
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dba5b539-cf29-362c-83b8-56020aeff4f2.roa
File: dba5b539-cf29-362c-83b8-56020aeff4f2.roa (raw, json)
Hash identifier: fmgtXl+IK3b8zu/K1mC7V22IKcXzqoIz/DwhasfhOhU=
Subject key identifier: 88:25:E0:72:E4:DE:DF:5B:C0:70:15:EA:B3:67:BD:8E:BA:46:C6:3D
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584E059B5EA88A6C82BCD84D4E80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dba5b539-cf29-362c-83b8-56020aeff4f2.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 7155
IP address blocks: 67.54.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9b:5e:a8:8a:6c:82:bc:d8:4d:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=ae0a2469-d7f4-40be-833e-9c307eb81c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b1:b3:e0:f9:16:31:1f:9f:6f:c4:b7:c2:3f:
07:91:c8:a9:0f:92:a2:9f:d6:87:35:08:af:19:23:
a8:79:f0:fa:79:d8:4b:aa:01:df:08:87:28:f1:37:
45:a6:af:5f:15:4d:f0:0d:6d:f5:a6:2b:e7:68:60:
46:72:6e:b7:13:ff:e0:46:57:ca:3d:bf:65:66:4a:
ee:05:2a:44:12:f1:ba:36:77:5f:da:7f:82:ec:5b:
66:62:75:94:7f:d0:f4:e0:f3:1b:11:41:e0:e0:5f:
d1:32:88:24:44:a3:73:a1:47:c5:6b:51:56:a8:08:
49:2f:a1:3c:a4:8d:f1:a4:8a:00:35:04:67:06:18:
e3:32:0e:0d:6e:de:1a:0a:89:e8:d8:68:bd:2d:b3:
4b:c7:74:8a:ac:fe:c1:3d:75:91:15:f1:43:34:ca:
89:48:6c:b8:1e:d7:ec:32:2c:82:fe:c3:5d:6b:5e:
5f:60:a3:e7:59:32:11:8b:62:bd:5d:2f:70:2a:b1:
39:61:f0:c4:30:a7:cd:d5:5c:34:59:a1:f8:94:25:
6f:c4:9c:5a:c9:4f:69:cd:f2:5a:fc:08:de:74:d6:
22:a4:e6:f7:de:19:ee:d1:dc:aa:f7:23:6e:53:91:
b5:14:fe:99:8e:7e:84:f9:4b:ee:1f:c0:fa:8f:67:
6d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:25:E0:72:E4:DE:DF:5B:C0:70:15:EA:B3:67:BD:8E:BA:46:C6:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dba5b539-cf29-362c-83b8-56020aeff4f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
67.54.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:4b:75:5b:62:aa:a6:01:77:68:20:97:2f:c2:47:5c:f2:74:
c8:c4:dd:48:ec:67:0e:de:9e:f0:30:63:eb:34:ea:8d:cf:2c:
95:14:5d:8e:2e:61:ce:03:f7:85:83:8c:00:dc:10:c1:70:70:
0f:e5:fe:64:48:4b:42:28:7c:67:64:c7:30:bb:a8:5e:59:e0:
64:86:93:21:49:4f:58:d0:b5:84:01:a8:4e:53:3d:dd:ec:8b:
8c:53:c0:5d:e9:c0:50:30:bc:d1:d4:0e:e6:ea:16:ff:ce:2d:
bd:7f:1c:bb:96:de:bc:07:e3:74:96:fd:3e:04:94:c8:c0:9c:
1b:26:cb:82:f0:b4:dc:b6:a6:ea:d4:7d:2e:cb:c8:cc:14:63:
56:3e:60:f8:95:fe:2c:35:e4:09:8d:6a:33:17:33:83:66:af:
2b:81:24:48:a6:ca:bc:e3:30:e2:c4:b6:5c:c6:48:af:26:e8:
c4:af:e2:4d:0b:49:69:1d:23:2c:92:c6:d3:62:83:fa:db:d0:
3b:d0:c8:71:c4:73:e0:1c:4f:b5:90:be:ad:81:c3:6b:37:c3:
90:db:3a:a6:a0:50:e5:d5:8b:26:90:98:d9:79:4c:18:98:5f:
c6:2c:20:48:54:16:aa:00:9e:2e:a2:4e:4b:16:d4:c3:ff:72:
8e:43:f3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:55:10 2026 by rpki-client