
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d647b28c-0262-394b-917f-9592b2c72397.roa
File: d647b28c-0262-394b-917f-9592b2c72397.roa (raw, json)
Hash identifier: OgQuQTBcuh0QVxr4WyTM8naVXATNnkLDhNJZnH5jvDs=
Subject key identifier: B3:02:09:53:68:DA:6D:C8:7E:A8:E9:61:E2:23:31:E5:2C:9F:BD:6D
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584E059B9830DD658BEB96469460
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d647b28c-0262-394b-917f-9592b2c72397.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 7155
IP address blocks: 172.242.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 13 Jun 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9b:98:30:dd:65:8b:eb:96:46:94:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=697d92bb-0ec0-40b2-a4c9-3aa4c3ad9aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2c:54:6a:fd:4d:7f:38:64:ba:83:a4:c1:1b:
e5:97:65:e8:8a:30:5e:42:c6:3d:7f:81:f3:17:25:
9e:5d:11:97:7c:6c:71:3d:f8:e6:1b:07:1c:97:ed:
89:63:40:e1:98:a0:29:e2:cb:1f:27:4d:3d:14:dc:
9c:0f:51:ae:e2:0f:7d:64:a3:5f:dd:93:1e:9e:00:
14:74:b8:bc:86:53:ae:8d:a8:94:64:ba:f6:e6:f4:
07:a0:9e:ab:bf:d2:a6:cf:9c:bf:9d:1d:42:f6:76:
3f:6e:08:ec:07:03:bb:69:5d:00:4f:1e:70:5c:6d:
67:4f:68:6c:8b:69:84:b1:41:ec:69:07:bf:77:b9:
65:fb:97:1d:f9:84:87:1c:9c:15:cf:63:75:cc:22:
b2:33:6e:3e:5d:82:27:d9:c4:68:ca:61:37:73:30:
48:31:71:fd:fd:29:b4:72:f8:2c:a7:ec:6a:d1:78:
3c:de:19:85:1e:7c:c6:f5:5d:50:76:1c:a0:b7:b1:
88:be:ed:20:81:12:45:d3:fc:f4:8a:1a:f6:61:dd:
a8:28:7e:ad:46:00:49:34:24:dd:21:d7:a3:78:1e:
19:0e:63:7a:2e:b7:3a:b4:b8:eb:f0:07:fd:c7:90:
31:06:e5:b2:e6:ec:0d:a5:01:55:aa:dc:8c:90:6e:
54:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:02:09:53:68:DA:6D:C8:7E:A8:E9:61:E2:23:31:E5:2C:9F:BD:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d647b28c-0262-394b-917f-9592b2c72397.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:29:fe:3b:8f:2c:3a:f0:c1:f5:2e:37:c8:a4:e8:de:23:d2:
4b:8d:80:58:b0:ae:e6:0c:38:bd:a7:34:93:97:66:92:6b:54:
20:8b:f0:70:15:1c:4e:f8:ca:43:57:d6:7d:aa:86:10:0e:5d:
ac:5c:40:4d:25:b6:fc:be:60:37:63:ed:95:cc:e7:b2:92:11:
78:d2:11:52:cb:3e:01:13:a6:db:78:e3:0f:74:c9:90:f5:0b:
0a:6f:ce:15:54:48:68:54:05:37:cd:85:74:1e:5c:08:f3:1e:
67:9b:51:47:a5:7e:b7:b5:1d:ee:9c:28:08:45:0a:5b:ee:8e:
77:72:e1:38:3c:c9:d1:91:cb:7f:7c:ab:c2:40:ab:26:b3:b1:
78:1e:93:23:a5:ec:e8:bf:60:48:34:7d:0c:a6:79:d4:58:87:
ea:58:74:b2:0c:2c:d5:f7:a4:05:96:fc:29:a9:82:3e:11:1b:
dd:3a:9a:13:e0:68:5e:ff:53:85:22:0c:8b:c4:da:4d:27:31:
be:11:10:9d:38:61:8c:c2:db:24:60:ee:fe:53:cc:f1:37:27:
f9:e9:0c:84:2f:b4:24:57:79:be:80:25:06:a0:98:01:a2:39:
6f:1d:17:a4:ce:de:15:7b:c2:3e:44:4b:1f:24:93:6e:52:b4:
67:12:1a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:26:14 2026 by rpki-client