
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f39a5878-6524-3bfe-ac80-9915b7eeefb6.roa
File: f39a5878-6524-3bfe-ac80-9915b7eeefb6.roa (raw, json)
Hash identifier: yc2MDvKP7Rppe33bTREYAuqM17zyknq8gwtUoVb5KtQ=
Subject key identifier: 58:89:E6:36:4B:EC:ED:F5:14:7F:3B:86:64:35:7C:82:9B:3F:A8:66
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584E059BD892F06F70286B77E880
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f39a5878-6524-3bfe-ac80-9915b7eeefb6.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 40306
IP address blocks: 70.41.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 13 Jun 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9b:d8:92:f0:6f:70:28:6b:77:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=5ba99d37-cb78-49d8-b651-9fe5251a5daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:66:e8:6d:18:8d:9b:e3:37:ad:0e:3e:59:b1:
68:81:bc:26:92:a7:d7:9f:79:2f:7e:3e:82:2e:e2:
44:dc:11:cd:5f:c5:56:3e:c1:9c:00:93:f3:72:f7:
df:06:66:ef:fc:e1:10:f2:ec:81:2a:38:13:10:75:
8a:24:39:80:a4:f0:91:21:3b:64:21:8e:26:fb:f8:
9e:fd:72:b6:b0:71:76:62:6b:0a:3f:9c:ad:50:4e:
f3:fa:17:58:b0:e1:02:24:ba:0b:db:74:8a:5d:0c:
ab:45:f3:7e:67:a9:88:11:06:6a:52:77:1a:ab:81:
33:d2:de:86:8c:db:f0:9e:6e:99:97:9c:61:e6:92:
4c:30:88:98:8a:b1:66:35:81:60:74:26:16:63:7b:
16:52:bc:74:a3:ee:7a:da:b8:82:79:19:91:07:99:
e8:a1:53:6a:37:f5:ef:c1:13:ff:78:c7:e5:c9:e1:
02:e4:2b:e8:c6:7e:3f:c7:1d:8b:e5:f8:54:92:f5:
7d:f6:39:d4:5e:6b:1c:a2:c5:b8:0f:ce:14:96:35:
de:81:af:ae:a4:72:a3:81:b8:a6:43:e7:6d:60:6c:
e8:93:1a:14:86:13:23:17:5b:bb:1e:ae:70:09:98:
1e:e9:bf:a1:1e:37:db:48:98:fd:8f:67:cb:21:0b:
9b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:89:E6:36:4B:EC:ED:F5:14:7F:3B:86:64:35:7C:82:9B:3F:A8:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f39a5878-6524-3bfe-ac80-9915b7eeefb6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:f6:c0:71:4c:23:74:d0:30:4c:41:42:b1:81:4b:e1:e0:50:
97:1f:05:58:4a:43:fe:2a:58:54:99:93:a0:f7:17:33:58:e9:
cf:4e:d0:14:27:31:3d:bc:94:85:d7:9e:a4:c2:59:84:95:eb:
7a:49:32:ca:cf:c1:da:96:86:60:e5:3f:84:45:5c:7a:cb:71:
80:1d:c8:a4:39:90:48:76:b4:f0:dd:5c:3d:53:ae:cc:48:f5:
99:36:cc:b4:14:b4:d7:d7:43:bb:28:9c:61:6b:76:c1:d4:0c:
c0:82:03:c9:6a:1f:e4:13:e4:5d:d9:52:e1:9a:70:3e:dc:aa:
73:fb:66:82:6a:47:ab:9e:6a:53:10:58:57:6b:59:32:a7:17:
d2:40:fd:e9:ce:57:21:fe:a9:d0:f6:cf:25:6f:43:e1:21:e2:
cd:3c:72:a9:6a:e9:74:0b:02:ff:6c:44:a1:55:f1:06:57:39:
99:d6:a8:3e:66:81:21:ff:cb:43:de:30:dd:19:a0:4f:48:46:
ae:40:c9:4e:77:d7:de:20:64:77:98:14:0b:c6:eb:a9:ba:1c:
39:e0:19:0e:04:65:fd:6a:4d:41:49:51:b5:06:8a:0e:b1:58:
36:1d:b2:d1:69:51:ca:22:90:96:20:7b:7f:7e:8f:ed:cb:31:
06:ef:f4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:05:47 2026 by rpki-client