
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2588053c-c585-3489-b0fa-484dcaffdc89.roa
File: 2588053c-c585-3489-b0fa-484dcaffdc89.roa (raw, json)
Hash identifier: Gmkw5fXKmdaScMQfb9HU83gLWDg+pOUwd0zVEDpAQsc=
Subject key identifier: 43:43:25:AD:8D:1F:C8:8C:EE:A9:B0:A8:69:8B:4E:A7:79:17:A5:AB
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584E059B9AACC25DD3DACCB374C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2588053c-c585-3489-b0fa-484dcaffdc89.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 7155
IP address blocks: 172.243.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9b:9a:ac:c2:5d:d3:da:cc:b3:74:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=bc612b22-9405-4bb0-a77a-d4158e620ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9a:e7:44:f2:35:4d:38:6b:2d:50:93:0e:7f:
64:71:01:19:5c:71:a1:54:37:e2:90:27:b7:f9:ad:
b0:fd:14:af:c6:4a:92:00:ea:77:c2:78:ba:fd:6e:
33:c8:c6:d2:a2:10:58:e4:93:66:52:51:13:14:60:
69:2a:6e:cc:a4:89:2e:a7:ec:2c:ae:81:56:04:1f:
ed:b0:9c:55:cb:e5:be:12:d4:34:f9:10:16:e7:7f:
d4:28:39:35:ed:d2:99:7c:86:b7:c1:65:d6:fa:85:
2d:eb:4f:34:db:13:59:1a:40:d5:c0:67:e2:fc:f8:
04:b3:d5:14:33:90:dc:cb:fa:88:95:f8:91:1d:ae:
c2:a8:fd:4a:ad:18:a5:a2:75:70:3b:ab:7c:b8:e2:
f2:57:61:28:25:97:ab:3f:de:c2:6d:9b:d8:26:d9:
21:d3:7c:9b:0d:ca:23:3b:cc:39:60:49:70:3a:2e:
5c:4e:20:c1:9e:aa:e9:1d:ca:97:35:ba:33:f7:9c:
8f:e4:2b:f1:c1:e5:d8:bc:83:73:3f:03:75:e4:37:
dc:ad:a5:5a:f0:92:12:44:8c:e3:46:4e:bc:fe:6e:
9c:19:32:73:6e:f7:dc:48:72:10:44:bc:be:a3:c5:
65:ba:76:92:16:e9:90:f2:b1:c5:9f:d1:b8:82:30:
45:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:43:25:AD:8D:1F:C8:8C:EE:A9:B0:A8:69:8B:4E:A7:79:17:A5:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2588053c-c585-3489-b0fa-484dcaffdc89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.49.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:66:35:5f:65:45:29:2c:7b:19:ef:d7:8e:e6:a4:51:77:3e:
a3:c1:7e:46:1f:7b:27:ab:d9:38:93:ab:68:10:cf:04:fb:da:
26:49:49:9b:26:e5:52:89:99:e5:fc:28:36:ba:d5:5b:3b:46:
f1:a6:00:7a:f8:21:ac:d2:67:3d:c7:04:43:7e:ef:a6:ec:f1:
2b:2f:15:08:e7:cd:9d:72:be:ed:73:42:79:40:70:f9:06:2d:
b5:2c:bb:7a:51:8c:fa:e3:1d:46:ad:0c:9a:f5:be:3d:b9:e4:
9b:97:70:8a:e3:a7:c4:a0:bb:76:2b:f4:86:ab:86:5a:29:d6:
83:e0:b3:94:41:7f:19:54:63:84:6a:3a:f8:49:6c:b5:be:41:
e6:b6:f1:a6:76:f5:64:40:0a:4b:18:b3:23:5b:13:76:50:fb:
54:83:d9:7e:62:a0:0c:bd:80:f0:da:7b:9a:8f:4b:9b:7f:cd:
7b:06:86:6f:82:2b:99:b7:02:6d:cc:91:c1:34:a2:80:02:de:
a7:f0:08:74:99:1e:7d:6d:09:fb:4d:c6:58:c4:4a:07:05:91:
e1:45:eb:0b:4f:57:24:20:6a:9a:ff:b4:57:54:e8:6e:a1:30:
6e:e0:41:c8:e9:58:95:36:be:7b:12:f1:5f:a9:31:1d:8b:6b:
26:ef:86:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:17:06 2026 by rpki-client