
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2f2475e9-3da6-3450-a13b-396573faefd4.roa
File: 2f2475e9-3da6-3450-a13b-396573faefd4.roa (raw, json)
Hash identifier: VAgPgCiUKc9Crk9TYY8XQ/tRixIhtAG2Q3NBDsHLbQ0=
Subject key identifier: DE:B9:22:6B:7A:D3:9D:3E:8D:4B:95:A4:F9:A7:58:18:7E:56:27:A7
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584E059B639C7CFB815C9EDCFC00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2f2475e9-3da6-3450-a13b-396573faefd4.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 7155
IP address blocks: 70.41.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9b:63:9c:7c:fb:81:5c:9e:dc:fc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=7b32daba-da91-467b-b414-7669f75c7d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fe:c9:9f:31:de:88:2c:87:2d:7f:0c:bb:90:
8f:b6:89:91:43:63:be:1b:b0:2e:2e:ad:43:49:3e:
61:ec:91:df:2b:ec:5f:7d:5b:c1:9a:21:fc:9b:7c:
bd:f7:f8:fd:df:8d:3e:3d:b3:aa:cc:7a:95:66:c7:
fd:c3:07:35:fa:89:eb:c6:e0:1c:f9:34:e0:9c:4b:
1f:f9:de:3d:77:41:87:d8:12:98:f0:ac:1a:4d:23:
25:aa:9f:cc:ba:b4:27:8e:6f:88:7a:87:47:c0:7f:
50:39:03:ca:43:ed:1d:03:a4:0c:f3:68:a5:98:d7:
59:54:98:92:13:7e:b3:5b:a1:dd:9f:bf:85:75:d9:
fa:78:12:89:11:e4:c2:51:4c:bf:8c:de:a3:21:31:
62:bc:1e:e3:96:0d:f9:6d:7b:50:f3:69:4a:ee:bc:
bd:fe:45:18:6b:61:ab:8b:8a:01:39:f6:8e:8a:07:
1f:2c:32:00:1f:1d:ea:9e:f5:cb:c1:51:6d:b6:6d:
3a:f9:02:2a:32:85:0e:8a:b5:f9:3f:a0:5a:32:d7:
f7:f6:85:d8:19:e2:5c:e9:15:ad:17:fd:6f:c5:43:
7f:c5:67:99:9a:26:02:7e:55:4c:88:07:32:69:10:
da:9b:ff:07:8f:b8:ec:b2:de:18:01:7d:8b:2d:8b:
37:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B9:22:6B:7A:D3:9D:3E:8D:4B:95:A4:F9:A7:58:18:7E:56:27:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2f2475e9-3da6-3450-a13b-396573faefd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:f8:2e:16:84:2d:4a:a6:e2:21:55:8f:6a:bf:86:22:5e:c7:
68:ff:bc:c7:92:14:74:02:8e:33:39:01:f9:05:ff:f7:06:11:
fa:3d:ed:f8:fa:15:31:b3:37:35:3a:f6:ca:ad:7c:7a:0e:76:
23:d1:11:af:9d:d5:60:3e:09:b4:e0:73:ee:bc:08:13:88:1c:
c4:8d:c4:be:53:4e:0e:e5:25:c4:97:9d:49:f0:4e:86:f0:93:
f9:0b:19:31:f6:41:0a:1a:49:61:bc:4b:7c:6a:e0:79:c2:3f:
3d:b9:bf:11:96:49:29:55:93:c3:e3:76:a0:1d:17:56:f7:ad:
96:d5:65:ad:ad:29:f3:08:37:02:a2:70:be:df:82:c4:83:33:
b0:c8:1d:bf:25:a2:c4:ff:51:1b:e3:5f:ad:fa:a6:7c:09:a7:
c7:2d:8f:10:a2:a5:ab:fa:a2:e5:bd:79:84:f0:4f:49:7b:c7:
05:00:f5:43:94:26:ba:25:36:6d:8c:8a:b9:10:a5:b4:53:10:
c4:9f:b8:75:db:d9:9d:20:99:ed:f9:32:d5:e5:ec:71:eb:65:
a4:a4:79:df:86:06:f1:79:34:cf:8b:37:aa:3e:53:fb:b5:e2:
7a:e0:e7:15:0f:b2:37:cf:90:f4:3f:a1:37:e9:b1:d5:92:ed:
05:40:85:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:55:16 2026 by rpki-client