
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be596ea9-5fc9-30f2-a2c6-60174c9e0181.roa
File: be596ea9-5fc9-30f2-a2c6-60174c9e0181.roa (raw, json)
Hash identifier: 1cQWFkUViZBt2YQWE7rf0lO+kYYzf7TNf5zBFRL+Chs=
Subject key identifier: 5D:5D:BF:EB:8F:53:58:FB:A0:39:CE:1D:16:80:B7:FE:89:89:9F:08
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584E059BE343750CA3B544C2BD00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be596ea9-5fc9-30f2-a2c6-60174c9e0181.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 7155
IP address blocks: 72.173.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 13 Jun 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9b:e3:43:75:0c:a3:b5:44:c2:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=aa9badd5-cd74-41f9-8357-77a8c0af4781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:49:6d:ad:67:15:98:1a:4c:d2:7c:0c:6c:ac:
d7:61:c8:d0:78:2f:4c:7d:ef:1a:c4:7b:89:86:36:
1b:33:6d:0b:58:fb:72:68:af:0f:6a:fd:1d:de:4c:
36:12:f3:78:cb:a6:60:2b:f7:9d:98:0e:6a:5e:cc:
63:47:27:60:31:29:69:d2:9d:8f:26:2c:ae:b1:f0:
8b:8b:f0:56:85:10:aa:fe:1d:a3:25:1b:ce:06:21:
ec:4c:03:50:37:66:4a:38:d1:69:97:5a:e5:ac:e1:
17:ea:f6:f8:c1:50:7f:4a:f6:82:be:75:dc:f8:2c:
62:3e:66:87:57:e2:aa:08:e1:31:5c:36:8a:d2:9f:
e0:b8:56:61:98:3e:60:9e:04:82:6c:e3:bf:ed:a0:
14:66:87:71:3c:fd:60:29:62:87:3b:a6:44:3f:31:
f3:95:e4:d6:55:aa:b6:65:18:9a:16:d4:80:9d:5b:
66:ac:2e:22:98:3a:e6:23:e9:20:1f:5b:4b:2d:66:
2e:bc:67:3e:8f:5c:26:94:dd:b4:a3:18:b0:9b:10:
f6:17:8b:bb:a2:92:db:7b:a9:38:8a:db:11:f5:53:
66:05:5e:63:25:5b:e4:ea:e1:69:32:f1:01:73:93:
40:57:af:92:c5:df:73:c7:f0:1f:bc:9c:05:cf:ee:
75:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:5D:BF:EB:8F:53:58:FB:A0:39:CE:1D:16:80:B7:FE:89:89:9F:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be596ea9-5fc9-30f2-a2c6-60174c9e0181.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.33.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:ef:6c:23:c7:f6:73:bd:42:20:6c:0c:b5:cc:20:9c:64:e0:
e1:32:c2:7e:1f:de:6d:1d:db:36:c7:8a:99:e7:ac:4b:f8:f5:
b6:78:2b:39:c0:ec:44:db:63:74:43:d0:eb:9a:4f:f1:1c:2a:
f0:0b:10:f3:2b:cc:87:4a:fc:16:24:f4:be:53:30:2f:37:32:
b8:cc:df:71:ba:32:1a:ec:64:25:cc:7a:e8:a9:6a:14:0e:fe:
88:06:d0:a0:2f:f6:4e:96:3a:a9:c2:67:b3:3f:10:e1:c4:fb:
f2:c4:13:94:ed:14:98:8a:8f:8b:b6:dc:7d:28:c2:2b:6f:32:
2c:5f:d9:d6:bc:48:cf:ee:ce:10:d3:88:7b:9d:33:06:ff:a7:
50:35:0a:13:04:0c:36:9a:31:1f:01:b0:cf:96:ec:27:00:b0:
6f:90:71:34:60:45:76:f8:bd:6c:f7:de:18:af:2d:dc:1c:6a:
af:29:66:0a:18:5c:61:b7:62:43:56:9e:14:c7:a0:e5:94:a4:
ec:d8:6b:aa:bc:fd:66:65:88:6d:4b:8f:6e:01:14:08:a7:a7:
91:b4:3c:f3:32:c3:d1:73:80:ca:6b:08:22:f5:5d:40:05:64:
df:5b:ed:48:b3:1a:86:1b:ab:56:62:fa:3d:4a:ea:bd:08:79:
46:95:56:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:22:59 2026 by rpki-client