
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/28ebf548-bfc8-3587-a4ae-d83505a701b4.roa
File: 28ebf548-bfc8-3587-a4ae-d83505a701b4.roa (raw, json)
Hash identifier: Vsl3alknvjXurEc2if57XfXTQ2KdVEV3uh82dRx3y0A=
Subject key identifier: 19:D6:03:99:F4:E1:A5:99:E5:3A:DE:7C:25:BA:1E:77:B5:70:96:CB
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F497AE8012F191E9063A6C2D0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/28ebf548-bfc8-3587-a4ae-d83505a701b4.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 67.54.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 02 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7a:e8:01:2f:19:1e:90:63:a6:c2:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=1e965b92-b8a9-4934-aaa3-f59a7b77b3e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1b:c3:b4:83:ce:24:b6:43:50:b0:25:d2:9b:
b8:a0:fd:1f:af:41:75:48:84:1a:ea:da:98:fd:ba:
26:f2:32:aa:b9:34:be:9e:cc:85:14:59:8e:b6:6e:
5c:60:0e:65:ed:14:15:33:5c:ac:c3:b2:f6:2b:b2:
28:c3:81:bf:df:f0:f5:fa:6e:4a:ad:18:d1:04:48:
39:f6:eb:bb:95:fd:2b:ab:75:20:98:8f:0e:4a:ba:
8d:f1:75:b9:b4:ad:99:49:83:04:bd:ce:4e:7e:a0:
d3:03:ff:79:be:20:ad:15:b4:d6:e3:4e:e3:16:1a:
f3:71:a2:94:1a:37:9b:40:42:4a:ef:cc:08:8b:cf:
48:af:52:67:e9:b5:8a:f4:17:55:26:1d:9c:af:8b:
a7:fd:71:45:d5:68:de:21:cf:00:5c:f9:08:2f:28:
b5:cd:79:69:a2:bb:57:6d:68:7e:a4:9f:c4:06:62:
4a:a7:23:18:33:7c:52:a6:a1:bf:1f:e2:ec:90:e5:
48:2f:f8:7d:7c:59:5c:cd:8e:22:e4:d3:e8:6e:fc:
13:62:39:7d:f0:d0:65:92:9c:df:02:68:50:7f:6c:
13:a7:e2:4d:7b:f8:7a:3b:09:a0:3c:03:33:a1:14:
03:b5:f5:a5:ce:74:c0:23:82:2f:46:a6:e5:11:18:
1d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D6:03:99:F4:E1:A5:99:E5:3A:DE:7C:25:BA:1E:77:B5:70:96:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/28ebf548-bfc8-3587-a4ae-d83505a701b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
67.54.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:40:c8:cd:19:9d:ed:51:f7:ff:39:53:17:cb:ed:c0:e3:a3:
c9:9d:36:28:2c:77:8a:74:c9:b7:aa:47:41:e7:58:fb:64:72:
56:37:a4:04:08:9c:c4:d5:25:36:da:c8:cf:d8:b5:34:d4:ec:
4b:df:8b:c3:17:67:c9:26:27:9c:63:3e:45:4c:ff:66:d4:2b:
d6:0f:e4:f6:7a:c5:b3:bf:7b:0a:0e:16:de:a0:43:81:48:53:
80:c4:f5:bb:e0:6c:22:02:fe:bc:fc:d7:3f:ee:5c:c5:0a:4e:
40:90:c7:96:66:eb:ec:e0:b3:f2:6f:70:d1:5f:c0:ef:ac:03:
fb:71:e9:4e:99:2f:09:ed:85:bd:8a:25:14:a1:fc:1e:b5:be:
66:7b:35:b7:ab:c1:a3:48:5c:05:b4:aa:65:59:c7:c6:f4:e8:
96:b7:39:23:00:7a:93:f7:4d:c2:ad:25:df:25:a8:fc:04:6c:
47:3b:a4:a7:00:d5:dc:80:2b:4c:13:91:12:1a:b3:d9:7f:86:
66:19:43:3b:dd:5a:f7:8a:b3:b7:0f:96:d6:8a:5f:16:55:d2:
13:43:af:eb:d6:04:33:08:e2:10:50:72:90:38:ec:e1:60:d6:
17:1a:bc:84:5d:d5:c2:b0:b4:2b:64:6c:c2:02:12:24:0a:f8:
6f:d3:c5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 08:13:12 2026 by rpki-client