
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e22e9c69-38d0-36a9-a457-71e0def02a42.roa
File: e22e9c69-38d0-36a9-a457-71e0def02a42.roa (raw, json)
Hash identifier: NqhPMjxZfIBuHP691zD247YxodrPVlTRBPXm2bFR+r0=
Subject key identifier: 8C:9F:BF:F4:94:BE:90:CC:96:4E:F6:4B:AE:94:90:3F:A2:AD:47:56
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584E059C1D5094DD1596DEE743F0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e22e9c69-38d0-36a9-a457-71e0def02a42.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 7155
IP address blocks: 172.243.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9c:1d:50:94:dd:15:96:de:e7:43:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=646a4da2-aa53-49cc-a75a-2eeab768a595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ce:c9:f7:e4:d2:34:f2:bd:d4:06:a0:ee:88:
12:90:51:33:ca:59:09:68:77:29:0f:5f:01:d3:9b:
9c:b9:10:c2:e8:0f:12:2e:d8:2a:e2:c4:5c:5f:53:
4e:4c:58:e5:0d:90:ba:f0:cd:ed:44:79:de:76:8c:
73:a8:23:25:e5:7c:7f:2d:93:ae:92:8f:a5:45:f6:
98:0f:fc:03:5e:8b:be:c0:d1:1f:b0:86:dc:9c:d1:
df:39:1e:17:2a:66:e4:5a:1d:90:6c:b6:a1:bc:94:
07:60:8b:30:02:94:21:18:c0:fc:99:66:9e:9a:39:
4c:64:be:06:d9:53:c0:04:9e:97:e8:e1:22:e9:76:
2f:40:d0:0d:e9:31:34:dc:bc:54:e6:15:e2:25:f6:
54:ea:4d:88:50:e0:eb:36:09:0a:08:f3:3e:e3:a2:
43:8a:f9:3c:e0:fd:aa:c8:41:93:1a:3a:d6:1d:61:
ba:4a:37:8a:9b:89:f5:f1:d4:3e:3a:b4:a9:13:2e:
30:ec:96:39:52:e1:a1:9a:ab:b6:d7:29:f5:c3:79:
c7:f8:d6:a3:4b:a5:7b:55:fe:39:02:a5:ea:a3:ca:
24:05:22:66:df:fe:01:06:ce:69:9a:03:26:9c:1f:
59:a6:4f:bd:cb:1e:1c:72:ea:6e:c5:e7:69:8b:b7:
7c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:9F:BF:F4:94:BE:90:CC:96:4E:F6:4B:AE:94:90:3F:A2:AD:47:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e22e9c69-38d0-36a9-a457-71e0def02a42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.172.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:3b:f4:a5:ec:6b:1a:90:2c:bc:cc:6b:ec:e7:27:ba:8e:bc:
b6:75:3a:53:b8:12:57:f8:18:48:0d:21:43:88:44:d6:70:b4:
fd:66:f0:54:ee:3c:67:cf:7b:1e:e4:2b:a2:31:2e:03:98:ac:
3e:8e:ee:67:0d:13:c1:09:03:64:93:a6:a5:5e:cf:cf:65:0b:
91:d0:c4:af:13:38:51:f7:a8:c5:96:48:47:ed:76:4d:f7:8e:
d1:10:59:9a:66:b6:79:fe:a5:25:26:85:c5:b4:09:e1:45:30:
c2:ba:69:8e:8e:8b:41:ad:b2:61:65:89:32:e3:d5:3c:e2:87:
e1:cf:b1:2c:90:50:96:42:64:b3:63:6a:e5:33:76:73:0f:5a:
66:c8:88:e3:27:c8:6a:f4:9b:a3:3d:9e:53:fa:91:cf:4d:e8:
8a:19:47:7e:7c:e1:e7:da:2b:e7:b4:c2:9e:39:7f:ef:bb:89:
e6:ad:32:6c:8e:da:f6:e9:ae:10:cf:e0:17:e0:72:df:24:ac:
84:16:da:34:03:97:10:33:9c:b8:f5:8d:13:26:fd:d3:d5:70:
11:10:70:d5:9a:09:3e:69:59:9b:b1:28:65:0d:13:69:f7:84:
6d:11:b9:3c:84:00:2d:39:80:43:79:1a:8c:1c:32:4e:9b:be:
70:60:82:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:30:44 2026 by rpki-client