66:d6:41:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:27:48 2026 by rpki-client