
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04cdeaed-a0ae-3016-bf2e-38e99b2fbea7.roa
File: 04cdeaed-a0ae-3016-bf2e-38e99b2fbea7.roa (raw, json)
Hash identifier: Bo6hQ71noZF64NJIV26Nn31MQIiAE/TyCupV1aCK2e8=
Subject key identifier: 45:C9:D5:31:26:6E:2D:6D:19:3A:47:D1:95:6D:2A:E7:86:B7:7F:27
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F497BA68C84FBEDCC756F448E
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04cdeaed-a0ae-3016-bf2e-38e99b2fbea7.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 172.243.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 01 Oct 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7b:a6:8c:84:fb:ed:cc:75:6f:44:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=468d2926-dbc9-4d63-aacf-1b964d2f4fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0f:0e:46:12:04:63:80:a8:48:1d:11:6c:df:
28:96:eb:4f:cc:c5:fa:7b:cc:76:9b:ea:15:8d:3f:
66:d6:c2:4d:68:2b:19:f8:6e:f7:92:c7:71:ab:98:
56:1d:53:04:96:7d:07:ef:54:09:0f:39:11:65:ad:
e8:74:33:1a:39:17:bf:0f:74:8d:81:03:b9:68:37:
12:40:36:b2:32:d0:96:8c:ca:34:bf:4b:b9:01:9a:
64:26:21:3d:e3:4e:84:c7:c3:b1:3e:2e:c6:7b:84:
9b:f6:57:67:85:dd:fd:7b:eb:24:e2:6b:ae:5e:66:
0e:45:83:77:43:5d:c7:ea:e5:a5:bf:8a:ca:4e:da:
84:6b:ec:a2:5b:51:59:61:07:6b:38:7d:f4:f9:68:
16:be:52:a8:49:04:20:e1:9c:d2:4a:46:ba:dd:54:
2c:6c:8c:be:5c:10:53:0c:2b:b9:36:74:0d:68:81:
64:d3:e6:50:51:3a:42:a3:df:5a:05:e3:6e:e4:d9:
bc:a5:52:93:1e:fd:50:61:2a:a2:bc:0a:dc:fb:69:
89:f8:17:56:ab:e9:cf:4b:35:bd:37:5e:1b:27:94:
a3:c6:bb:d6:bf:ab:75:1f:bf:77:b7:e9:81:4e:4d:
fe:08:c9:bd:84:86:fc:b8:85:80:3a:9f:5a:55:67:
4a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C9:D5:31:26:6E:2D:6D:19:3A:47:D1:95:6D:2A:E7:86:B7:7F:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04cdeaed-a0ae-3016-bf2e-38e99b2fbea7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d0:ad:cd:72:29:bd:9d:1b:f1:c0:4f:c4:ea:a0:b9:72:05:5f:
72:f6:8b:8e:32:e2:11:16:eb:52:b4:85:85:73:4f:1e:50:c9:
53:19:8e:7a:80:90:b4:02:8a:18:4c:65:c7:98:cb:d1:27:cb:
67:79:f9:b0:b9:12:5b:81:a9:80:25:dc:a2:20:76:63:43:80:
e6:21:d9:fa:6a:b9:27:97:90:22:f1:d3:68:58:b1:d9:b5:36:
de:3d:e7:36:4c:da:e4:99:cb:6d:25:07:8d:17:5c:ea:de:62:
e9:a5:10:0a:21:07:ce:2c:f7:ac:fb:f2:bd:3f:4f:55:a8:ae:
dd:a6:fc:a0:8a:ce:da:56:c0:24:b5:dc:ef:f8:a1:ca:af:d5:
a2:75:35:b5:9a:c6:62:2c:c9:36:f9:db:4a:ab:76:13:b0:e7:
db:15:bd:27:cc:af:67:ce:db:54:fb:5c:5e:bd:87:49:ae:62:
e5:78:23:e8:21:0d:19:33:35:7b:e3:a9:ee:b8:03:3e:70:29:
32:a5:58:17:6d:a2:65:26:57:09:ba:07:b9:a8:24:64:74:09:
9e:d9:16:0a:d0:cb:32:2e:c5:5b:32:a1:78:19:18:fc:de:e7:
47:d9:9a:a3:bf:1e:c1:b4:e2:63:0e:e3:c7:1b:57:06:cd:97:
8d:74:c8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 12:29:37 2026 by rpki-client