
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/669ba9e5-5cde-383b-bb6f-1c56fb5060b5.roa
File: 669ba9e5-5cde-383b-bb6f-1c56fb5060b5.roa (raw, json)
Hash identifier: VaI44gnAsfNrzdn4TllklMu11Xyws+DJPJvo9vOv8oE=
Subject key identifier: 28:76:92:8B:52:A6:4A:7E:11:FA:F9:54:E6:02:4B:65:93:61:5C:CD
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F4983D833E7980ECD5644CAE0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/669ba9e5-5cde-383b-bb6f-1c56fb5060b5.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 172.242.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 05 Oct 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:83:d8:33:e7:98:0e:cd:56:44:ca:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=caed15d6-8fc6-4665-81f6-ff6787d3c8c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5d:d8:c2:35:9e:9e:e9:ca:4d:97:49:0e:73:
2d:db:b6:c8:af:71:7e:67:9a:70:1c:0d:91:ab:1a:
b9:e1:97:3a:6a:ca:33:f2:4d:d8:e3:04:f0:a0:84:
59:13:d2:08:25:99:f7:d1:95:20:b8:ac:7a:41:77:
ac:f8:3b:27:e4:b2:35:ec:63:60:dd:f6:e9:23:aa:
d8:7f:93:8c:76:9e:3c:2a:91:6f:6c:30:ce:b6:c0:
ad:67:33:cd:cd:89:78:f6:3c:07:d2:36:45:f9:02:
19:47:ba:99:4f:8b:27:6d:8f:bd:13:ba:2b:72:b5:
89:75:56:07:a5:05:ee:f2:a5:4c:7c:9c:46:83:b4:
0a:c0:03:c9:59:d4:af:f0:06:77:17:91:8f:98:92:
cc:87:69:52:fc:9c:6f:2c:b8:61:25:f1:a3:a0:73:
b9:9b:c5:08:62:4b:2b:e6:19:be:7d:93:8e:a9:e6:
b5:5d:e6:bf:d3:db:da:8c:51:ee:89:7f:93:b2:06:
1d:03:e8:07:ec:29:b1:34:72:47:26:cf:bf:a2:d9:
eb:cb:e7:e9:ca:0c:b7:4d:23:7e:cb:f8:b3:6b:4f:
e0:d3:af:44:a6:ad:35:07:3f:2b:76:5e:0f:ee:eb:
7b:29:58:59:48:b8:dd:30:4d:70:6a:01:96:c4:ee:
56:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:76:92:8B:52:A6:4A:7E:11:FA:F9:54:E6:02:4B:65:93:61:5C:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/669ba9e5-5cde-383b-bb6f-1c56fb5060b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c1:f1:2e:3a:8d:ca:84:f7:a4:58:75:2b:f3:08:b2:3e:02:da:
e2:e4:ab:9b:5f:1f:80:0d:97:6b:e0:4b:5e:d2:ef:e6:8d:bb:
f4:8f:36:0e:de:e1:ad:c9:c4:cb:7c:5c:87:b8:40:67:99:f9:
df:e5:cb:f1:06:c3:40:e5:61:11:6a:8b:a2:5f:c5:24:b7:44:
c2:1b:c0:eb:c0:7c:f5:fd:09:a2:1b:c4:56:7a:07:59:1b:4e:
ab:be:cf:8b:ac:5e:a2:c1:16:62:fc:31:11:53:c3:4b:1d:7b:
00:a7:1c:7c:5d:44:b3:f6:a1:5e:82:6e:4c:69:24:56:ef:8d:
29:a9:e0:fe:94:32:77:ea:03:86:22:5c:4a:2d:b1:f1:49:a3:
cc:23:82:be:57:43:fb:1a:20:eb:70:a5:87:3d:d3:32:d5:1a:
db:b0:86:fb:49:55:7c:af:5a:82:e0:04:59:a6:18:b9:3b:55:
59:eb:4f:16:d2:36:3a:4f:79:50:8a:f4:a9:71:0b:a1:18:9a:
3a:b9:9f:12:df:2d:bb:f1:71:41:26:c0:fe:04:09:10:15:1e:
af:b2:85:73:16:82:24:d6:1b:84:a4:14:df:74:59:df:da:d9:
07:c7:00:77:03:9c:14:90:23:73:38:70:be:15:69:86:eb:3f:
61:b3:7b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:28:24 2026 by rpki-client