
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/24f61998-060b-3346-9e53-913f4620d5f5.roa
File: 24f61998-060b-3346-9e53-913f4620d5f5.roa (raw, json)
Hash identifier: BNK2bPICJRDLL3mGRN0Iy6yIfgtDK1EP5bdSf3xXDBg=
Subject key identifier: 01:48:A3:98:D2:32:EB:CA:7D:1D:93:25:E9:9C:33:C2:CD:E7:CD:DC
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F497B85AF1EEC96C17AED64A0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/24f61998-060b-3346-9e53-913f4620d5f5.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 162.72.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7b:85:af:1e:ec:96:c1:7a:ed:64:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=d3edb7ef-2614-43a1-83bf-92fecd9af12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:98:88:b3:76:e1:82:9d:7d:ac:80:a3:fb:28:
06:38:f6:af:4e:bd:0a:58:4a:3c:cd:be:b1:3b:66:
19:b7:39:2c:bd:5e:a2:fb:e7:9c:5f:85:4c:a0:9b:
1b:52:b0:10:5c:b6:eb:92:13:bd:27:56:1f:7d:02:
a4:f7:0a:ba:ef:8c:56:5b:52:4f:ce:55:d1:e4:9f:
1c:8d:11:65:dc:c4:7a:eb:53:7b:cb:08:0e:19:ac:
3d:3f:76:03:8b:79:ad:8d:13:b6:c0:b1:31:7f:1e:
cf:58:64:f9:29:f2:b9:78:57:4a:cb:22:f9:52:48:
01:2d:a6:55:7c:33:93:a9:66:98:06:57:31:db:11:
65:e0:19:83:0a:8a:57:3f:46:c7:b3:c6:18:44:7c:
99:5d:45:8c:3b:d1:48:97:70:3a:25:1c:30:19:42:
cd:4c:9a:e9:5e:0e:bb:9a:89:c4:37:aa:92:f9:5f:
a4:c3:21:2f:f7:1c:b1:13:68:8f:d5:71:65:dd:8e:
f6:07:e5:b9:86:06:70:d9:d6:78:11:4f:3c:50:3f:
63:12:1a:3c:69:bf:4d:f0:ba:13:17:aa:4c:73:3b:
36:eb:e2:c8:da:38:26:14:6a:77:d6:80:52:af:d8:
03:20:a0:ae:51:d2:9f:00:e2:93:e2:a8:27:8e:9b:
a1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:48:A3:98:D2:32:EB:CA:7D:1D:93:25:E9:9C:33:C2:CD:E7:CD:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/24f61998-060b-3346-9e53-913f4620d5f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
162.72.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:1f:f0:1f:b5:29:ec:c0:54:83:05:d2:85:e4:97:4c:83:b4:
51:51:9c:40:bc:e6:eb:d2:5f:38:86:9c:c9:8b:0e:43:a0:bd:
af:43:89:0d:c7:07:a3:ef:5b:a2:f6:02:a8:2a:37:9c:4b:78:
f5:29:9b:cb:cc:79:7f:81:f4:ec:16:ba:fb:49:ce:a7:d7:96:
1b:03:22:eb:77:f0:7f:58:e1:40:a9:d9:e3:bb:ca:f3:0d:ae:
a3:c5:1f:7a:fd:f3:17:f3:84:58:f0:1e:25:83:a9:40:e9:74:
9a:d0:19:58:49:04:34:2f:29:17:3a:86:3a:bd:91:29:b8:c2:
a9:73:64:32:74:13:09:00:5a:7f:e4:71:50:42:79:64:9b:c7:
1e:82:30:a9:e8:f8:2e:ba:1d:76:cd:e6:3a:49:d1:e3:72:d8:
2b:6b:5e:da:9a:c5:d4:2a:65:ed:56:bf:74:9f:db:93:44:ca:
78:c3:f3:6b:91:a8:26:ea:6e:2a:aa:b1:89:48:d6:9f:e3:8a:
01:67:22:e4:5b:48:63:e0:1f:47:e9:2a:17:f5:e1:d8:bc:27:
30:01:f6:df:a6:8c:7e:10:36:ab:92:98:97:54:0d:3b:24:e4:
66:a6:da:81:6a:c7:a3:c8:50:c9:a0:eb:7c:29:e4:b3:00:7f:
ac:10:e0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:39:08 2026 by rpki-client