
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/638d0c7c-5c12-3419-add7-d1fee46c98fa.roa
File: 638d0c7c-5c12-3419-add7-d1fee46c98fa.roa (raw, json)
Hash identifier: YC7aHsFtTf3YPZW/y5YQl4TxYgtVrJEWjQ6rRojJVmM=
Subject key identifier: DA:2F:00:17:98:71:7D:2E:AB:E1:2C:B0:19:8A:9E:1A:C6:89:E4:69
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584E059B97529B831B1091B67840
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/638d0c7c-5c12-3419-add7-d1fee46c98fa.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 7155
IP address blocks: 172.242.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9b:97:52:9b:83:1b:10:91:b6:78:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=0d3968cf-3a6f-44a2-8a46-308ceae77f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fc:8a:49:29:00:42:eb:7f:9a:8d:ef:1b:b7:
f9:76:f9:4f:2b:58:2c:67:93:e9:a9:9f:18:74:3c:
da:e7:67:f8:c4:e5:67:39:1c:65:ac:66:ea:d2:ff:
e4:f7:07:d1:88:b6:91:a2:c1:ca:e3:f4:aa:0a:39:
86:79:af:46:a5:16:38:13:49:8e:24:30:5c:27:0e:
50:7c:ea:25:80:60:98:8d:1a:d7:47:d7:db:7e:85:
31:6b:41:a5:be:4d:20:91:24:1e:e8:78:68:10:d5:
69:8b:4d:17:ba:17:8a:ca:77:6d:7d:4b:20:d4:a8:
db:76:f7:4b:e4:a6:0d:40:eb:7a:e6:ff:fc:56:de:
de:b3:c4:24:d6:bc:b0:2e:cc:73:0e:d8:e0:3a:90:
18:d4:4d:66:6f:40:d9:b2:a7:79:de:55:33:6a:c2:
a8:b3:d1:3b:e9:5b:06:7d:62:b6:d0:dc:4d:64:00:
4a:20:2f:45:6f:12:b5:43:13:c3:d1:1e:28:3f:bf:
bd:e8:70:db:da:4a:2b:41:7c:93:b1:34:fc:23:a2:
a2:44:2b:e2:e3:d1:60:33:f5:6f:fc:0e:8d:d1:6e:
8b:fb:0b:d6:50:fc:b4:a2:92:78:c9:90:22:c0:2f:
0b:c0:0a:8c:be:d4:73:85:3a:a8:59:c4:f6:46:cb:
85:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2F:00:17:98:71:7D:2E:AB:E1:2C:B0:19:8A:9E:1A:C6:89:E4:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/638d0c7c-5c12-3419-add7-d1fee46c98fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.177.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:72:78:91:a0:2c:13:50:fa:81:03:86:e4:75:ee:b9:0c:d7:
e2:4e:f3:15:6f:7c:e2:93:99:d2:93:bc:3d:bb:dc:3f:ec:43:
75:af:08:50:9a:30:1a:b9:fa:92:ec:d1:47:ed:1e:45:84:99:
b0:c9:95:60:db:f1:fc:ae:c4:e5:1d:d4:a4:2c:25:b4:14:58:
f2:06:f9:9f:cf:a7:60:bb:41:15:f5:cb:29:70:d6:a6:b5:bd:
a2:fd:a2:c6:75:1e:9c:ed:86:b3:2c:90:c6:59:ff:ec:ef:ac:
58:f7:85:ec:1b:16:db:cc:05:5d:f3:47:35:91:8b:95:42:d9:
ae:07:6c:84:e1:b7:ad:e4:e8:45:19:e9:35:00:94:73:b6:1e:
d6:86:c8:37:73:5d:b9:09:9b:84:dc:75:bf:7c:2b:96:f5:e2:
d7:cb:5c:f9:76:47:58:7c:7d:a7:3c:0a:a4:1f:e2:7f:83:e0:
33:05:81:fd:11:25:66:98:18:2a:d4:30:85:66:0c:ce:02:18:
08:a1:ca:38:8e:28:3c:91:78:e8:43:ac:b5:03:21:a8:b2:a7:
a2:07:ca:41:70:02:d7:70:9e:fa:21:ac:2e:dc:3a:29:73:c4:
49:fc:b5:bc:77:e6:67:85:8b:ae:9d:57:33:d0:b1:e0:1b:a9:
40:8f:90:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:49:19 2026 by rpki-client