
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/356856e5-5138-3906-9a99-8c00dafdb445.roa
File: 356856e5-5138-3906-9a99-8c00dafdb445.roa (raw, json)
Hash identifier: orOZ7I/vhrqyk+lwafh3IKVhlKg2e3vz4DWuZXzg5K0=
Subject key identifier: E6:40:1C:3F:45:23:8A:2F:26:4C:02:7A:86:7D:CC:C7:F2:B2:2B:DB
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F498319186479B2D15F937000
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/356856e5-5138-3906-9a99-8c00dafdb445.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 70.41.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 08 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:83:19:18:64:79:b2:d1:5f:93:70:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=33a54b7a-c5a4-4109-b86f-dc7f6129391e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:39:3d:ba:cc:35:2e:af:2d:d3:7a:f8:57:b8:
e9:4c:67:c2:36:a2:21:2d:12:f0:42:00:5d:4f:83:
ca:5e:90:bf:56:3e:e2:94:98:83:1a:f7:b7:62:10:
3b:25:0a:67:76:69:46:65:23:b0:71:a0:67:a6:65:
40:21:58:f1:a6:fd:56:4e:0b:8e:6e:78:e7:92:3c:
c2:a1:8d:99:37:33:f4:bc:8f:6e:4b:d0:cb:4f:44:
9c:8a:31:a7:67:32:5f:96:82:4a:9a:00:82:29:1f:
50:5f:47:4d:6a:bc:7a:fa:46:2d:a8:b8:61:fe:18:
39:ae:d4:55:d2:a4:34:1d:1b:05:4a:6c:f6:a6:5c:
d2:12:d3:c3:42:b9:48:ca:e1:cd:5d:82:4e:22:7a:
18:2d:52:99:25:73:79:92:cf:22:3c:74:a1:e0:eb:
8c:b4:62:04:4a:26:00:6e:10:f7:74:34:c7:27:82:
ae:89:3f:f3:c1:e7:d2:5c:63:38:73:f0:9a:c5:e6:
04:0c:7b:81:dc:c7:bc:0c:8e:8f:d8:bd:42:5f:d8:
9c:ea:99:31:4d:9b:69:b9:99:1c:9d:98:50:f9:81:
9f:38:01:1b:13:d1:55:db:48:d1:12:dd:2f:0a:e7:
05:94:ce:be:ff:dd:c3:b1:5c:6e:e7:5f:d8:42:be:
75:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:40:1C:3F:45:23:8A:2F:26:4C:02:7A:86:7D:CC:C7:F2:B2:2B:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/356856e5-5138-3906-9a99-8c00dafdb445.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.177.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:d3:d3:d8:e6:b1:e2:5c:58:1b:e9:c8:90:be:69:58:bb:76:
6e:ce:fa:6e:3c:0e:d9:b9:15:4b:e4:56:a8:5c:9e:83:5f:07:
bd:21:b0:5a:01:b0:54:80:61:cd:c6:d5:c4:27:c0:d1:e5:85:
73:15:37:ae:df:22:56:59:c7:49:7f:b4:7f:4c:8b:42:fd:da:
0f:0f:d7:ef:30:12:28:d8:fc:70:88:c1:c8:f0:16:4f:44:d8:
66:ce:d0:3c:bf:9f:07:86:40:43:91:72:ad:7d:9c:8b:aa:8c:
8f:fd:0d:b4:e6:6f:68:c7:b3:12:1f:f1:aa:4c:52:64:e9:31:
57:2d:cb:13:01:ea:ac:0d:94:d0:03:69:fb:8b:e3:75:eb:5b:
d1:80:03:8f:7e:fa:98:44:5b:20:68:d2:ae:62:16:81:a4:fb:
62:6d:3c:c6:6c:6c:75:7f:6c:68:f7:56:8c:22:52:07:17:51:
ac:62:c1:62:22:f9:dd:4e:f0:2c:8c:a2:cb:f5:25:9a:a7:ff:
d2:f8:2e:cd:ea:73:cb:f3:8b:99:d0:48:50:07:42:3c:a5:7d:
df:c9:66:52:84:3f:fc:ff:75:e4:ff:b7:61:2f:4e:10:db:17:
74:0b:b9:13:a8:f0:27:88:21:25:d9:de:aa:66:ca:f2:21:b4:
df:c3:e8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:35:56 2026 by rpki-client