
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/65d9dcd2-13fd-3e84-a5a7-b9cd2d8a7060.roa
File: 65d9dcd2-13fd-3e84-a5a7-b9cd2d8a7060.roa (raw, json)
Hash identifier: 90dOWYh47XduOuFzsdoRsLlMgLbVK3EL+kUaAzcYphI=
Subject key identifier: CD:A3:96:EF:A7:95:78:1E:7B:D2:F0:38:B2:29:F0:99:3D:55:E8:B3
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584E059C1805532E955ECA0F4C19
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/65d9dcd2-13fd-3e84-a5a7-b9cd2d8a7060.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 7155
IP address blocks: 172.242.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9c:18:05:53:2e:95:5e:ca:0f:4c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=fd88f1ec-a0e1-43c0-ac3c-b08bbd9e5428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:03:41:8d:28:3e:ab:af:85:cb:d1:8c:f3:30:
37:cd:31:ea:53:01:c9:99:55:82:0c:d5:d2:39:36:
f2:5d:56:0a:5e:b9:12:7e:5f:b4:e9:23:90:4f:10:
11:bf:dd:e3:0d:d1:2b:d9:37:27:18:34:a2:2e:63:
3a:51:a2:f5:4b:52:a8:d7:1a:6c:a6:28:17:5c:9d:
4e:a7:4a:53:ab:7c:24:84:89:ce:11:f1:9e:df:21:
69:8b:20:c1:3b:33:34:34:ba:ca:6f:da:50:7f:39:
82:4c:9c:bc:7c:c9:1d:f0:c0:d9:5e:02:e3:57:88:
d6:2f:9f:89:1d:6e:b0:08:8d:11:d9:da:cb:d7:8a:
5d:ee:99:68:73:36:9a:8e:b0:29:d1:99:ee:d7:5d:
84:43:6d:19:70:ad:21:21:f2:c9:c9:b8:08:dd:90:
91:03:00:72:29:b8:57:c5:63:13:90:ff:ce:2c:a0:
20:92:8b:67:96:55:1c:23:2d:a4:9c:64:4c:a4:1e:
1e:9d:0b:60:a3:93:cc:5a:81:09:0f:86:57:bb:51:
f9:22:70:dc:ee:01:0e:79:c3:2c:aa:9d:59:5c:45:
2a:f4:f7:89:5c:f1:24:55:06:ef:e5:46:70:84:75:
90:f7:8c:5f:91:d6:68:1a:56:70:30:ff:0a:0e:3e:
c5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A3:96:EF:A7:95:78:1E:7B:D2:F0:38:B2:29:F0:99:3D:55:E8:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/65d9dcd2-13fd-3e84-a5a7-b9cd2d8a7060.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:73:5d:f3:ac:11:2d:7c:25:fe:aa:5d:b4:0a:35:64:d0:17:
a7:9c:b8:5e:9c:5d:36:1d:79:ce:0f:8a:ab:2e:ef:59:ef:a8:
c5:2b:43:ae:bd:a6:3d:78:a1:27:10:2b:33:e0:bf:66:38:3e:
ba:99:3f:dc:b6:d6:07:28:82:1a:b1:83:5f:7c:17:e9:f8:1f:
47:d2:47:34:f2:96:b6:b8:93:56:a2:9f:6f:6e:64:b5:e9:e3:
fb:85:40:30:a9:cb:83:8b:00:e9:2a:af:14:34:9e:02:f5:9d:
a7:13:9c:73:82:6c:65:fb:34:35:fb:28:ef:18:22:21:0e:a6:
0e:f2:d8:a3:a5:a0:a0:cf:44:41:60:1d:df:ec:cc:64:d4:77:
0e:97:4e:62:fc:46:99:4f:8f:60:6e:4a:66:90:dc:d6:01:d7:
61:8f:97:1c:5b:77:3c:99:5f:e4:80:db:66:95:cf:3f:43:51:
ee:3a:b7:e6:b1:b3:06:7a:ff:c4:7f:92:56:8c:b1:2d:7e:6a:
bf:cc:bd:8d:b7:a8:a0:02:24:3b:b0:7e:2c:49:fa:95:09:9c:
db:8b:3d:76:05:cc:75:bd:ac:44:30:0b:a5:01:a1:3b:16:ac:
61:e0:77:9a:a8:f4:f8:3d:ea:ad:72:02:e0:97:dd:e8:77:68:
44:00:a0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:04:00 2026 by rpki-client