
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/30d6358b-f3b7-3778-a5a1-a8abe5a61aa8.roa
File: 30d6358b-f3b7-3778-a5a1-a8abe5a61aa8.roa (raw, json)
Hash identifier: CbpH0KuJmxRv88xV7iz7YAWxjsexAqf9BDnsA7lXnuw=
Subject key identifier: 4E:73:A8:9A:A0:C8:D8:AA:C6:CB:79:2C:62:5E:04:01:09:D5:5B:E2
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F497B000051E026F5607DCB80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/30d6358b-f3b7-3778-a5a1-a8abe5a61aa8.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 72.173.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Oct 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7b:00:00:51:e0:26:f5:60:7d:cb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=29175453-8b5f-47f8-b7bf-7cae933ac611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fc:50:84:7b:92:5e:10:59:d1:b2:72:d8:ba:
8a:97:c4:dc:db:6d:e1:6b:84:4c:62:52:ec:73:0f:
9f:28:38:85:9f:16:d8:7a:e9:d3:8d:f0:ee:0e:06:
c5:e1:f6:7e:0b:88:e8:12:d9:d7:d5:b2:df:5a:11:
d2:ee:9b:24:04:36:8f:ef:77:8e:3a:19:a4:c8:21:
bd:0b:9a:53:10:70:a1:e2:dd:9a:27:3a:67:46:0c:
ac:be:af:29:85:b3:aa:9c:89:c6:5a:c3:65:b8:63:
26:df:b7:98:7a:00:84:f9:ba:b1:4e:ec:3c:20:1b:
ca:e8:c3:45:e8:03:ea:dd:33:56:17:df:73:8c:db:
71:be:27:c5:fb:84:4f:16:f2:9c:61:96:ac:9f:a7:
fe:df:be:2a:5b:c5:5f:a8:8c:ca:9b:4a:9b:e0:c6:
1b:cc:45:5d:f9:07:e0:0c:ec:ff:f2:96:f1:4e:1d:
9f:82:72:c1:a0:9e:39:f5:6a:0c:cd:97:49:6e:f8:
a7:4a:e6:8c:e1:5d:99:41:23:f4:02:b9:a7:2c:a3:
a6:9c:36:38:08:28:30:2b:69:cb:fb:99:57:75:47:
3d:8c:d1:43:2e:4a:d0:42:52:1a:22:78:c2:76:14:
81:0e:17:6d:c1:67:03:b7:36:13:fc:df:7a:52:53:
9b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:73:A8:9A:A0:C8:D8:AA:C6:CB:79:2C:62:5E:04:01:09:D5:5B:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/30d6358b-f3b7-3778-a5a1-a8abe5a61aa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.39.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:1f:64:86:42:d1:30:72:24:80:4f:ee:21:55:77:27:11:07:
8e:d6:7c:18:74:e6:34:d4:f3:77:b1:8f:48:a4:f9:dd:c3:27:
f6:c6:9f:8b:26:d3:83:12:d1:b1:ab:78:88:8b:15:99:5f:21:
06:79:02:d8:55:bc:6d:09:86:4b:38:cf:58:f6:2b:b2:7a:3b:
6a:ff:37:6c:c8:4e:ae:87:f2:cc:26:bc:9c:75:b2:f6:3b:35:
eb:1f:f4:a5:07:c5:62:b6:b8:64:20:d9:bb:91:76:52:6e:de:
a6:f3:69:c8:59:3d:3c:3b:7d:03:ba:03:aa:67:27:d9:06:73:
b1:df:22:15:40:96:6c:6e:b5:fe:6d:a0:9d:1b:64:18:6b:ad:
27:78:fd:c4:f0:ae:e8:4c:8e:0f:20:a9:21:d8:07:d4:93:02:
29:07:b3:f9:05:3a:68:9f:3b:ae:0a:50:5f:d5:5a:db:a5:1a:
bd:cf:f9:a2:60:56:8e:38:74:c4:a0:40:a9:45:2c:c4:37:ac:
43:22:5c:fd:d0:e3:22:da:a3:c6:3b:9a:41:e1:62:ba:17:d7:
75:24:2d:d2:7f:7d:4d:9a:65:be:9b:c1:e4:a3:72:c5:ee:93:
24:c7:aa:b7:65:71:24:8c:30:b3:d9:05:88:be:67:7a:2a:e9:
5a:c2:11:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:34:04 2026 by rpki-client