
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8a1eace2-7ad4-3d2e-ac28-40c51e492288.roa
File: 8a1eace2-7ad4-3d2e-ac28-40c51e492288.roa (raw, json)
Hash identifier: hlMt5Xmf2oyTwnplhYLzq2wSSnIKasLdkXStE+/MwPU=
Subject key identifier: 5C:2A:36:63:60:49:01:AB:90:BA:E5:BB:51:AA:91:5F:CE:41:60:38
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F498317C2DFE8786E3034F080
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8a1eace2-7ad4-3d2e-ac28-40c51e492288.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 70.41.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:83:17:c2:df:e8:78:6e:30:34:f0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=56660a94-9b4b-44c0-bf6c-43bd306b0775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c5:8c:db:03:15:4e:4b:26:40:4d:5b:75:f2:
16:be:4b:d2:79:ce:6e:3f:55:17:b8:92:94:a0:92:
2f:36:09:8c:fc:93:eb:12:c4:ba:57:60:67:04:cf:
7d:7c:a8:db:80:54:be:35:62:21:5d:9c:32:cf:d4:
8d:03:33:fc:5d:11:b3:f8:2c:73:ca:0e:ec:6b:48:
4b:85:50:11:3c:7d:36:e3:4a:7a:a4:30:7f:6c:7b:
ea:79:82:78:d8:1a:10:12:aa:a2:e7:bc:f9:3f:d4:
9d:ff:81:a1:7f:9f:a6:5c:a5:b1:9f:64:6f:12:e9:
84:a4:20:16:3f:73:c4:c1:e3:65:c2:f8:03:46:08:
be:00:dd:3b:82:a7:5d:82:c2:6c:c3:d3:41:1b:82:
d0:43:2b:c0:21:a0:6d:4a:72:d3:a0:02:f4:be:4c:
5b:c1:19:f8:18:0f:26:3c:8f:1a:a7:9e:96:76:c8:
4f:59:50:af:70:84:6e:36:c7:71:6d:25:fb:52:ce:
dc:e7:2c:a6:89:05:c9:fc:17:cf:5c:a6:95:31:c6:
be:58:a5:83:c7:04:4d:f6:e8:06:d7:5e:25:86:3d:
85:ad:70:fc:24:87:14:da:39:8b:a2:6d:93:c7:2a:
a6:39:a6:31:e9:72:6a:eb:ba:b0:ab:cc:62:e6:30:
b8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:2A:36:63:60:49:01:AB:90:BA:E5:BB:51:AA:91:5F:CE:41:60:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8a1eace2-7ad4-3d2e-ac28-40c51e492288.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:1b:e0:cc:ec:4f:6f:3d:31:2f:0a:46:c8:34:b5:8f:5d:06:
94:18:c2:4e:61:ca:6a:fa:33:19:e6:3d:66:16:57:77:18:19:
fa:95:ea:72:2d:a8:ed:c6:80:3a:8a:43:1d:31:9e:21:05:51:
cd:34:0f:55:7b:9c:48:f7:ca:3b:9e:d6:dd:49:9e:30:98:5f:
24:d0:70:92:60:2c:25:36:a9:fa:5c:9f:c1:3e:e3:9f:9e:e3:
ed:96:d5:af:a3:6e:06:1d:86:53:c7:3a:83:ed:eb:67:ea:65:
04:43:29:dc:ac:25:ab:62:2c:04:91:07:a4:20:49:1d:bd:61:
ef:8f:e3:d5:4f:18:d1:c0:3b:a3:ea:a6:d9:17:84:ca:4d:90:
a6:01:91:bf:1a:3c:c7:4c:14:73:fe:e9:f1:c3:5e:f2:bb:3a:
cf:7d:27:f9:e8:11:e4:a2:8d:90:ac:f1:2a:c9:d9:d7:7a:31:
25:e7:ea:06:92:6d:92:e7:2d:35:a2:bc:c3:af:1c:8a:ba:02:
1e:0e:99:0a:a3:56:54:c3:c5:64:fc:f7:5d:f0:aa:c6:92:dd:
45:38:f1:ba:4f:37:9f:16:e6:0e:93:62:25:0f:0f:4c:6d:bd:
36:a5:8b:c7:af:55:a3:e0:69:56:5f:86:0b:a5:14:89:ec:f3:
76:0f:ab:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:43:31 2026 by rpki-client