
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/b01d2239-7b24-3ca6-9965-8de122cf4593.roa
File: b01d2239-7b24-3ca6-9965-8de122cf4593.roa (raw, json)
Hash identifier: oiP0MZcrIlQAi1pmdTwVOHG0Oc8Wd0PJHK0NmUNoadE=
Subject key identifier: BE:84:11:F0:66:08:60:D2:00:0A:83:05:25:5B:2A:9B:8D:68:D8:51
Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial: 010D0C9F4328584E059C6CBB020E02A122278E00
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/b01d2239-7b24-3ca6-9965-8de122cf4593.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 14813
IP address blocks: 72.22.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 09 Jun 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9c:6c:bb:02:0e:02:a1:22:27:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=3710c65d-775b-4938-82a4-4c79b0dd73b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e5:ce:e3:a2:a7:28:7f:90:8f:9b:cb:93:93:
97:03:68:3c:50:05:12:46:3f:7f:bb:e5:f9:b4:36:
a6:53:fe:42:6a:03:7c:a6:09:2e:8e:76:61:46:50:
0e:64:17:9b:d5:3a:a5:6c:10:96:50:c7:2c:ff:61:
08:da:29:54:d9:68:b1:e7:4a:85:a2:ce:94:1a:68:
6c:99:76:d9:bc:af:fa:f0:3b:f6:a5:7a:b9:1e:07:
35:89:95:98:0b:f5:c5:c6:68:0f:41:1b:97:06:a5:
a6:59:ff:a3:41:00:72:04:5b:ec:10:a9:28:99:f8:
e8:be:08:8b:9b:0d:96:0e:5b:5e:56:06:da:37:9c:
90:eb:01:ed:10:2a:b8:d4:62:07:34:29:19:b6:fa:
83:b8:f3:91:37:5b:7f:9c:69:fe:ac:bd:c7:85:04:
1e:25:11:a3:6b:da:5d:38:d8:ef:3f:40:e9:21:10:
e4:cd:8b:bb:68:68:27:12:c8:f4:8d:f2:09:95:a5:
4a:a4:95:f8:e3:ee:4d:8b:77:df:82:57:71:63:ff:
04:9e:4a:92:3a:72:0a:96:5c:23:f8:4c:90:6e:49:
c2:3e:ef:ec:9c:17:e7:fb:89:0d:97:12:7f:16:69:
39:82:3f:f4:b6:39:23:b7:a0:18:c9:f9:73:20:3b:
4f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:84:11:F0:66:08:60:D2:00:0A:83:05:25:5B:2A:9B:8D:68:D8:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/b01d2239-7b24-3ca6-9965-8de122cf4593.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
X509v3 Authority Key Identifier:
keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
sbgp-ipAddrBlock: critical
IPv4:
72.22.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:7f:a5:c1:ee:6b:21:21:3a:40:74:2b:d7:39:46:7b:ff:03:
a3:2e:d7:91:0f:7e:01:53:2e:3e:08:70:bf:83:77:64:21:7c:
3e:8e:e3:03:ee:e9:50:51:fc:91:5b:be:8e:cd:5d:07:ae:87:
84:68:bd:99:dc:b3:e0:1b:4a:61:e1:6f:da:a2:35:44:ea:99:
11:b9:26:8b:ab:b2:0e:18:23:ff:a8:21:66:fe:f1:b4:e4:e2:
38:3c:80:23:35:9f:7e:e0:64:af:0d:98:ad:c9:ce:81:1b:e7:
51:55:14:9e:96:77:2c:04:af:00:3d:10:f0:21:f3:d9:66:7e:
28:5c:50:53:0e:b4:b6:51:b8:17:81:c9:d1:8b:eb:4d:d5:73:
6e:73:4d:6e:36:7b:dd:de:9b:ab:44:74:d1:4f:62:d0:2c:bf:
8d:3f:ec:54:70:49:5b:06:67:8b:7a:d7:07:a8:17:ad:c6:8b:
e1:f0:98:3a:8d:a9:ea:27:e9:b1:fe:1a:e7:5a:0c:cc:06:b4:
c0:d6:c5:99:09:f8:31:4e:e5:c9:69:8f:3c:36:ef:13:5d:c6:
ea:48:2e:a1:6a:f8:ff:41:c6:a9:73:46:b5:75:0b:03:76:bf:
4f:be:26:af:54:04:2e:e9:ae:ac:49:ad:06:b7:fc:11:d4:ce:
6a:8f:d4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 8 22:04:15 2026 by rpki-client