
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1bcc7753-0274-3a31-9446-09687985f096.roa
File: 1bcc7753-0274-3a31-9446-09687985f096.roa (raw, json)
Hash identifier: dwiHXft4c5KMbiyHvRW+fq10TP6R0ctcJUfVCZo7IIo=
Subject key identifier: 4D:41:78:47:12:04:07:E4:18:C3:BF:FF:F1:31:72:48:9B:D6:02:95
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F4983E4E2079132C1880B1E80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1bcc7753-0274-3a31-9446-09687985f096.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 172.243.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Oct 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:83:e4:e2:07:91:32:c1:88:0b:1e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=b3f232f5-209b-4e1e-82c5-f69f3571a5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1b:e6:3f:22:78:02:28:a2:09:bc:09:44:28:
d3:8d:fb:35:28:0f:52:fa:51:98:a8:fb:74:ac:7f:
99:03:d9:4c:78:f3:75:b8:a7:f8:da:f7:0f:38:cd:
b1:ed:c7:a7:0e:67:93:e8:c1:fe:b9:23:f1:80:67:
5d:ca:7b:94:23:56:ae:ea:27:50:de:35:82:a0:92:
79:c5:0d:c7:1c:81:f2:2d:09:a6:69:e5:96:00:89:
30:ed:be:28:dc:62:37:39:31:82:8a:87:d9:05:45:
16:eb:b1:a7:c7:e8:f5:57:42:86:68:4f:20:95:3b:
b8:03:6c:b9:e3:d1:01:b1:71:dc:97:a7:40:66:d1:
6e:5d:eb:4e:d2:69:71:54:00:2d:7f:bc:b1:a6:a6:
87:d5:60:fe:20:3d:de:f2:d9:b5:04:82:a3:57:5a:
ab:c9:85:ad:6d:d6:aa:3e:3e:d8:f1:21:d5:09:ec:
90:e8:93:3c:96:30:10:9a:d6:59:35:e9:a1:43:97:
06:d0:91:ce:43:f6:8e:0b:48:26:ae:55:d7:e4:1a:
13:f6:dc:95:dc:f6:55:c7:4e:84:fa:7e:7b:b2:7a:
b1:f2:67:db:a4:34:69:9a:ab:81:1c:3b:d0:76:8d:
57:94:61:5d:cd:8f:96:0d:63:cf:7a:50:b9:5f:d1:
26:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:41:78:47:12:04:07:E4:18:C3:BF:FF:F1:31:72:48:9B:D6:02:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1bcc7753-0274-3a31-9446-09687985f096.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.98.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:d8:98:12:34:85:d3:8a:93:5b:21:dd:55:73:48:52:2a:79:
72:3e:5a:dd:21:3c:27:1d:87:f5:5e:86:1a:88:c3:93:cc:fb:
7d:5b:b6:4a:df:94:41:42:2c:84:a8:b9:44:a3:af:ba:5d:6d:
71:ca:0b:b1:0a:a3:84:8a:0a:f6:ba:6b:eb:53:97:a3:88:45:
c8:b1:09:cc:bd:76:2a:29:48:7e:e7:2f:06:7c:ff:c2:42:9e:
ad:91:30:92:e9:0c:5c:bf:34:b3:2b:48:ff:a4:a6:d5:88:fb:
df:ee:cd:f0:94:4c:05:2e:50:04:50:4c:c7:11:4e:9d:74:cb:
00:0f:ff:3c:8a:f8:85:87:73:41:bd:77:e5:87:6b:e4:94:8b:
40:8a:d0:11:01:72:66:17:a7:57:6a:e6:cc:b5:1b:6a:68:ca:
6e:1a:39:b6:42:71:f5:5d:a0:98:82:02:24:f7:fe:8f:fe:12:
ce:38:9d:4b:9e:d8:da:80:7a:24:ed:d9:d8:61:bd:58:bf:d7:
5e:9d:9e:48:35:a9:8f:3e:c8:f4:34:a6:f0:fe:48:58:63:45:
f4:1e:19:89:78:22:ce:d9:0e:e7:d3:5f:78:d5:4c:90:2b:9b:
f5:c8:0b:35:e5:f3:49:13:8b:e0:2f:5b:d5:45:68:d1:45:c6:
39:cb:23:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:35:58 2026 by rpki-client