
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/64398f66-aea9-3d5a-a8ac-8445a1f1fca3.roa
File: 64398f66-aea9-3d5a-a8ac-8445a1f1fca3.roa (raw, json)
Hash identifier: kNflF/HkCHLIlYpkzzKZc+sVwv4idZ5KCwwjCUAbA68=
Subject key identifier: E2:88:92:42:3C:03:0D:9E:6A:3D:C0:94:FF:3F:D0:B9:9A:F3:87:E3
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F497AF4FCD6BFA6FFA4BB1800
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/64398f66-aea9-3d5a-a8ac-8445a1f1fca3.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 70.41.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 04 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7a:f4:fc:d6:bf:a6:ff:a4:bb:18:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=efd2c501-7fdf-4ad0-bfa0-e4617eca0c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:3f:ba:15:73:72:1b:54:0d:1e:ac:cd:e3:37:
28:74:c1:5e:51:b1:c5:c3:6d:ee:4b:90:2c:73:64:
13:50:94:d9:c3:b7:84:ce:16:39:bc:76:b8:7f:36:
76:26:ef:82:db:47:a5:ce:68:2b:12:47:69:ed:57:
ed:55:5c:41:90:0b:47:23:b2:92:8b:1b:f9:8c:d2:
63:ff:7c:cc:13:a4:58:3b:1b:d8:f0:f8:a2:8b:31:
dd:15:82:18:43:bc:31:be:a1:ca:7d:d6:64:08:e0:
80:04:be:ae:d0:4c:47:38:dd:d2:d1:70:0f:db:86:
d7:e3:46:c3:17:15:d7:cc:3b:bf:5e:90:c1:10:fa:
81:67:10:eb:4e:66:a2:e3:bb:72:75:b7:a5:97:9c:
f2:de:1a:ac:1a:50:b9:b6:e9:b4:f2:5e:50:12:2d:
08:96:f2:5d:51:9f:d1:c2:ef:46:1e:62:60:6b:28:
24:9b:9b:56:b8:30:0b:f4:d2:aa:a2:90:b7:1e:06:
bd:e1:c5:c7:9f:e4:9e:3b:1c:1c:d9:b6:19:bb:f4:
d3:03:d9:90:a3:53:04:14:50:14:e4:86:41:46:9c:
65:4f:d8:26:67:2d:1c:4c:5a:fd:4b:c2:c0:f4:81:
58:41:45:5a:43:c3:af:4b:cc:8e:56:3e:27:82:f3:
f0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:88:92:42:3C:03:0D:9E:6A:3D:C0:94:FF:3F:D0:B9:9A:F3:87:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/64398f66-aea9-3d5a-a8ac-8445a1f1fca3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:07:2e:34:81:df:00:91:a1:fd:87:84:52:93:7c:bd:94:53:
22:d3:59:a3:0d:49:cc:f3:9f:05:18:db:72:f2:50:66:55:3e:
a4:ae:03:0b:5b:82:87:df:3c:d6:59:a6:b1:22:bf:af:79:c9:
6c:37:24:fb:58:ee:dc:37:e2:cc:5e:d1:6f:9b:2d:fe:5a:75:
e2:a4:13:e1:ed:e4:5f:34:22:3e:58:ca:82:af:f4:3d:b3:ca:
cb:69:95:03:a4:e3:55:c8:c4:94:97:f4:8c:4a:a5:a9:3d:0e:
d7:2e:46:44:53:af:0c:c3:22:e4:fd:d6:fb:c6:12:ce:58:6c:
ee:6d:d0:9c:d6:90:df:04:9e:3b:2c:47:1d:fa:7f:bc:c2:8b:
03:25:a7:3a:a3:4a:dc:20:06:e0:e9:e5:44:26:73:75:dc:ad:
15:9a:1b:d8:e6:07:e8:bb:67:6e:d7:07:5a:2f:01:90:a8:4a:
c5:80:51:1d:cb:cc:63:f6:8c:4b:8f:ea:e9:43:75:1d:db:d4:
ad:6a:45:5d:99:01:61:50:8b:a3:d8:77:cb:44:0a:b1:1e:ff:
cf:17:d2:80:e4:cb:e0:d7:1e:64:8b:fe:c0:e5:d0:a6:16:b6:
35:0b:c9:6b:61:b8:f8:30:e5:ab:03:55:61:78:03:47:d0:40:
9e:97:88:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 21:48:31 2026 by rpki-client