
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/97147efe-b5e0-3c1f-8ad2-63b353eaf614.roa
File: 97147efe-b5e0-3c1f-8ad2-63b353eaf614.roa (raw, json)
Hash identifier: CnQQH+GWdtEmMTNAzoVj6+GmOMUYL6Ww3EkdcpGsYOM=
Subject key identifier: 18:D0:CC:3B:18:35:B9:87:83:CD:D4:40:E2:2C:E6:B2:64:79:3B:AA
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F497B01F52E467E622F3D80A0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/97147efe-b5e0-3c1f-8ad2-63b353eaf614.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 72.173.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 04 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7b:01:f5:2e:46:7e:62:2f:3d:80:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=997c318d-4697-425d-be64-b8c8d9ec4946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:12:d4:f0:b2:6d:96:4b:6f:d7:81:b1:d4:5f:
d9:98:a7:c2:71:e3:4b:b7:cd:5c:63:83:61:a8:19:
a1:41:87:35:45:98:d5:94:3b:73:36:a0:8b:38:aa:
34:eb:2c:ef:7f:8c:41:a1:b8:d1:83:49:42:14:81:
33:c0:f0:74:55:42:88:b5:50:15:40:af:a5:9d:d7:
65:e8:04:ef:22:cc:84:05:78:46:23:a8:b3:e7:69:
86:cd:74:3f:35:fd:16:15:1b:9c:60:2f:ff:e4:e3:
4a:7d:4a:8b:69:86:da:39:0d:de:d3:44:88:d6:63:
e1:85:c6:e7:df:da:8e:b6:40:02:b1:ab:b3:66:20:
ca:b8:8e:74:dd:20:94:8b:14:a8:f7:bd:cc:a4:2a:
b7:84:ed:25:36:d5:76:88:89:46:ab:38:15:db:2d:
00:37:cb:f1:79:a6:30:ac:4a:84:ac:e9:38:02:c6:
aa:61:36:fa:23:61:13:40:5f:70:9a:83:1f:df:a1:
59:a1:26:36:71:9a:34:a6:34:d5:e8:27:a5:7b:c4:
13:04:df:03:1b:14:2a:69:89:ee:c6:6d:da:61:86:
51:ab:3a:96:fb:27:87:2d:cf:28:e3:74:f0:c9:14:
ac:27:03:a4:37:40:4e:33:1b:a2:f8:8b:85:a6:e4:
44:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D0:CC:3B:18:35:B9:87:83:CD:D4:40:E2:2C:E6:B2:64:79:3B:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/97147efe-b5e0-3c1f-8ad2-63b353eaf614.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.50.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:30:14:7a:1f:cf:bd:b2:d0:3c:25:3e:ab:dc:9a:1f:60:22:
31:73:73:81:2e:41:ee:f3:25:20:81:3a:63:8d:8d:bd:0c:08:
b0:21:92:39:5b:e9:95:35:fb:e2:4c:08:e9:07:8d:3d:4c:45:
fc:fd:f0:79:4b:fe:12:30:39:84:cc:93:a5:c9:67:c7:88:db:
5f:10:c3:66:f3:e5:b1:26:b5:4b:26:75:25:85:1c:4e:08:a2:
f8:0a:4e:af:ec:4c:63:a9:ca:7e:4d:da:97:e9:03:d1:f4:4f:
88:0b:12:42:cc:48:3e:75:83:2c:68:25:fb:7d:85:78:dd:0f:
9c:f0:20:3d:1c:e2:66:ed:cb:df:c4:64:39:81:38:8d:8d:57:
32:98:6c:3b:b4:d0:a8:3a:a4:9b:40:e4:fd:1c:c6:87:89:ac:
b3:44:94:74:6c:e4:c4:30:36:8f:18:bf:46:e9:9a:bb:56:fd:
72:9b:49:0e:93:c4:97:63:fe:6f:be:2a:1e:94:52:16:86:ae:
78:a8:88:b2:61:73:13:ce:41:3b:1f:00:62:8e:92:41:eb:5a:
8b:28:67:98:c1:42:26:9f:43:8c:41:5f:81:7a:7a:ec:56:d0:
b4:60:85:04:8a:81:b0:d8:f9:61:03:98:e0:d6:86:f2:f3:4e:
07:ce:14:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 07:17:48 2026 by rpki-client