
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04114cad-7ec5-3696-b7ac-b904c25e638d.roa
File: 04114cad-7ec5-3696-b7ac-b904c25e638d.roa (raw, json)
Hash identifier: ZRl2dVzBW+Ex0COTAPv7njHBgcLuA+WYNMnJ8r0HAgQ=
Subject key identifier: 91:34:FC:96:8B:72:61:96:C2:7B:E8:5D:50:90:82:53:CA:A6:8A:0D
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584E059C1670625E2DD2490DE2C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04114cad-7ec5-3696-b7ac-b904c25e638d.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 7155
IP address blocks: 172.242.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9c:16:70:62:5e:2d:d2:49:0d:e2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=b8a46e57-8409-485e-b353-e2d364091a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:93:35:da:c0:f0:44:e4:02:37:32:1e:90:35:
2d:ad:3d:d4:7c:4b:f0:11:8c:8a:60:9f:be:1e:50:
19:78:59:0b:02:c9:a6:d4:df:8f:8d:0f:8c:bb:e3:
3d:8d:4f:7d:11:d0:8d:8e:94:93:f7:50:d0:ce:25:
5a:75:83:7b:de:30:97:74:94:2a:db:b4:16:1e:03:
8e:fe:3f:b2:b1:c6:94:4d:19:40:b2:57:c9:82:90:
ef:5f:e0:04:59:9d:32:06:39:b0:b8:23:90:ac:eb:
6e:fa:a5:30:42:d9:d9:e3:20:81:ec:ed:69:66:38:
a9:a1:31:c5:f4:72:f3:61:10:dc:28:36:10:c2:41:
dd:69:87:70:4e:62:c8:d5:cf:ca:b3:37:ac:1c:13:
fd:60:fb:5c:f6:f2:b7:d0:50:57:bb:13:87:79:25:
a4:c4:2b:46:28:63:0c:b7:61:49:cd:f7:da:6b:7f:
ba:5a:13:fb:4f:73:9b:9e:1c:4d:d1:86:8f:70:ca:
37:fb:69:f6:b1:1d:2d:62:43:fc:34:b0:dc:98:da:
c5:72:e8:0f:c4:6a:e7:0e:b8:20:85:dc:fd:4f:e4:
f2:89:57:77:23:be:15:b0:24:6b:76:41:73:0c:e6:
e3:08:16:19:f0:a2:03:23:9c:da:07:b7:c7:28:3d:
2a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:34:FC:96:8B:72:61:96:C2:7B:E8:5D:50:90:82:53:CA:A6:8A:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04114cad-7ec5-3696-b7ac-b904c25e638d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cf:c9:77:ed:3e:65:26:0e:a7:9c:b4:b3:32:8a:32:c2:97:bd:
1a:5b:69:67:de:53:ec:7d:7d:3f:93:ed:9e:c8:65:27:79:32:
ec:32:c6:d7:0d:4a:f4:7e:b7:e9:44:7c:bb:2e:8f:f3:9b:2c:
c7:52:b2:93:11:31:26:cc:b1:ee:a1:f2:15:2d:ff:6f:db:64:
05:77:6a:59:e3:6d:79:40:3c:7a:a7:6b:b4:de:7f:00:97:cc:
d6:ed:56:25:38:77:6c:68:15:e0:6d:b5:fb:a9:bf:73:5c:ce:
78:5f:5c:96:47:a0:da:2a:78:95:56:73:04:7c:ab:5d:68:73:
dc:1a:53:66:1e:b2:45:36:52:5f:52:6b:14:31:e6:b0:0a:e3:
46:3c:a3:01:78:e1:f9:82:1e:80:13:68:24:3e:ac:25:63:fd:
19:b8:76:08:ed:af:8f:d6:b9:4f:b1:7b:81:10:8e:57:21:cf:
10:ef:a5:92:59:cc:bd:bf:a6:72:96:3a:5f:f8:47:36:fe:11:
52:8f:70:71:ef:ca:fa:f1:67:4f:7f:ea:ef:b4:c0:07:3e:96:
64:44:2d:60:8f:da:df:d3:7f:9d:4d:5d:c0:2e:56:56:77:7b:
3b:a6:04:f6:a2:42:a0:ea:aa:f8:35:c2:c3:76:d4:d2:7c:48:
0a:6e:98:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:24:19 2026 by rpki-client