
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ac356b71-f897-35d7-9961-f79dac30925d.roa
File: ac356b71-f897-35d7-9961-f79dac30925d.roa (raw, json)
Hash identifier: 4td8NE8bdpGI2Owqwpxg2k6eGz6G6LIIVK2D1uEVdEE=
Subject key identifier: F4:E1:89:7C:31:C2:A9:10:F5:74:1F:A9:44:C8:E2:C2:3C:6C:82:BB
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E06727E82B24F3F5C44800
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ac356b71-f897-35d7-9961-f79dac30925d.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 72.173.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:67:27:e8:2b:24:f3:f5:c4:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=1cf2763b-a395-43d2-a666-cd0f2bcb85bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a2:b8:b6:17:fd:12:69:01:7c:47:36:7a:54:
cf:fa:9d:e0:1e:68:50:e1:63:f3:13:18:1b:67:0b:
89:bf:2f:4d:39:96:0e:42:86:6e:f5:d9:61:2e:14:
92:8a:5c:c6:18:68:da:8f:cc:13:a8:a2:b1:1a:1d:
61:5c:46:ea:b0:d2:e3:42:93:d5:d1:56:ed:0c:bc:
0e:36:63:3e:0d:bf:5a:67:0b:84:b9:76:16:97:ae:
13:31:0c:5f:08:d4:41:27:b9:18:76:21:00:dd:40:
44:d9:49:cb:24:a5:8e:3f:c3:68:69:27:f2:66:df:
c7:0a:81:6f:86:a1:aa:7d:94:b8:ea:fc:ee:ec:47:
8b:82:d8:26:9b:7a:08:8b:e3:32:02:c8:1e:e6:27:
df:60:89:25:1b:d5:9c:b8:eb:17:75:e1:f2:f8:9a:
77:ad:62:39:2e:e0:f6:34:9a:68:5b:8e:07:9e:53:
e4:fb:12:3c:5e:c0:b3:fc:3c:da:cc:d6:49:59:b5:
43:33:c9:0a:48:b3:c3:c2:10:ab:32:c1:ca:85:58:
e1:18:a1:c0:0b:4b:b4:a8:6f:7a:f1:d8:1a:8a:54:
40:6a:48:8a:81:50:f3:95:30:5e:c5:59:1c:3a:52:
46:7b:03:ce:67:9f:cf:d1:3f:a1:b9:bf:39:2d:5b:
e0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E1:89:7C:31:C2:A9:10:F5:74:1F:A9:44:C8:E2:C2:3C:6C:82:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ac356b71-f897-35d7-9961-f79dac30925d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.142.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:25:e6:6d:7a:e0:55:47:5c:a4:13:57:88:a8:4d:83:28:10:
e7:36:22:a5:5d:45:35:4e:e2:32:e7:56:09:b7:ab:ae:6b:44:
8a:b7:6a:4c:9a:3b:6c:05:52:25:90:cb:15:fc:5e:61:17:17:
04:2e:69:1b:a9:bf:8f:63:4b:84:af:1a:b5:90:58:a6:20:17:
1b:5c:92:d4:46:15:15:0f:d3:e4:fd:2d:e7:38:65:df:b1:db:
5e:e9:0f:eb:8d:94:fb:94:33:ba:81:0e:60:5e:23:41:89:41:
66:28:92:12:e3:06:d7:76:88:bd:1d:c2:94:c4:ab:ce:04:8a:
5c:c9:98:ae:41:59:9d:c2:dc:f8:3e:8e:ad:4f:90:ed:e2:c8:
b3:7b:57:cb:8d:71:c1:e2:d5:85:e9:dd:12:73:a4:ca:d9:44:
2b:d3:1a:1c:ea:f4:00:c2:da:18:05:78:aa:6a:a1:ce:16:fe:
41:c8:50:97:81:ff:b7:27:d5:fd:a8:7c:3d:64:7a:9e:6f:90:
6a:f6:d8:69:08:8b:08:71:1d:03:4b:91:3e:1c:5d:2a:35:c4:
c0:a9:1e:51:da:36:18:17:f3:0b:4e:7a:0e:7a:92:78:b3:5a:
fb:ba:9a:a5:35:3e:0b:60:0a:06:b9:5d:90:24:36:5c:cd:5f:
09:df:e7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:53:26 2026 by rpki-client