
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04114cad-7ec5-3696-b7ac-b904c25e638d.roa
File: 04114cad-7ec5-3696-b7ac-b904c25e638d.roa (raw, json)
Hash identifier: FA03PATKSNVV4RRcs3B+x3jPDuACnwAiIV/TJms7JgM=
Subject key identifier: 69:06:59:DC:DA:B2:6A:8B:51:D3:77:87:F0:5D:70:0E:79:6E:BC:D8
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F4983D3D72F416A978D759680
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04114cad-7ec5-3696-b7ac-b904c25e638d.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 172.242.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 05 Oct 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:83:d3:d7:2f:41:6a:97:8d:75:96:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=d02ee924-dd57-42cf-a4f8-8c6499d9c418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f7:63:79:bd:fd:90:be:f6:78:9b:12:9f:82:
b8:0f:66:fd:4c:8d:b9:11:f9:96:44:a7:93:b2:43:
6c:fb:61:49:24:bc:54:a7:e8:d0:76:fa:7c:b8:a1:
6a:10:ed:42:97:9b:22:4c:33:d5:eb:3a:70:6b:0e:
ca:96:5d:e9:46:25:a1:29:08:0d:42:88:7d:40:83:
ec:ae:df:76:cf:25:d9:c0:19:e1:fd:75:c0:2f:b6:
7d:f3:bb:1e:b5:f4:4b:57:ba:e4:88:48:12:be:8c:
b3:02:2e:6d:f4:9b:76:4a:0d:85:a1:af:58:92:47:
dc:57:2f:18:91:bf:23:8c:2d:1b:5a:82:08:ad:d1:
f7:54:65:3e:41:f5:9f:e5:b1:39:c6:8c:92:3b:34:
6e:15:e6:c3:8f:6a:57:55:3c:c9:7c:b2:04:eb:e3:
23:09:93:42:3b:71:66:cb:f8:a3:a5:e8:a0:95:ee:
73:3e:4d:89:cd:f8:06:9d:06:c6:91:4a:3a:1f:35:
25:5c:96:11:5c:78:1d:1e:69:19:55:fa:4e:98:c2:
cd:fc:c4:37:96:7a:79:78:4a:25:2d:3e:40:bd:62:
d5:d8:65:09:85:56:e7:c7:8f:ff:c3:ce:42:12:cc:
8f:58:4c:69:d8:fe:a8:20:db:44:34:6b:1b:e9:29:
cc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:06:59:DC:DA:B2:6A:8B:51:D3:77:87:F0:5D:70:0E:79:6E:BC:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04114cad-7ec5-3696-b7ac-b904c25e638d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:73:91:4e:ef:69:36:e5:2b:af:1a:a6:9c:15:44:08:27:4e:
7a:d7:32:86:ff:bc:b1:b6:fd:3f:2e:89:ae:e9:89:b8:e1:ee:
6b:ca:42:7c:5c:77:66:86:24:77:68:7f:74:82:7c:7a:b9:f8:
b1:86:30:6d:fc:dd:14:39:0a:6a:d6:03:b8:83:0f:dd:b7:f6:
0b:a2:b6:e2:a8:d6:a3:09:38:87:33:a5:f9:60:86:05:4a:ef:
05:a4:27:e6:de:26:84:9a:ee:71:93:bd:f1:69:3b:9d:a5:cb:
5a:7e:bb:cb:d5:a4:d0:07:d4:24:c8:0e:50:72:42:f2:50:ff:
bf:ac:fa:6e:91:f0:8a:14:4c:38:21:01:89:2b:c8:5b:58:31:
64:fe:94:0a:4c:b3:e8:ab:2f:9b:d2:96:e4:10:fb:c6:0a:4a:
12:e7:4f:72:47:69:99:26:05:cb:66:a3:16:6f:40:b1:4e:a6:
f8:b2:18:47:1d:f2:fa:67:ea:a1:f2:9b:e6:c1:98:b2:5e:61:
03:32:35:37:68:14:ab:50:91:42:6b:79:32:ad:94:79:a3:d5:
cb:85:b7:8b:09:02:f0:dc:4b:1c:4f:14:cd:c9:49:fc:c7:6e:
c8:30:60:c3:46:5e:79:23:a6:fc:77:4e:e5:c7:57:52:8e:5d:
34:e8:44:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 01:23:50 2026 by rpki-client