
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cd738d25-836c-347c-bdc3-2c379b7c7837.roa
File: cd738d25-836c-347c-bdc3-2c379b7c7837.roa (raw, json)
Hash identifier: gUfH4zlmajuqGnHL86B180wyBwCIsbZrbIqjXy9hmQo=
Subject key identifier: CA:E0:07:40:7B:AB:89:55:64:29:A1:B2:1E:DB:AB:9F:F5:03:82:C7
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584E059BE55CB0B251CFE03CC200
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cd738d25-836c-347c-bdc3-2c379b7c7837.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 7155
IP address blocks: 72.173.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9b:e5:5c:b0:b2:51:cf:e0:3c:c2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=826a00d4-7027-422c-a9fa-cc8b64960d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d4:a5:15:9b:64:ab:d9:0b:0c:c6:1d:10:14:
ec:68:11:05:42:e0:2e:cf:7a:80:76:71:5c:6b:4f:
96:db:88:cd:58:2d:d8:c3:76:2d:24:d1:9b:3c:02:
f6:69:8e:19:f5:3e:fb:fd:ae:61:94:b5:74:7c:00:
29:42:ca:2c:58:bb:9c:d6:8d:2f:e6:0a:b9:ae:49:
25:e3:74:89:72:53:5f:49:76:a7:e1:32:0c:00:98:
db:1e:63:bf:bd:34:1c:59:1c:19:cf:22:d7:20:fa:
78:02:cf:69:97:04:87:83:be:79:db:fb:42:f5:ae:
f9:6c:21:0f:73:c3:5a:02:de:78:c4:69:1f:97:69:
60:f9:0e:82:16:ae:9e:fa:5c:df:87:27:4e:c6:2f:
56:4f:8e:4d:6c:93:48:8f:6a:8b:75:3d:49:30:54:
eb:ca:b1:68:95:b7:1f:23:04:ce:e7:4c:6a:df:57:
c0:2f:1b:94:e1:08:8f:bb:33:03:03:1b:3b:dc:4f:
a9:28:26:4c:dc:bb:b6:fa:a7:cf:ae:63:bf:b6:c4:
27:97:a8:30:ad:c9:18:46:15:17:70:d8:53:1a:c3:
fe:b9:45:2b:cc:ac:a8:2e:dc:6b:24:0d:c4:b9:a8:
31:a9:3c:77:0a:56:bd:af:8a:b2:5e:2e:b9:e9:06:
c8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E0:07:40:7B:AB:89:55:64:29:A1:B2:1E:DB:AB:9F:F5:03:82:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cd738d25-836c-347c-bdc3-2c379b7c7837.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:50:7c:00:0a:a9:8f:17:1c:36:4e:13:bb:06:1c:f2:73:21:
a8:ee:71:04:c4:ec:ed:95:9b:21:07:97:f6:1e:6f:9c:f8:ed:
2e:5c:59:df:9b:2f:d0:12:bb:e6:07:17:e1:ed:e2:14:36:ea:
af:4b:d0:eb:03:91:fd:2e:40:dd:28:98:28:e0:65:d9:bc:4f:
a0:88:ea:23:f5:c8:83:53:d8:cb:ec:34:7c:54:4a:82:88:d8:
3b:50:2a:9a:82:11:63:95:65:64:de:75:7b:f6:19:5a:77:88:
60:87:94:2c:3b:2e:b8:9f:46:a7:dc:0d:ea:3b:0e:67:b6:02:
04:5c:de:df:7c:1e:b9:c1:b3:9b:3c:00:e0:66:2b:b9:69:1d:
1c:f5:01:c9:97:8c:86:b3:ff:0c:63:7f:73:3a:58:1f:25:09:
45:a6:74:0d:37:b1:7c:6c:51:90:46:b1:84:cd:9f:c3:53:94:
ae:3b:76:a5:6e:22:f4:0c:c3:fd:1c:f9:6c:f6:2c:e6:9e:9d:
46:09:92:47:04:25:9a:2c:fb:f4:80:4c:d5:65:a8:1f:1c:be:
68:41:30:9d:07:aa:65:1b:10:99:b5:c5:6f:69:d1:4e:e9:81:
c8:78:b3:04:78:c8:d5:8a:0e:18:c9:9d:04:95:c2:12:9d:6c:
e8:d1:51:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:16:34 2026 by rpki-client