
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/129dca48-db60-34d2-801e-0d7c82dc0f87.roa
File: 129dca48-db60-34d2-801e-0d7c82dc0f87.roa (raw, json)
Hash identifier: QhtYhxLvorjSLj6WUG4PMRyZclD+TEIaMncvqScUlMk=
Subject key identifier: B0:91:4D:A9:E3:C0:AE:32:D7:66:D3:6B:75:26:D4:22:E9:05:F5:F0
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584E059BE3BD6DDDB9250FEC9180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/129dca48-db60-34d2-801e-0d7c82dc0f87.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 7155
IP address blocks: 72.173.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9b:e3:bd:6d:dd:b9:25:0f:ec:91:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=f9ce0e15-a130-47a1-aee8-48b55cb5bebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a5:2c:b2:61:fa:16:09:33:bb:fa:1f:72:64:
5c:16:3f:e6:15:33:dd:dc:0a:c2:8d:a3:3f:a3:51:
9e:43:b2:e0:a5:5c:e2:c6:1d:27:47:2f:5a:91:e9:
f9:8e:59:63:0c:16:0a:1c:1c:b5:91:2d:0d:bc:6c:
18:fb:ec:86:32:ae:6f:63:5f:d9:53:ce:9e:de:c7:
c4:79:f8:bb:8f:85:77:05:84:27:10:2c:8b:ca:39:
53:30:4b:22:ef:8b:d0:46:6c:40:19:54:51:00:b5:
86:2f:ba:36:95:ef:dc:38:a1:b8:f8:98:bc:db:84:
e3:dd:89:79:87:56:37:55:50:fa:67:3f:36:c8:35:
fa:af:d6:bb:5d:c3:a7:0e:9f:42:99:5f:c0:6a:52:
41:68:3e:41:68:02:99:57:97:50:50:0f:41:e1:cb:
bb:98:46:35:4b:95:a9:fb:ad:e8:a3:d5:66:d7:e5:
ae:26:3f:17:32:e8:49:f8:66:16:7a:ad:6a:83:e8:
78:52:96:6d:a7:ad:c8:84:05:3a:ce:b3:7b:6c:77:
e4:ff:bb:c6:0d:b2:f4:b9:00:9e:c2:94:58:7e:06:
23:54:08:11:b1:04:bd:a7:b9:19:6d:3b:e2:71:c2:
3b:b4:bf:f2:cf:82:09:4a:fb:24:e9:dc:8f:12:aa:
42:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:91:4D:A9:E3:C0:AE:32:D7:66:D3:6B:75:26:D4:22:E9:05:F5:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/129dca48-db60-34d2-801e-0d7c82dc0f87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.59.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:2b:56:5e:4a:5d:da:f8:98:bc:76:97:4d:e2:d5:88:e9:36:
dc:40:76:ec:82:47:64:5a:29:f1:24:3d:12:8f:ce:4b:35:08:
c4:a1:d3:7c:c7:0a:53:82:10:31:9b:8d:cc:23:b0:be:b2:96:
ff:48:35:e4:5b:9b:1b:b3:8b:fa:20:48:f2:70:61:5d:32:fd:
85:2e:3d:7b:3a:3f:1d:20:5d:ff:ba:eb:5c:ca:98:bd:45:db:
8d:0e:12:d2:5b:e6:07:42:d9:d5:94:7c:9c:89:2d:7d:d7:14:
bd:69:48:e0:f3:9f:0c:a3:7c:6d:26:2b:03:b8:f1:f8:6f:fd:
ed:ed:07:0a:89:a6:06:7f:a5:f2:06:8d:a3:c3:62:d7:93:aa:
1e:17:48:16:30:e9:58:9c:e6:8d:2a:40:38:62:b7:44:b7:fc:
a2:e3:70:2d:66:4d:38:96:99:5e:26:d5:9e:ed:f2:78:ef:db:
8b:b5:a2:ea:55:24:8d:4f:de:61:1d:84:cf:2d:e0:f1:56:0d:
d6:cb:98:3c:60:62:e9:8e:05:63:48:f3:06:b6:aa:3a:87:7d:
c2:4a:99:5a:08:66:45:66:b2:de:57:87:dc:08:dd:9e:4f:47:
f5:a7:fc:b3:d6:a5:b1:40:85:ef:a0:23:4f:f5:8b:fd:3d:54:
d0:e9:a3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:31:22 2026 by rpki-client