
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d6c41bc0-0183-3954-8539-3ed2ca2e202a.roa
File: d6c41bc0-0183-3954-8539-3ed2ca2e202a.roa (raw, json)
Hash identifier: MjoMz4VnNZlMQiP9+dQpAG/7usLZi0tbr+Et1O/Q1DI=
Subject key identifier: 22:0A:28:65:FE:AE:05:FD:6E:C1:B1:DD:B7:52:11:B0:87:80:4A:48
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584E059C34FDCF81D9B97CC1AB10
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d6c41bc0-0183-3954-8539-3ed2ca2e202a.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 7155
IP address blocks: 198.45.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9c:34:fd:cf:81:d9:b9:7c:c1:ab:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=66eaf093-d6c8-4e95-be91-781fd461f905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:40:45:9e:fa:2c:dc:1b:2c:84:36:80:37:a8:
e6:77:c0:d2:54:08:a3:01:37:1a:f0:ac:6b:88:03:
fb:5f:5c:1f:c6:0a:6a:48:42:96:42:87:74:b4:a9:
19:de:6a:86:28:0f:26:73:17:0a:50:9a:11:3d:39:
13:ae:a3:fb:b2:73:8b:cc:49:83:d3:ef:ac:b7:9a:
5d:1b:d5:f0:6d:12:c6:4d:81:dd:18:e6:68:a1:53:
62:a0:22:a0:9f:06:e8:0a:e6:85:b7:d1:ea:7d:62:
06:c0:ac:9c:66:3f:1f:6d:2f:2f:da:4c:ee:2b:df:
af:56:df:b5:c8:0f:c5:37:d9:e6:44:31:67:3d:ca:
21:ea:cc:23:19:01:06:3e:84:bc:40:9d:a1:28:af:
a4:2e:d3:cb:61:4a:aa:5a:28:ae:3b:ce:0d:af:55:
59:6a:c3:06:b5:f9:75:68:94:ac:d2:bd:a6:1a:5a:
55:6e:08:d8:45:6b:00:c0:0c:8b:28:ad:2f:27:1c:
2f:bf:d3:70:3d:ea:b5:46:bd:1b:bf:cd:01:36:3e:
10:b9:88:b7:ad:d8:cf:d2:89:bc:02:e1:db:9e:42:
83:4e:4f:74:15:ae:9f:28:49:b7:3e:d8:38:38:d4:
5f:5a:ba:2d:e1:11:a5:9f:8f:df:58:40:72:38:e7:
e5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0A:28:65:FE:AE:05:FD:6E:C1:B1:DD:B7:52:11:B0:87:80:4A:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d6c41bc0-0183-3954-8539-3ed2ca2e202a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
198.45.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:07:32:c3:72:36:d6:3a:da:90:83:f8:b6:81:59:a3:9f:28:
7d:9f:28:db:6f:16:b1:fc:40:cf:81:ad:fc:f5:4b:7a:8d:ae:
fd:da:45:48:b5:25:26:5d:f4:30:7b:6d:4a:84:f2:5b:b0:65:
ca:7b:48:15:6d:52:63:fc:b2:5d:44:b5:03:5d:3f:f0:4d:48:
55:c8:68:af:b7:06:b6:35:ca:6c:bf:ca:58:57:07:66:34:02:
84:2b:8e:9a:b8:f6:73:f1:9f:2f:de:3b:74:10:32:99:90:9d:
ef:ae:27:da:17:eb:49:28:5c:df:ca:83:7b:83:1c:8f:7e:c3:
ce:99:d1:6f:18:0c:e3:af:f2:5d:e5:5a:22:3f:0e:6d:bc:80:
b8:4d:7d:c8:e3:3d:b1:76:c2:9e:e9:d0:68:45:30:a1:e3:03:
e3:64:57:f9:51:6b:4f:43:37:3b:63:8f:88:87:4a:74:5d:e1:
6e:82:2b:5d:68:0e:d5:ed:fc:11:26:9d:db:fd:43:57:d9:6d:
7e:be:8d:81:2c:fb:0a:8b:93:ca:74:56:8b:a5:0e:1c:30:3f:
67:74:f6:92:3e:49:93:32:02:b2:e7:c5:26:3b:8c:d7:4c:ce:
24:58:cc:1c:11:fa:5b:ed:8c:83:96:33:63:19:d5:c3:90:db:
53:59:4f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:14:38 2026 by rpki-client