
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/2f587009-073f-3211-bc8d-0e9ff0a03ec3.roa
File: 2f587009-073f-3211-bc8d-0e9ff0a03ec3.roa (raw, json)
Hash identifier: lVD9DI2kkjC1qhx8lqGP9D4+OK96ajc0DmUGPG5YCtg=
Subject key identifier: 06:68:20:06:31:B3:46:37:05:A9:D9:1F:1D:D4:F6:5A:AD:41:05:71
Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial: 010D0C9F4328584DD4C067A950BFD15194703040
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/2f587009-073f-3211-bc8d-0e9ff0a03ec3.roa
Signing time: Thu 14 May 2026 13:00:31 +0000
ROA not before: Thu 14 May 2026 13:00:31 +0000
ROA not after: Wed 12 Aug 2026 13:00:31 +0000
asID: 20473
IP address blocks: 173.239.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 27 May 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:d4:c0:67:a9:50:bf:d1:51:94:70:30:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Validity
Not Before: May 14 13:00:31 2026 GMT
Not After : Aug 12 13:00:31 2026 GMT
Subject: CN=f7749fb5-a24b-4f77-9cde-2e5f15701c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:dd:73:75:d5:a6:df:e2:7c:7a:dd:59:86:8b:
b2:48:2e:dd:7f:07:49:d3:58:c5:27:35:3e:19:87:
ac:8d:ac:06:8d:31:60:7d:ff:e2:38:e2:3c:d0:4a:
ab:89:d6:eb:3a:02:44:27:27:9b:a0:e9:cb:b0:e4:
e9:bc:bd:60:51:d1:2e:6c:79:55:81:85:2a:02:1f:
76:f9:53:12:e0:3c:0c:3d:0f:5a:a8:bf:9c:5b:ca:
df:bc:ac:17:b7:27:85:f6:9a:3c:56:28:4e:0d:cd:
2e:7f:80:0c:1b:f2:22:57:8f:64:93:ff:ce:1f:3b:
1b:aa:41:ef:24:d7:45:bc:c5:97:84:fa:ca:73:34:
f1:3f:a6:4e:8b:de:1d:e8:0c:f9:5f:b5:e5:25:dd:
04:49:27:20:ea:3b:31:43:18:99:d1:4d:cc:8c:2f:
72:49:56:dc:14:f9:90:21:f6:87:31:13:99:43:94:
23:c8:2f:d8:fe:07:54:72:43:3d:10:05:ce:39:e8:
7f:5c:81:72:77:42:78:f9:91:31:c4:c5:37:b3:58:
7c:8d:f3:f9:70:9c:60:e5:0b:f7:20:b6:4d:7c:41:
c3:58:3a:58:84:0a:da:0b:68:71:3c:2f:95:91:f6:
57:2f:45:c0:ad:9b:76:2a:6d:ed:ec:8b:4f:64:ff:
65:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:68:20:06:31:B3:46:37:05:A9:D9:1F:1D:D4:F6:5A:AD:41:05:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/2f587009-073f-3211-bc8d-0e9ff0a03ec3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
X509v3 Authority Key Identifier:
keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
sbgp-ipAddrBlock: critical
IPv4:
173.239.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:03:4e:04:30:72:02:e4:b7:89:cc:2a:45:9d:b1:f4:64:81:
c6:17:77:bc:e3:25:4a:12:2e:0d:56:06:2b:7c:e0:f7:67:85:
16:d3:27:4b:5e:e5:03:84:92:36:1f:f0:2f:d0:7b:78:5b:27:
9c:4b:f5:64:39:40:aa:73:89:7c:0d:10:2d:74:34:c6:8b:fc:
8b:f1:ef:fc:4c:40:f4:e9:a4:03:a0:93:46:ee:15:d7:dc:4f:
d8:6e:1b:62:07:2c:38:06:90:f2:95:09:8f:61:e9:9b:75:22:
30:25:d4:b8:b8:08:15:cf:bc:c3:28:ba:2d:a7:36:90:f9:f4:
27:d5:f9:9a:16:af:6a:40:39:d3:7c:55:df:d1:bf:c6:99:70:
fa:27:fd:86:4d:cf:fd:31:d2:b9:71:c8:43:01:43:82:44:bd:
f3:03:ab:a0:fe:6b:f9:55:79:6c:94:3c:e0:19:35:1d:8a:bf:
75:56:42:fe:da:e7:1c:0b:9c:64:c2:8b:99:96:68:26:86:f0:
ef:5f:2c:92:09:c1:b5:34:87:dc:a1:23:03:97:ac:38:b2:a3:
59:8f:f9:b8:27:e1:0c:0f:56:c0:fe:1e:76:9a:18:7c:b9:05:
5a:21:de:f6:bb:32:35:87:e9:a4:6a:35:eb:57:70:e5:d5:b8:
1b:46:cc:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 05:33:58 2026 by rpki-client