
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3e328f74-a887-3475-a8c0-20ba801ac4d7.roa
File: 3e328f74-a887-3475-a8c0-20ba801ac4d7.roa (raw, json)
Hash identifier: E/1FrKYkYqUXncVVQ+w3cDCfBwNNM8Lx0u1ioBLTfnY=
Subject key identifier: 26:14:30:E3:36:8F:AB:D7:7C:D7:7C:28:D2:21:23:42:FF:B7:29:83
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24DFF438CEC630B4746E8840
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3e328f74-a887-3475-a8c0-20ba801ac4d7.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 162.72.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:f4:38:ce:c6:30:b4:74:6e:88:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=012773ac-fa64-4666-83c4-4c485619116f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:23:e7:b5:97:94:8f:16:e2:8a:d7:e5:2a:4f:
56:ea:4e:3c:33:b1:77:f4:0f:f5:a0:67:ea:46:ba:
ff:19:4b:d8:bf:d8:39:e4:ed:c1:c9:ba:76:c6:1d:
c1:b4:8b:f7:95:a7:74:76:0d:40:dc:94:82:96:5e:
b0:46:93:b4:bc:85:94:2b:c0:41:38:56:d1:ac:d0:
53:71:d9:1e:ee:54:36:a7:61:c0:7b:be:6d:f4:b1:
aa:06:8a:3c:89:21:fa:df:77:01:19:4c:d1:ff:8e:
fc:d6:87:1f:a8:f1:09:f5:ca:65:6c:da:bb:cc:1c:
40:5e:29:91:a9:12:ce:c6:97:e3:0a:08:4c:96:45:
1b:eb:b4:01:1f:6d:d4:ea:f8:db:8c:55:0f:3c:49:
e0:b6:35:67:de:75:86:15:ac:16:3f:da:92:cb:70:
aa:9d:a0:d8:20:08:f5:98:4f:94:81:1b:b5:d7:2c:
ac:6b:64:c5:80:d4:c4:cf:79:85:ee:d1:d0:68:8a:
29:c4:5b:fc:6d:54:7e:2d:2e:c1:d1:ab:b7:fa:8c:
9b:10:b4:43:e0:90:d7:51:9a:4b:33:11:bb:53:fe:
da:e0:11:60:ce:cd:8b:15:f6:17:e3:be:c3:a9:c5:
3d:e6:c6:99:e1:8b:0c:05:eb:0e:33:b9:60:1a:e8:
96:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:14:30:E3:36:8F:AB:D7:7C:D7:7C:28:D2:21:23:42:FF:B7:29:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3e328f74-a887-3475-a8c0-20ba801ac4d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
162.72.187.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:3f:c3:00:e0:67:29:b4:57:f1:6b:b2:61:81:e4:1f:13:c2:
c9:f0:79:9e:c8:85:c5:7b:10:44:fa:e4:b9:5b:94:4c:a2:5c:
f0:da:0c:bd:05:83:de:e6:dd:22:61:bb:fb:e7:61:a9:f8:1f:
5d:61:f9:f1:a7:ea:8d:09:90:06:58:29:f3:f1:3b:c0:d2:62:
ee:37:03:58:cf:de:17:df:c6:e0:98:ce:2b:ef:54:fd:fd:bf:
46:b3:22:17:12:01:4f:e8:0b:d9:4c:79:76:c0:ab:e1:03:c7:
2c:41:33:13:48:fe:cf:65:f1:c6:0f:39:59:46:d0:d6:cf:b8:
40:97:58:fc:2c:3f:b4:e6:c6:4d:04:ee:ec:b2:6e:83:16:59:
ba:da:45:1b:9b:17:4f:63:fc:cf:6b:3a:58:42:27:3a:b9:66:
b4:e7:db:08:b4:66:fe:fb:75:f6:da:4e:42:b3:0d:98:21:d8:
ca:ea:d6:1c:6c:5c:98:72:e7:c0:32:dc:d2:60:76:a6:00:3f:
79:09:f2:17:00:96:3d:0e:cd:8b:48:d6:4e:15:16:bf:30:63:
e7:28:79:0f:70:78:92:c0:8a:b0:6c:80:db:d3:8c:cb:fe:69:
c6:b6:64:70:b2:d4:39:a4:b3:81:e7:4d:57:5f:28:f8:76:f7:
c8:35:df:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:35:52 2026 by rpki-client