
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4f2e0da6-1c03-3afa-bd95-a46542709a06.roa
File: 4f2e0da6-1c03-3afa-bd95-a46542709a06.roa (raw, json)
Hash identifier: ue5Yd60S0EcE89BFtAQ49TOrGcOuJzP0zrxACMV4XOc=
Subject key identifier: 95:C6:A4:3B:81:42:F2:7C:D1:E3:51:AA:1F:11:3B:49:FC:C0:60:98
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F497ADDA7F44D7C2AC314B440
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4f2e0da6-1c03-3afa-bd95-a46542709a06.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 40306
IP address blocks: 70.41.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7a:dd:a7:f4:4d:7c:2a:c3:14:b4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=7272ebbd-8a8b-4d09-94bb-3376a25f02f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:02:a6:3b:b2:8f:8e:61:2c:f4:5a:19:95:b2:
99:2e:27:1e:23:85:34:2b:45:77:cd:26:a7:a8:cd:
6b:e2:38:ed:ea:b9:f9:ac:0c:c5:86:2e:c9:43:c7:
f9:f7:af:30:a2:4d:74:7e:72:7a:b7:93:8a:9a:df:
51:7b:7f:ce:45:b0:e9:d9:6d:5f:e0:da:3a:d1:79:
2a:aa:23:14:01:54:b9:95:24:20:b6:bc:fc:b4:6b:
a5:e1:cc:68:b5:9f:df:7e:ca:2e:5a:b3:7b:51:6c:
73:b1:d0:16:05:44:76:bc:f4:32:a5:88:5d:44:5b:
01:06:df:f0:a2:69:dd:56:a4:de:b8:66:59:a2:7a:
5e:82:7d:81:58:9a:bc:85:0a:32:d8:4b:8c:18:05:
b0:01:bd:cf:9b:9f:d0:d5:fc:54:49:83:85:32:b1:
ea:02:e9:cd:af:cf:e6:54:0a:81:85:21:af:56:5d:
ef:81:dd:1b:06:7c:08:dd:f9:c8:46:b7:8b:ae:e5:
cd:40:8b:64:d7:29:f3:d2:cd:c5:cd:fb:06:37:9c:
ea:f5:f0:76:2a:d9:27:38:33:78:ca:c8:ad:8a:e6:
64:cd:0e:e7:08:11:13:24:59:30:eb:ba:b8:d4:7a:
8b:53:cd:f1:2d:c5:ad:ab:2d:a3:8f:b1:98:b0:59:
cd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C6:A4:3B:81:42:F2:7C:D1:E3:51:AA:1F:11:3B:49:FC:C0:60:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4f2e0da6-1c03-3afa-bd95-a46542709a06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.50.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:0c:c9:94:83:6a:71:c6:95:78:8a:10:03:d8:19:1c:17:cf:
ac:76:c0:24:c7:b3:09:75:33:51:d3:32:ff:75:2e:6c:81:ea:
8c:19:ad:5b:f7:7e:77:69:15:10:80:63:b7:9e:d1:da:32:ea:
9a:4d:e7:df:e5:59:ef:df:94:90:05:15:e5:c6:9d:41:5b:77:
d0:c9:89:36:f5:f1:4b:07:f7:68:b2:6c:fa:d3:bb:0f:f3:bf:
1e:3a:8a:b3:be:5b:59:bd:79:f7:fc:19:26:c6:aa:e5:cc:99:
17:a9:0d:d8:35:d5:14:b0:a6:a3:e8:8d:98:af:62:95:0d:09:
7d:25:86:c0:d0:5e:89:95:39:0d:25:05:80:3b:e9:58:85:0a:
18:54:ce:04:07:41:eb:1e:48:1c:d3:6f:0a:b4:2d:fe:20:7e:
60:18:ce:d1:46:95:96:79:91:50:9a:24:5f:07:fb:ec:52:b9:
d3:97:d7:d1:94:aa:28:78:4b:41:2f:c8:66:da:f8:38:f9:11:
8a:e7:f1:b2:cd:80:c1:94:3a:70:58:c6:90:18:16:83:9a:c7:
93:23:1b:e6:5b:62:b5:73:49:21:10:ed:59:7d:e8:d3:53:27:
eb:bd:a0:b5:17:61:fc:e2:de:87:2a:c3:dd:d9:9e:7a:eb:e8:
b8:b0:ec:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:39:29 2026 by rpki-client