
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa8b9a57-5b60-34bb-b91e-8c2a99ac0cf1.roa
File: aa8b9a57-5b60-34bb-b91e-8c2a99ac0cf1.roa (raw, json)
Hash identifier: vas4gHaUWEsKxvh1CaHtNPs+8E6sULdpJ07ChGUfTDs=
Subject key identifier: 7F:67:54:78:81:1B:90:C7:9D:C4:79:91:3F:92:1F:34:AD:18:B1:2C
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584EA79F1A5FB294530DE18B5840
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa8b9a57-5b60-34bb-b91e-8c2a99ac0cf1.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7155
IP address blocks: 72.173.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9f:1a:5f:b2:94:53:0d:e1:8b:58:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=779222c5-8a17-48c3-b6fd-2f43f2ab2b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:54:b5:16:19:74:35:83:7a:e4:d6:ab:bc:bc:
d0:22:3c:d3:cf:bb:ce:f8:96:6f:02:a6:7e:6b:50:
e5:9b:45:69:1b:72:24:15:69:d2:90:ac:50:95:4d:
9e:0c:06:5f:26:b3:00:f0:4b:38:95:0c:71:22:28:
85:5b:7b:e7:bd:d8:83:e7:7d:96:6e:aa:1c:ee:21:
7c:7d:ef:26:28:c3:bc:40:88:0b:18:27:7a:51:c1:
70:df:2e:33:ba:8d:88:02:62:15:6c:10:bf:03:fb:
3b:1d:77:3b:ef:41:45:99:65:25:9e:87:d4:cd:39:
f3:4f:b8:70:62:5f:71:4f:d1:f2:da:dc:fd:ff:aa:
9d:99:49:49:1d:bb:48:f7:c2:5d:cb:61:8b:ac:1d:
c1:95:85:54:55:ae:05:31:e4:f4:5d:1b:d2:68:7a:
28:c9:cd:74:4d:03:23:7a:38:f5:e2:b7:54:35:3f:
5a:a4:da:68:5c:67:47:96:59:a1:60:e7:5a:e1:0c:
34:07:21:ba:d2:89:fc:97:42:a4:42:1f:27:ee:49:
1f:06:17:34:4d:2c:bf:83:01:f6:91:d0:2d:57:5f:
9c:45:af:e8:4e:0e:e5:0e:d1:04:d0:bf:29:ed:0b:
5a:e0:03:73:f3:89:df:d6:e0:6f:90:3e:e3:bd:f1:
6e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:67:54:78:81:1B:90:C7:9D:C4:79:91:3F:92:1F:34:AD:18:B1:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa8b9a57-5b60-34bb-b91e-8c2a99ac0cf1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:1e:e2:87:a9:a2:d5:45:2a:81:20:1e:31:fd:d1:03:30:a2:
72:fd:ab:cf:86:40:0f:80:13:f5:bf:b4:b9:9b:27:88:a2:36:
19:52:67:b4:11:9d:7a:bd:20:aa:04:e9:c9:2a:04:92:03:41:
c3:29:e6:d6:b0:c6:fe:df:90:d8:96:52:39:57:d0:71:2c:78:
d9:6b:44:02:37:4c:b7:d7:dc:53:21:95:2d:33:7f:a1:a9:c8:
52:b1:53:fb:68:28:b4:dd:71:13:7f:67:68:9b:54:db:7c:43:
81:50:12:89:32:a2:ba:90:4f:4c:16:7a:ce:11:0e:12:46:1a:
9a:b1:ee:a5:a8:fd:3d:e2:f4:8a:e9:77:0b:76:db:f5:7e:cb:
92:e4:51:c7:bd:7b:0d:25:22:77:52:eb:21:08:aa:5e:86:40:
6f:c7:64:89:a5:8c:51:8c:d7:75:1b:bb:e8:d2:79:0c:8e:e2:
79:64:ab:17:23:88:27:ae:2d:27:06:df:ca:f9:10:56:93:ee:
b2:cd:97:48:51:1a:69:be:cc:40:7d:1a:b3:3f:b2:af:7c:be:
50:58:88:39:12:e2:b9:60:92:f1:06:ed:49:21:1d:1b:c4:79:
5f:5d:6a:6c:5d:3c:a1:20:42:80:72:46:c9:b6:1b:e2:b4:0b:
bf:57:e6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:15:00 2026 by rpki-client