
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/499ced6b-eb87-35ad-9374-57894bc8a3b5.roa
File: 499ced6b-eb87-35ad-9374-57894bc8a3b5.roa (raw, json)
Hash identifier: XBysOz/v7KQc3E3bm/CANjoTXZE6eVhjq3ltRblz69g=
Subject key identifier: A5:E3:85:5E:DD:A7:6D:A3:70:5B:3C:9B:E3:A3:13:17:CE:23:78:BA
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E0A47CBDF4070D63F8D640
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/499ced6b-eb87-35ad-9374-57894bc8a3b5.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 162.72.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:a4:7c:bd:f4:07:0d:63:f8:d6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=ae1d665d-98e3-4247-889d-77745bbe6f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e9:de:90:30:5b:c3:8f:d0:11:7e:c1:a1:d3:
d5:57:25:f5:71:1b:37:75:41:c8:48:4b:10:85:01:
02:0d:be:8d:8f:57:9b:46:b0:50:ab:1c:38:cf:6a:
e9:a5:1e:a3:af:9b:b3:42:87:cd:e1:96:94:19:bf:
6d:a2:31:c0:0b:90:99:0a:da:4b:4a:3e:73:ed:4e:
94:37:85:92:9c:f1:24:84:cd:b6:03:ec:93:e6:7c:
aa:6c:dc:fd:1f:3d:7b:8a:05:43:94:d3:c9:82:ef:
b8:e1:d8:e4:8f:f9:98:96:01:e5:09:a1:d8:1f:01:
76:6c:3b:67:90:5b:f2:f5:7c:07:24:6f:4b:b8:fe:
01:1e:0f:d3:e5:21:e2:5f:56:ad:a7:3e:5b:a7:c1:
49:01:05:df:71:86:01:2f:d1:60:40:fc:71:94:8d:
85:25:11:a9:66:14:80:ae:9c:b0:90:7a:be:57:d9:
b0:40:85:bf:5c:93:0d:74:a1:24:bc:a0:21:2c:a7:
b4:28:04:bf:4e:6a:9e:19:19:2e:86:75:4c:c6:23:
6a:f9:50:a9:01:7d:1a:7e:84:af:d9:00:07:e8:aa:
dc:ff:34:81:18:4f:c4:cc:08:32:52:15:8b:be:a6:
2e:f4:53:bd:6e:94:b0:57:00:a8:0b:6e:c4:d8:33:
3e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E3:85:5E:DD:A7:6D:A3:70:5B:3C:9B:E3:A3:13:17:CE:23:78:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/499ced6b-eb87-35ad-9374-57894bc8a3b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
162.72.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:13:f1:c0:7c:64:31:70:67:28:27:22:a5:c8:52:1d:e6:1d:
c8:b3:f5:c1:f5:86:42:8d:d7:0f:d0:25:2f:15:79:f1:23:62:
bb:40:dd:7b:04:cc:e6:81:3a:45:3a:c3:08:53:ba:fc:7a:17:
c5:50:d8:cf:07:48:9d:46:94:5c:4c:10:b2:4e:10:66:0e:6f:
20:1e:0a:58:63:b5:73:99:62:8d:f4:04:c9:1c:33:46:4e:37:
7f:e9:d4:74:b2:b5:50:ad:e2:99:50:22:36:9c:aa:bd:86:fc:
95:f0:4a:73:95:a6:c2:7c:ef:c9:4c:01:f3:a3:67:b3:56:8d:
ec:97:29:87:49:1b:9e:3b:36:78:ee:15:d3:19:91:d9:c2:c1:
9d:cd:fc:aa:92:8a:d9:89:3d:cf:31:9e:d0:be:79:2e:62:09:
fe:06:7a:e3:c0:d5:ab:20:a3:20:a4:17:cb:41:8f:cf:20:80:
5d:f0:5d:44:98:0b:b5:22:d3:c0:28:5d:e0:e7:7a:57:aa:e7:
51:15:d8:ce:e9:5d:c1:db:99:5e:8d:0c:fe:70:6d:e1:b8:27:
73:da:65:cf:22:af:ec:1f:78:5f:ce:bf:7f:96:88:c4:d0:0a:
32:58:71:b7:7a:a2:88:1f:93:91:c3:e1:a6:e8:17:c5:b4:19:
c6:b5:27:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:30:46 2026 by rpki-client