
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2cd914b-9844-3840-b55c-c3161da53a80.roa
File: d2cd914b-9844-3840-b55c-c3161da53a80.roa (raw, json)
Hash identifier: ZEIEjv+CLZ5c8NeURdL14T+DzWJCNaJxfVx8iSRhl4k=
Subject key identifier: 79:4E:41:0C:15:A5:C1:E5:D7:98:A6:1B:81:1A:5B:01:3A:0E:A3:53
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584E059B9F13C44C6368128066A8
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2cd914b-9844-3840-b55c-c3161da53a80.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 7155
IP address blocks: 172.243.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9b:9f:13:c4:4c:63:68:12:80:66:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=e24ee334-4d4a-4e26-8f69-f8354a5ab51a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:28:95:32:b7:1d:0c:d7:11:ab:62:c3:a7:1b:
38:ac:66:38:da:67:75:91:83:7e:30:43:da:f5:90:
98:a6:9e:d6:95:c9:05:94:d6:50:7c:be:73:6b:df:
b1:bb:bb:cf:ab:66:3d:a1:1e:e4:6d:61:b5:de:80:
5c:d3:aa:3e:59:bb:b6:08:06:10:31:d7:d8:0a:2b:
2c:60:76:68:e3:8b:ab:0f:8d:b0:5d:7b:c4:87:98:
76:7b:7d:62:80:08:e8:32:4b:d9:04:be:9a:d0:92:
7e:a8:a8:53:62:cc:f5:67:2f:d3:81:59:ce:75:e5:
5c:66:ba:fe:82:fd:bd:7a:ea:9f:04:0d:7f:f9:2e:
b6:0c:c8:b9:46:70:ee:3e:14:61:70:23:18:ce:68:
9d:83:71:8b:7a:94:7f:8b:b1:0c:91:38:cd:b7:82:
55:48:6a:ec:0c:41:18:69:bf:2f:ac:25:fc:23:a2:
f2:d3:f4:9f:87:f2:2e:97:32:9f:12:48:2b:0c:11:
e5:63:06:e0:0d:8c:7b:d4:e5:da:28:5d:d0:fa:ff:
52:27:fa:f0:28:38:27:72:44:08:ff:fc:02:9a:0c:
44:bf:cd:09:dd:86:a2:49:80:3a:66:28:e5:62:42:
d1:a9:1e:11:ec:73:c9:db:c3:b8:0b:0b:7a:84:73:
39:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4E:41:0C:15:A5:C1:E5:D7:98:A6:1B:81:1A:5B:01:3A:0E:A3:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2cd914b-9844-3840-b55c-c3161da53a80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.253.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d7:ea:33:ff:bc:27:9c:57:98:71:4c:b8:9e:45:f7:60:7b:ad:
48:e3:e7:98:a4:a8:b6:1e:ce:f4:d3:da:74:96:73:a8:d0:8d:
01:e4:a7:79:54:59:38:0e:ab:01:a6:a8:67:af:99:71:e6:65:
c4:c4:92:44:18:6a:17:aa:0b:db:91:86:20:eb:8c:9e:26:0e:
10:87:9e:29:07:5d:b5:36:d0:cc:fb:b6:ae:b2:3f:a8:e6:29:
24:f3:3c:54:a5:39:5c:9e:9a:3d:82:0a:c1:fa:fa:e9:c1:b1:
0c:fb:29:d3:71:7b:d8:9c:e1:06:5d:75:5d:37:83:6b:66:3c:
e8:12:c3:5f:bc:3a:da:3d:d4:80:9f:ab:ce:cd:07:94:5e:fd:
97:58:59:0e:8e:bb:2e:41:13:4c:db:3f:44:b4:09:8b:bb:f4:
c9:c7:bd:65:7f:a5:30:e9:2d:67:ff:03:7c:33:0a:12:fd:bd:
7f:ff:a1:e4:c0:4f:21:6e:d5:0b:34:8b:d6:91:87:aa:2d:ec:
21:f3:c1:aa:82:df:59:2c:d4:f4:e8:37:fd:5f:c9:8c:06:a4:
5b:7e:cf:d1:9e:29:40:6e:07:dc:61:75:79:51:bb:26:68:8b:
62:ca:41:f6:5d:18:a2:3a:69:d5:32:1d:67:e6:09:71:02:f4:
4a:be:8a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:34:58 2026 by rpki-client