
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/928f7196-ca89-37a0-bc57-2ed202593726.roa
File: 928f7196-ca89-37a0-bc57-2ed202593726.roa (raw, json)
Hash identifier: 6qNDH7oEcQp6slAYNlZXnoQp3w6LsD1ZFbrFtsN51ls=
Subject key identifier: 56:B9:6B:F9:09:25:41:62:67:EF:99:01:C0:D4:39:4C:82:05:8D:50
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F4983C9D53E1574B1866EBA00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/928f7196-ca89-37a0-bc57-2ed202593726.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 162.72.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:83:c9:d5:3e:15:74:b1:86:6e:ba:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=e36ee971-8868-4cf5-acb4-36aee8e037e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e7:45:91:b9:8b:6a:dc:d9:25:64:f6:02:ba:
1d:45:ef:db:3c:eb:67:e7:46:1a:4b:05:e0:bf:32:
82:2b:14:04:4f:e5:64:e4:12:fc:ce:92:a4:87:89:
e5:1c:69:05:6a:e2:1b:97:4c:76:71:aa:07:cb:f1:
58:01:0f:4b:c5:9d:15:80:90:ba:8f:30:cd:ae:6e:
d4:01:0d:c4:4d:57:23:70:f4:ef:82:85:94:f5:d0:
33:2e:d6:70:d9:34:76:91:db:33:5e:6b:40:1b:c4:
67:d4:de:a0:90:57:72:e3:af:ac:4d:3b:5b:30:c3:
ef:59:82:9a:26:b9:f0:ac:a8:f8:c7:5b:3f:fd:62:
d2:2a:d4:6e:a8:33:21:fd:82:be:09:e0:68:84:4a:
d1:d0:52:55:3b:a2:5e:4d:fe:79:6b:cc:08:dd:37:
bf:6b:da:0d:12:48:47:b5:41:cc:59:77:71:63:8e:
8a:4d:4e:94:22:3a:a3:9f:e7:38:38:76:bd:1c:8a:
f7:38:73:31:cd:97:09:30:a9:cf:3b:f9:9b:f5:42:
de:b7:89:eb:83:fb:3f:cb:99:a7:ca:2a:e1:15:6c:
da:23:23:f3:37:2b:6c:10:c4:64:d5:08:2d:f3:30:
27:c7:1a:f6:67:3c:27:c0:2c:66:38:2e:fc:da:33:
08:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B9:6B:F9:09:25:41:62:67:EF:99:01:C0:D4:39:4C:82:05:8D:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/928f7196-ca89-37a0-bc57-2ed202593726.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
162.72.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:34:8a:19:16:bf:57:ac:08:5c:04:df:e4:43:ef:3d:fc:3c:
89:7e:93:55:60:e4:3b:4e:3f:98:dd:f7:62:4a:3a:01:69:80:
6e:7a:fd:d2:b7:d8:af:59:60:94:55:b9:a4:8d:20:24:8f:10:
14:f5:dc:d4:62:5b:90:90:8e:f9:14:7b:ee:51:c5:fc:ca:fb:
81:27:b5:1b:a0:8a:45:df:48:39:0d:84:7c:ff:42:d3:9e:35:
fb:da:e8:b5:04:a7:5f:a8:b9:75:09:0a:a8:c8:da:a7:5c:ca:
26:29:02:8d:72:49:48:03:32:10:93:73:ee:f3:ff:c8:08:80:
a8:ca:42:6b:bf:fe:a0:a8:e8:6f:7a:01:89:ee:16:3d:d0:86:
8c:48:60:a3:22:26:c2:3e:56:72:cf:e3:f4:55:f0:fc:9b:ca:
1a:ed:fc:48:b1:f5:b5:65:cd:27:dc:be:16:78:15:37:6a:3f:
1b:47:80:0e:30:b7:78:06:3c:b7:9c:f1:c7:a5:87:60:19:04:
41:af:70:43:2d:f9:13:2c:c0:20:0b:7e:9d:64:53:64:7b:de:
c7:9c:18:d4:c2:3d:fa:7b:45:55:3a:c5:42:2c:9d:e9:00:5a:
7d:5c:84:f2:cc:f5:ba:7a:52:f1:7b:f8:22:09:6b:e8:de:3f:
ea:9c:c7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:56:59 2026 by rpki-client