
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5d2542f6-81c2-35f6-9986-c997b9737a22.roa
File: 5d2542f6-81c2-35f6-9986-c997b9737a22.roa (raw, json)
Hash identifier: pI6hH2U0Psg5oOfGt/qKdrW7zK9nyQAP2ScS5lfPHAI=
Subject key identifier: 41:6E:BD:78:11:98:C6:54:41:EB:18:55:16:5A:BD:C8:61:2E:63:AD
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F49836A1477920C55E0DA95CB
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5d2542f6-81c2-35f6-9986-c997b9737a22.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 75.107.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:83:6a:14:77:92:0c:55:e0:da:95:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=dd26c385-5891-41ae-a755-4e0569486b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ff:58:77:93:67:55:21:d0:ed:8e:ac:b9:45:
c8:9d:78:d9:a3:d0:c5:71:10:47:f8:f9:b4:94:52:
2e:50:b7:9a:a6:98:ca:f6:10:fe:23:7b:15:41:33:
c6:5a:98:94:d7:42:44:5a:89:32:2d:a3:15:d2:c1:
23:bc:58:d1:7f:72:a4:67:39:eb:97:13:12:bf:3d:
9f:1b:b9:9c:05:40:d3:57:1d:24:85:76:d6:0e:a6:
35:26:aa:6c:86:dc:41:42:4d:21:dd:59:96:90:fd:
18:86:cb:dc:95:f9:57:b5:1b:da:0f:4e:7d:70:f9:
e3:53:10:e6:b3:26:4b:33:da:49:9d:e3:52:86:22:
95:1f:15:29:21:c3:93:ef:6a:c4:90:e7:a6:b7:b0:
55:5c:1b:8d:ae:3f:cb:ac:c3:6b:37:ec:f6:ad:77:
db:e5:a5:af:c3:a4:43:df:6d:29:8a:09:7f:07:de:
30:cd:53:87:56:94:b4:22:d0:20:ac:b7:7b:92:1c:
76:f7:ee:4f:e4:2c:a8:cb:8d:21:00:27:6e:37:35:
e2:cc:ed:b5:53:79:92:2a:47:f7:c0:33:87:5b:eb:
ef:52:44:b0:8b:2e:85:2b:3b:d6:2d:14:6c:16:e8:
bb:02:db:a7:02:ec:94:83:89:6f:98:27:8c:b6:77:
fd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6E:BD:78:11:98:C6:54:41:EB:18:55:16:5A:BD:C8:61:2E:63:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5d2542f6-81c2-35f6-9986-c997b9737a22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
75.107.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:36:0d:e0:63:b5:b0:0c:53:75:f7:15:20:bc:39:81:eb:8c:
a5:cf:3f:49:62:ca:fd:4a:69:e0:07:6d:46:34:b9:08:16:f8:
5a:e8:da:33:db:1b:aa:81:b4:22:85:84:9b:51:29:08:a0:8d:
f2:50:de:d9:d7:70:70:f3:94:d8:ca:0a:de:4c:dd:64:2b:dd:
32:6f:70:bb:f3:5b:35:ac:c4:b7:dd:a2:ed:9e:20:f6:10:1f:
2e:4d:dd:a9:26:cc:6b:75:82:14:77:d1:eb:8e:8a:70:6d:d1:
05:32:78:4b:fb:04:94:47:0f:3a:2e:c6:0c:f6:e3:94:63:4e:
bd:4f:d3:5a:a0:f5:eb:39:1b:dd:95:c9:d0:4d:94:d8:25:c3:
3b:f4:39:25:f6:f4:0c:42:54:1a:40:b3:82:e0:10:be:5a:cc:
c5:9d:50:21:3d:bb:50:4f:e9:78:45:5f:be:60:0a:a2:c5:86:
3c:47:83:f6:6c:c9:2e:ec:a9:0d:40:bf:e3:c2:c6:fc:9e:62:
b2:b8:3a:ad:b3:cb:db:93:5e:87:ff:b6:8f:47:1b:c4:a9:3b:
c2:d8:34:db:18:cf:2c:ee:12:0b:3a:1e:57:c8:5e:30:44:0e:
19:59:96:a0:35:de:30:11:96:d4:01:fc:e4:e2:50:c4:49:d5:
52:f9:70:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:22:42 2026 by rpki-client