
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7232a66c-f3d0-3aa0-aad2-c594bf74bdb7.roa
File: 7232a66c-f3d0-3aa0-aad2-c594bf74bdb7.roa (raw, json)
Hash identifier: ijtjgpYpm44xAVYkqACAZTH0WjUvMGrDEcAhFz5xf4Y=
Subject key identifier: 85:9E:9F:87:66:F4:96:6B:97:FF:8A:44:23:D2:7D:6E:A7:D2:D6:05
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584E059C1C11555C0F224840CE80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7232a66c-f3d0-3aa0-aad2-c594bf74bdb7.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 7155
IP address blocks: 172.243.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9c:1c:11:55:5c:0f:22:48:40:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=70abf3c4-3463-4270-bfc2-94049c994bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:44:94:dd:1a:63:d9:59:eb:15:61:7b:cd:21:
b2:7e:21:ae:9b:b0:e4:a1:8f:55:a9:83:18:51:e4:
8c:88:0b:56:dd:b9:68:a4:0c:d3:9f:0d:16:68:9e:
83:5c:ca:20:1e:a6:db:42:91:bd:81:74:5b:b4:d5:
c5:0f:c1:0f:7b:e6:dc:21:19:e7:da:28:e3:9f:6c:
97:60:10:63:e0:df:4a:fe:0b:fd:be:36:d1:6a:e4:
4a:3b:c0:c9:7a:8e:7d:00:6d:b8:a9:a2:04:07:44:
a3:5c:06:75:84:cb:e2:33:f4:c8:9c:57:b9:a4:4e:
3f:c4:38:4a:2b:fd:45:04:46:21:a0:97:8b:a5:28:
e0:00:32:a3:8c:4b:67:b1:31:9e:56:d9:10:b4:fd:
b4:4b:43:b0:3c:0c:52:54:6a:5e:af:28:d4:83:0f:
31:76:a7:a7:c1:ab:4f:92:be:85:68:aa:e7:24:74:
ca:a8:77:f8:ed:ce:9c:1d:21:c7:41:94:5d:cc:a4:
47:07:3d:fa:b2:e5:71:c8:20:5c:a5:65:5c:74:d2:
48:b5:5e:0d:16:10:09:48:45:2f:e9:57:fd:f8:48:
86:20:c1:d7:d3:21:d5:bb:85:47:ec:2d:ee:c0:ba:
dc:fd:c7:db:27:10:23:eb:af:79:de:58:77:ae:70:
62:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9E:9F:87:66:F4:96:6B:97:FF:8A:44:23:D2:7D:6E:A7:D2:D6:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7232a66c-f3d0-3aa0-aad2-c594bf74bdb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:f3:d3:46:15:bc:fb:3c:01:11:42:f9:52:33:1f:56:30:e9:
4e:00:a7:5d:9c:e0:6a:44:f5:15:37:09:2e:9c:d7:f2:92:4f:
51:cd:5d:cd:cb:59:83:ef:31:37:e8:ff:a9:83:74:1e:62:e3:
d9:56:11:9d:60:06:15:f6:42:f1:fc:60:4e:ef:46:6c:71:5e:
ac:b0:72:79:b4:17:2b:7f:4b:68:2a:47:ac:33:6a:0a:97:74:
f8:96:6e:00:df:af:16:70:06:c5:54:ce:49:09:6f:0f:da:73:
c6:62:20:d5:0f:a2:5b:fb:4e:d5:32:ad:b9:a4:4d:98:a8:99:
46:4a:6f:81:31:ca:e4:78:3f:21:d8:63:c4:80:d1:d6:19:c0:
28:bf:0d:be:ab:c6:ad:75:8d:84:4b:b3:df:68:5e:91:77:1d:
47:1e:ee:a5:6e:f5:ca:3d:e4:92:c4:09:53:f9:05:18:3c:88:
e3:24:b5:f0:03:97:5b:83:13:f1:7e:02:02:a7:96:81:7c:a6:
c9:8a:60:42:ad:fb:06:9f:8f:25:8c:38:95:7b:83:3c:e7:61:
e4:48:69:e3:3a:fe:49:37:a7:a9:73:7d:9d:66:85:06:48:e8:
fc:84:48:ae:da:7c:2c:ae:cf:92:48:f1:51:f9:ec:fb:43:fe:
3f:64:d3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:08:37 2026 by rpki-client