
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1a329a07-dce6-37d6-abc4-69f4c755efc4.roa
File: 1a329a07-dce6-37d6-abc4-69f4c755efc4.roa (raw, json)
Hash identifier: m4DVkW9A+V+TTQAIGAHfn0/IQbCfjTZMHUV/U5rTo+Y=
Subject key identifier: 73:A1:9D:7B:54:9C:D3:D9:37:10:4F:A9:BF:78:C6:AB:17:61:49:41
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F497B9C61E9667E1A10324800
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1a329a07-dce6-37d6-abc4-69f4c755efc4.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 172.243.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7b:9c:61:e9:66:7e:1a:10:32:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=1d99cddc-487c-4235-8989-e973f6d42497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:63:73:e0:52:47:52:70:85:d8:49:50:50:86:
e3:2c:64:2b:25:69:77:91:7a:d9:83:28:c9:f2:fb:
03:24:2e:e0:96:bc:86:13:75:26:36:6e:6e:e0:b8:
3a:3f:01:ab:32:87:52:5e:2a:4e:cc:a4:3c:4c:30:
ec:60:f6:ce:93:11:7d:82:e6:fb:f1:bd:b1:e8:06:
7e:2c:e1:59:5a:9b:7a:d9:24:d5:44:33:71:59:d2:
8e:1c:5a:52:80:a6:a7:ee:d9:9f:bb:00:23:c8:57:
44:c3:26:1a:2b:e0:13:21:e2:b9:86:f0:d9:ca:b5:
a6:bd:6a:f9:d4:52:b8:1c:27:96:e0:21:49:5f:77:
75:dd:06:f4:f3:12:1f:e6:a4:58:f0:b5:ff:b0:b5:
b2:09:23:d1:10:fc:36:c6:24:97:8f:75:ec:1f:59:
70:ca:4b:59:49:f2:7c:3a:df:4e:7f:96:9f:7d:9e:
d7:88:ae:f3:8f:19:68:c2:c0:3f:04:4e:cb:1d:a6:
3a:55:82:4e:de:10:bb:9b:30:40:87:f1:fd:ad:d6:
62:d9:09:98:7b:a6:e5:2a:0e:8e:05:0a:3d:03:e0:
bd:65:a4:08:72:34:66:fa:b0:43:1c:04:45:65:3c:
2a:35:af:76:d5:40:40:9e:11:1b:99:57:f4:2c:7e:
20:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A1:9D:7B:54:9C:D3:D9:37:10:4F:A9:BF:78:C6:AB:17:61:49:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1a329a07-dce6-37d6-abc4-69f4c755efc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:86:1e:ec:6b:2b:44:20:2d:4b:1e:94:f8:68:80:12:ce:75:
85:b9:6f:5d:61:fa:2e:0a:5d:4c:db:cb:e9:0e:92:5d:81:55:
40:92:76:fc:2e:aa:fc:aa:69:cc:74:b8:6b:39:b5:7b:d3:9a:
b5:42:c2:4e:f5:f4:17:1e:2f:74:bc:56:ea:57:f1:d7:2a:c8:
35:2e:6d:2e:41:1f:8f:ba:87:1f:2c:47:ec:a9:0d:0f:bf:8c:
0b:27:04:d0:c7:3e:61:7f:99:16:82:cf:81:c0:88:10:ba:5a:
f7:74:39:2b:49:18:98:f4:e2:50:e3:62:97:a5:fe:8a:9c:17:
a9:ec:33:c6:35:94:25:14:26:4e:c2:c2:3a:2c:81:0f:81:6f:
63:46:50:6c:3c:16:7b:b8:e4:6f:b7:c5:d6:45:47:1a:a5:3b:
b8:78:91:6a:db:0e:c3:4b:a7:7f:08:0f:08:62:63:9e:fc:34:
60:69:b4:f0:cd:71:bb:45:d5:45:73:91:2f:ce:0f:ae:c0:23:
ec:7e:1f:93:49:0e:dc:74:9d:2f:82:e1:00:93:fb:66:e0:2c:
3e:c4:f9:a9:d9:92:cc:41:ec:f5:1b:5b:10:9f:01:c7:f9:bb:
49:9f:5a:ca:2c:4d:f0:8b:f1:b4:74:6d:7d:d3:70:4c:39:b3:
d8:91:c5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:15:28 2026 by rpki-client