
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c89624bb-8125-325f-b4fa-68d9e79d91bd.roa
File: c89624bb-8125-325f-b4fa-68d9e79d91bd.roa (raw, json)
Hash identifier: dOwU3R2Hs0JOWuQO2QPANJa2K4+JzMpTC4X9CLst2Pw=
Subject key identifier: 60:C3:8F:F4:A2:22:D9:ED:5F:16:26:1D:0D:1E:A7:DE:6A:32:FE:BB
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584E059B5AF09997AD4038B959C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c89624bb-8125-325f-b4fa-68d9e79d91bd.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 16491
IP address blocks: 75.104.232.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9b:5a:f0:99:97:ad:40:38:b9:59:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=5f30e8df-e780-46a9-bad4-2b255492f5cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:87:60:48:58:14:0a:ef:7e:42:0d:c4:af:64:
c3:b4:e3:4a:d0:90:b9:a8:da:7b:df:9f:2e:30:6a:
fc:50:0b:81:c7:5c:8d:e7:9c:54:b3:53:e0:28:d1:
d6:d3:ac:f5:55:e6:18:af:69:04:c9:c3:4f:fb:b8:
61:7c:a8:b1:30:3c:40:1f:bb:dc:6b:02:b2:af:3a:
16:e8:ae:b3:95:61:1b:fa:e3:56:69:18:9b:88:1f:
24:35:5f:18:b7:b8:44:04:ea:76:7f:ac:92:91:49:
af:b6:d8:d5:f4:5b:c2:6c:52:dd:59:0b:cc:61:2e:
3d:e1:ec:e9:cb:5d:fd:ca:9b:3d:b9:71:2a:3e:1e:
a2:35:96:2d:20:5b:45:ea:5d:45:91:66:67:e9:d6:
69:ba:0a:6e:ee:71:52:74:1b:84:ac:3a:83:48:38:
08:42:b2:8f:fa:6d:84:bf:06:58:12:de:da:c0:d1:
bc:6c:0d:da:37:af:bd:1d:25:51:57:c8:68:07:7e:
9a:50:b8:73:6b:a7:a4:54:a0:66:80:25:a7:3b:eb:
2a:be:bf:36:8b:71:27:09:69:d2:49:6e:90:02:a5:
cb:1f:31:9e:45:5c:e6:e0:20:91:ad:b0:09:e4:00:
0e:d0:25:2c:02:c4:88:ee:33:d5:40:3b:e5:f1:48:
7a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C3:8F:F4:A2:22:D9:ED:5F:16:26:1D:0D:1E:A7:DE:6A:32:FE:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c89624bb-8125-325f-b4fa-68d9e79d91bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
75.104.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:60:42:f4:96:93:ce:d1:09:4f:30:2f:16:f0:de:b7:b1:7a:
7c:35:82:9a:58:f9:f5:8a:7a:00:9a:1f:9f:62:a5:8c:11:16:
32:78:e7:ce:a6:e8:f3:40:6b:fe:dc:26:35:98:5f:3a:6b:a4:
73:ca:47:e0:15:5b:94:d8:42:6d:af:df:bb:04:72:59:c6:d0:
14:fd:53:bc:eb:f7:e4:41:59:67:cd:4a:67:e2:ad:7e:8a:f4:
45:92:9a:d9:b8:cf:1e:86:85:0a:e6:66:70:c3:52:fb:b2:68:
06:43:f8:99:52:9d:49:1b:7b:f5:3d:a2:81:1f:51:f6:42:a8:
3f:58:f6:e1:8a:26:71:ea:4e:c4:7e:57:b7:02:5b:63:85:b1:
3c:80:2f:28:45:e0:fe:49:08:9b:cf:21:f9:31:1a:96:04:d7:
bf:3d:a7:b0:c6:96:74:cc:65:cf:b6:b2:32:8c:5b:01:b5:3b:
86:e2:ec:0f:76:8d:23:9c:d2:8f:73:0d:66:03:22:b0:38:28:
aa:bc:bb:74:db:64:2d:e7:33:5d:57:e4:a8:70:5d:cc:52:d9:
8c:23:af:07:49:ed:24:19:cc:3a:6d:7a:24:c6:7b:0c:55:88:
35:c4:fa:93:ef:c8:bf:e0:2e:2f:7d:07:e9:48:21:ef:ae:2d:
11:3f:47:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:46:01 2026 by rpki-client