
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/57c3f995-df83-3afa-aeac-7353f1f7daa1.roa
File: 57c3f995-df83-3afa-aeac-7353f1f7daa1.roa (raw, json)
Hash identifier: CgGxbDn+NH0gCRtLUuG+n90zIB27OJXZzKC++BXfPH4=
Subject key identifier: A6:1E:F3:37:89:6A:B0:1D:EC:1F:87:72:AF:DD:7B:6E:29:18:59:C7
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584E059B93C0A128BD8E6C51E200
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/57c3f995-df83-3afa-aeac-7353f1f7daa1.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 7155
IP address blocks: 172.242.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9b:93:c0:a1:28:bd:8e:6c:51:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=ae42986a-e9bf-4c05-b4a9-3d5e3e48bb9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:54:3d:42:e6:17:ef:5c:e9:34:21:20:bf:43:
aa:10:7b:58:51:29:d0:57:9e:1a:58:c6:3f:80:f1:
01:bb:5c:d6:51:17:35:d9:16:23:6b:3c:ec:c2:9a:
cd:66:41:2a:44:3c:7f:06:d2:7e:e2:07:0f:7a:8e:
7a:85:2e:2b:15:4d:2c:26:aa:36:3d:3c:f5:ad:39:
ee:b1:1f:b6:14:0a:bd:b3:a6:70:3e:16:84:b8:b4:
1b:df:4d:94:8e:99:9e:4d:1a:56:ec:37:16:15:12:
d3:d7:26:fb:f0:af:24:96:f7:82:81:68:29:b6:59:
9f:d2:eb:08:9e:02:9f:de:35:bb:7b:bd:59:82:05:
20:c0:94:2a:0d:d8:d4:a5:38:a0:f8:ce:de:06:f6:
54:ac:ff:dd:d5:65:6a:31:6a:b4:ee:57:84:bd:68:
37:7b:02:8b:0d:42:7f:df:4f:85:07:3f:c4:1c:74:
ce:5d:40:8e:18:b6:21:1f:52:04:56:68:c9:75:73:
91:d8:7d:dc:c5:b0:7f:ff:f2:43:2c:cf:f1:3d:51:
57:b9:be:25:71:f5:59:1e:5d:41:11:fe:e7:c1:30:
09:46:b9:e1:b6:86:50:41:1b:0b:eb:b1:6a:3e:b8:
df:c8:cd:32:2b:e2:e3:95:a3:6c:8e:17:2c:02:4b:
6c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:1E:F3:37:89:6A:B0:1D:EC:1F:87:72:AF:DD:7B:6E:29:18:59:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/57c3f995-df83-3afa-aeac-7353f1f7daa1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:2f:85:a4:62:2e:b4:26:95:9f:1c:73:43:2e:5c:f1:01:55:
80:1e:ce:a9:53:39:0a:ec:fa:44:f3:7c:7a:f3:78:b6:d3:b6:
41:33:92:90:bd:c0:f2:4c:d3:e7:76:18:dc:46:fe:00:a8:4f:
b8:38:56:fc:23:74:a6:a0:5c:63:b6:ba:7d:7c:9b:53:c5:59:
7b:f8:1d:75:4d:e4:bc:25:21:ff:30:a7:6f:00:e0:45:a9:55:
c6:89:a3:89:39:fa:12:ff:4b:4a:03:ec:d5:ee:03:3f:98:87:
15:75:2c:f8:c4:d6:01:b3:be:0d:5f:a7:ed:ca:24:34:b9:09:
21:cf:e9:c0:b5:fc:9e:c4:a3:87:30:0f:f8:84:c4:f3:f8:f3:
7f:4c:be:a6:3f:83:1a:a0:f6:0a:cf:20:75:82:19:76:49:0e:
3f:e1:23:7e:ea:65:62:4e:2e:fc:50:26:20:df:d5:4e:bb:99:
3e:2c:ee:cb:60:5e:aa:4e:86:6d:a1:e6:75:09:56:bd:c2:48:
c9:80:f8:31:df:ab:cb:02:49:09:e8:2d:b8:33:4d:d5:28:5e:
d8:c9:9f:9e:6d:32:fc:a5:27:9b:71:f1:ec:7e:b4:df:ca:7c:
d1:ab:2b:b4:d2:cb:80:57:17:3c:1a:45:95:77:f2:0c:0f:88:
d8:69:f7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:23:15 2026 by rpki-client