
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/211f3321-560f-3a2b-8d66-b8dfee188a5b.roa
File: 211f3321-560f-3a2b-8d66-b8dfee188a5b.roa (raw, json)
Hash identifier: r0SFhxmxGvvtX7hERTjDIBQr8vB34VqrCBTH5IF5UAQ=
Subject key identifier: 78:B2:75:F0:0D:54:9D:00:7A:54:13:91:87:6A:BE:6B:36:89:C2:69
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584EA79D81120BB9398C321ACD1E
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/211f3321-560f-3a2b-8d66-b8dfee188a5b.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7155
IP address blocks: 70.41.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9d:81:12:0b:b9:39:8c:32:1a:cd:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=a5018f0d-0749-42c0-8509-dc9eaf6c5711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:9d:0e:1d:ff:69:94:21:f6:8c:42:63:17:7b:
ee:f4:b4:68:a9:50:6e:96:16:ef:70:3b:fa:5c:ea:
c3:81:98:11:2f:3e:a5:4a:16:08:79:0d:fa:d0:b6:
9f:4f:f2:29:98:47:d8:cd:7c:9d:99:85:3d:7f:f7:
a2:d7:9b:09:87:c7:8a:dd:84:7a:9e:2a:38:ce:38:
41:98:88:d7:b4:a2:40:85:17:b2:96:32:03:39:76:
3f:43:58:f4:d5:91:94:81:c3:ba:69:f2:a5:a8:10:
b3:78:e3:f4:4f:b0:4b:ec:4d:c1:f4:3c:6e:7e:8b:
84:90:99:b2:e3:c9:e1:b9:41:67:45:1a:ea:13:ff:
1f:43:40:58:bf:3f:f0:49:b2:2a:3d:04:9a:e7:19:
dd:c4:fc:07:12:3f:b2:c0:de:5d:01:d3:50:ec:8f:
45:6d:0b:7c:6c:41:2d:91:a5:bf:2a:6a:4e:88:66:
bd:49:5b:7d:88:d1:29:42:96:38:eb:6d:42:9f:86:
d3:ed:4b:03:db:1f:17:ba:a3:2e:32:54:d7:46:eb:
e5:25:f6:87:94:44:86:64:dd:3a:2f:ad:a7:15:b6:
93:f3:9b:fa:4f:88:b7:51:73:fc:72:0b:0e:ee:af:
77:08:b0:c2:9e:5e:57:aa:8a:9d:a0:bc:84:60:58:
66:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B2:75:F0:0D:54:9D:00:7A:54:13:91:87:6A:BE:6B:36:89:C2:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/211f3321-560f-3a2b-8d66-b8dfee188a5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.252.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:b1:32:d2:b0:ae:d6:a2:ab:62:5f:28:dc:0d:0a:1b:33:d6:
22:49:38:53:c9:c9:33:84:7e:f1:e1:41:f5:9e:fc:2c:6a:de:
24:22:7e:fc:f3:44:ef:d0:bb:a7:0d:00:fe:63:8c:4f:63:03:
89:8f:b6:ea:fd:82:7c:8d:65:e2:95:b7:af:c3:d6:d4:af:10:
43:29:9b:8d:1b:a5:9b:ae:6c:1d:60:95:b7:d0:8b:52:38:d1:
d4:87:cf:67:c6:da:ba:48:1b:d5:e6:c0:a3:75:de:3a:ff:2d:
1e:02:c5:f3:cc:d8:bc:36:d6:a4:8b:25:e7:72:03:49:8f:d1:
52:8e:5c:6d:cc:5c:3c:5f:35:ad:ac:9d:4c:ea:b3:48:09:17:
11:7f:53:f4:4a:bf:97:71:07:40:3b:1a:29:84:85:0a:cb:f8:
2a:38:9f:97:5e:bc:c7:38:36:2e:2c:e7:32:aa:14:65:cb:a9:
12:f0:8f:10:e7:d3:62:b3:5e:7f:aa:1d:42:f6:5e:f0:a5:30:
e9:c6:2b:c0:ea:74:a3:0a:02:3d:fc:ff:a6:4e:d8:cc:d1:a3:
49:b2:c2:8c:15:ae:09:f6:05:4b:af:db:79:3c:08:ae:b0:5e:
cb:03:16:46:9f:41:8d:63:c1:8c:86:15:d2:ca:b1:d9:ba:68:
94:37:12:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:15:38 2026 by rpki-client