
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/39487b0b-22aa-390d-96e4-c72ab53e1c06.roa
File: 39487b0b-22aa-390d-96e4-c72ab53e1c06.roa (raw, json)
Hash identifier: s7Jv4bGkfsAxAB9Xv13nESr/U6gTQUA0G6tLd5ZG6Fw=
Subject key identifier: 45:A1:63:8D:A4:78:D3:67:2E:D3:DB:11:76:FD:18:BF:0F:D6:FC:B8
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584E059BE1B24F47076548957980
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/39487b0b-22aa-390d-96e4-c72ab53e1c06.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 7155
IP address blocks: 70.41.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9b:e1:b2:4f:47:07:65:48:95:79:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=886d3c60-6573-4e95-acc9-6a0f7432388e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d5:21:ac:c7:28:f6:32:d7:64:18:c7:8d:99:
be:01:fc:c3:3d:d9:35:27:4e:c2:2f:04:5a:d1:b0:
3f:0e:c1:26:86:e9:3a:0d:fe:2f:36:ef:38:80:bc:
bf:68:dd:e5:b1:39:3f:f8:31:99:6e:74:83:36:24:
e3:60:d9:ce:21:26:b2:8f:1d:b7:d4:75:33:fb:8c:
41:6f:d9:41:9d:a0:a1:b0:5c:03:01:82:13:c6:d2:
a5:ed:a6:43:a1:0f:87:b5:7b:cf:56:b6:cc:2e:f5:
46:eb:96:b6:d7:fa:a6:44:77:6e:2a:a9:cf:54:06:
16:f6:2a:62:a9:28:ac:d4:c9:e3:9c:aa:c9:ea:b9:
be:ad:36:d8:1a:00:ce:23:c3:cb:e4:99:55:d6:3a:
4d:4b:28:3a:6a:fe:b6:4c:ea:85:b5:f1:05:52:ac:
74:16:25:23:80:53:1a:50:a1:d4:af:69:95:d8:58:
e4:51:81:52:20:ef:2a:1d:b2:1c:3f:db:e2:6c:98:
85:96:04:56:29:5a:f8:48:71:b7:30:30:72:f1:f3:
2c:02:6d:2d:e8:93:dd:5d:c1:07:24:36:b9:c2:01:
99:1c:04:8c:a7:d4:03:93:c3:2c:53:ab:fd:e4:89:
a1:5d:de:ee:69:97:90:e8:16:b2:64:84:ed:9f:c3:
2b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A1:63:8D:A4:78:D3:67:2E:D3:DB:11:76:FD:18:BF:0F:D6:FC:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/39487b0b-22aa-390d-96e4-c72ab53e1c06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.225.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:f4:f4:32:ff:31:62:2a:cf:73:3b:5e:11:a4:68:73:65:d5:
4a:7e:a3:0b:6a:a0:d6:35:bd:ff:76:db:e3:d6:e6:32:3f:cb:
69:da:f6:2c:b8:07:21:45:07:91:f2:0f:4b:da:80:69:14:95:
2a:0e:67:0c:f2:6d:ac:37:bc:81:02:ba:76:1a:2c:b8:a7:a3:
f7:7b:eb:6f:5f:79:07:e0:34:34:d2:ed:99:6d:40:3e:4d:ea:
b5:7d:80:38:ff:41:4d:cc:de:d8:c9:da:4e:05:02:0e:a4:39:
e4:c2:6f:6b:e9:42:d0:b2:6c:5c:6f:ba:e7:d7:10:af:71:e4:
45:e8:67:cd:62:fe:ca:76:a6:9e:86:00:4a:a6:7c:73:21:bf:
9b:41:ad:f4:ad:19:7b:de:8d:39:77:80:df:34:f3:8d:a2:a1:
ef:c1:6a:31:f7:03:a2:22:2a:21:d8:11:dd:de:27:30:92:3d:
5e:6b:f6:5a:18:2a:8a:fa:d7:d4:68:8d:3b:20:27:50:90:2a:
f7:65:70:c8:a2:79:12:f9:79:7a:b8:9e:cf:b8:43:80:6b:0e:
b6:ba:de:9d:7b:f4:40:fb:62:9f:5b:43:93:8b:25:76:cf:9c:
fe:35:07:b8:0b:14:cf:99:dc:92:ba:03:81:30:c0:b2:5c:78:
43:f5:c2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:31:31 2026 by rpki-client