
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cd00562d-c510-3278-bc5b-277689f9a48d.roa
File: cd00562d-c510-3278-bc5b-277689f9a48d.roa (raw, json)
Hash identifier: pmGdk2Isg4ghog9piHjYUUcCo8tUlA0967Llajkp6P0=
Subject key identifier: 0D:3E:B0:72:5F:A1:9D:F4:73:12:CE:C2:08:F5:67:C9:3A:3A:2A:68
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24DFBCB7C8483719EC121940
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cd00562d-c510-3278-bc5b-277689f9a48d.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 72.173.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:bc:b7:c8:48:37:19:ec:12:19:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=be1ad4c5-6701-46f0-9731-27506a589e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2d:30:7a:d2:6d:68:77:bd:26:39:bc:5f:3e:
c0:88:35:e6:af:83:73:c9:a1:50:bf:b8:83:9d:f4:
9b:e9:f3:a0:aa:9b:60:09:8f:93:46:cf:50:41:4a:
f3:fb:6d:68:b9:e3:10:60:99:7c:2a:75:4d:4a:a6:
8d:e4:ce:cb:84:05:a6:fa:93:a1:34:0b:d3:77:c9:
39:b4:5e:f4:3f:49:63:d7:f7:6a:12:e6:b2:64:ae:
e5:2d:b2:ee:a5:58:06:ba:c0:12:cd:25:b2:98:3c:
79:ea:5a:59:41:5a:31:84:e1:c3:f2:d1:63:b1:df:
46:d0:e7:b6:90:16:94:f0:f1:1d:55:c7:9e:16:85:
55:ec:8f:6c:59:70:15:15:64:ba:23:a2:01:db:2b:
fd:5f:77:1f:1f:31:ae:62:20:4f:f6:f9:13:66:7d:
64:56:ed:3c:d7:6d:bb:ea:91:10:65:a2:bb:24:50:
96:02:40:8b:21:71:36:bc:de:0f:e1:21:f4:cf:43:
36:2e:79:04:84:2e:85:98:cd:43:d8:91:4c:2d:9b:
e7:8e:89:4b:28:cd:92:f5:59:8f:0c:6a:25:5a:55:
64:9f:ad:2a:2d:4d:0d:06:cf:ea:36:10:7c:9a:7e:
0c:e8:fe:e3:f7:ef:a0:63:89:9e:c3:90:d0:0c:c8:
91:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3E:B0:72:5F:A1:9D:F4:73:12:CE:C2:08:F5:67:C9:3A:3A:2A:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cd00562d-c510-3278-bc5b-277689f9a48d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:4e:99:80:68:bc:98:e9:a0:f9:0a:92:33:95:cf:9c:30:06:
99:c5:f6:90:a8:52:d3:79:7e:56:b8:ee:e2:c8:9f:f0:83:14:
02:db:db:54:89:ba:eb:b3:ab:41:d8:6a:aa:3b:cb:32:d7:96:
03:b9:db:44:74:f3:55:35:fe:bc:cf:d3:7f:b4:8d:da:c8:0f:
db:46:55:4d:7b:5d:57:a9:a6:52:50:0f:bd:51:b9:7a:91:c3:
a3:1e:91:36:75:00:19:3b:d2:e4:a0:61:29:26:8a:38:79:e2:
c5:51:ba:b5:98:93:04:e7:ae:bc:60:e7:06:bf:b2:6a:e6:40:
1f:4e:6e:d3:d8:b6:1c:47:e0:da:f7:2c:d3:aa:9e:3d:38:63:
59:c5:57:cf:0c:14:36:11:29:a9:7b:8d:3e:aa:d7:5e:90:9a:
6e:36:ac:09:ff:a0:37:91:6d:5b:e9:3a:8a:4c:57:41:b3:3d:
6e:41:2c:a6:e6:3e:83:f2:d3:cd:32:ce:cd:62:b4:ab:96:a2:
13:d7:74:95:d9:d5:99:b2:18:f8:6f:9d:6f:47:01:ee:ad:fd:
c7:f2:07:b0:12:bd:d8:23:06:56:52:61:10:bd:65:49:79:88:
8c:93:7a:eb:b8:86:66:c3:da:f4:e1:5c:eb:32:10:cf:59:c3:
99:ae:65:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:52:14 2026 by rpki-client