
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9e2a83e8-7988-39f2-8252-d37663c3e42f.roa
File: 9e2a83e8-7988-39f2-8252-d37663c3e42f.roa (raw, json)
Hash identifier: bFOKkQ/WldtHsIcrUAsdP8sxO06wTSAcJb2retHl9gE=
Subject key identifier: C8:A7:8B:05:B4:A8:17:63:92:9E:42:B1:0E:DA:98:DB:8F:1F:95:A1
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F497BA2D40F5B43222F9633C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9e2a83e8-7988-39f2-8252-d37663c3e42f.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 172.243.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 03 Oct 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7b:a2:d4:0f:5b:43:22:2f:96:33:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=b6e19c87-9472-4271-ab39-2f1b397aa63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f1:12:38:95:7d:d2:54:8c:87:22:88:eb:3d:
6b:da:a6:93:2e:6c:57:fd:59:70:bf:7a:33:46:de:
b5:a8:3f:41:ca:8c:4e:53:6b:09:f2:0c:36:61:15:
3a:c1:00:de:a9:2d:af:77:67:cc:e8:5a:b8:5f:08:
20:a2:35:ef:d0:b8:b4:50:52:2e:35:24:59:98:d8:
f0:3a:60:af:eb:39:77:72:2b:02:e6:10:4d:1a:9d:
44:ac:a3:c3:cc:a0:6e:c7:82:41:ae:1e:6f:3c:12:
6c:c7:84:17:92:fa:a3:ec:6f:b3:7e:f8:eb:53:f1:
f8:47:4d:24:2c:49:ec:3c:0f:af:40:cf:1a:d0:ae:
e1:36:8a:3f:e2:22:39:73:83:0a:02:34:d4:67:df:
b0:5e:f4:43:dd:35:47:cf:23:1a:66:07:79:13:d8:
24:82:19:e2:fa:20:6a:5c:6d:4c:4d:fa:54:0f:51:
59:2e:73:36:35:d9:45:55:37:ba:3b:83:6e:ec:93:
a7:dd:ea:8e:04:c4:a4:73:41:c5:3b:e7:2d:59:03:
63:1a:2b:29:03:1a:65:8d:0f:2f:63:d8:fd:a1:5d:
e5:aa:6a:b1:e4:2d:fe:89:54:e0:6f:1d:9b:c7:71:
b4:9b:0b:73:ef:40:34:a9:c7:86:15:d9:3e:b8:73:
33:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A7:8B:05:B4:A8:17:63:92:9E:42:B1:0E:DA:98:DB:8F:1F:95:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9e2a83e8-7988-39f2-8252-d37663c3e42f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.113.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:b6:bd:c4:82:83:ce:4f:d3:7a:d0:2d:06:b1:de:16:ff:f1:
c7:24:5d:9b:a4:f0:41:0c:36:ef:cb:30:b7:a6:23:e7:36:89:
32:8d:09:eb:4f:39:fb:22:f6:4a:7c:bd:c2:95:cc:8a:a0:8d:
12:49:51:1b:a3:5d:d2:8e:cd:9a:e5:64:15:91:5e:01:07:60:
3b:81:41:b7:6a:a5:7e:76:f8:81:56:4e:45:e5:b3:46:2a:bb:
8b:e8:d8:6b:65:03:d7:d6:1b:19:60:4f:94:fb:92:c8:e2:5d:
50:e9:b5:25:09:17:d0:21:73:8c:78:ca:30:0f:67:db:0b:7f:
58:81:92:6f:2a:91:6d:b1:f4:18:12:b9:e1:ca:53:83:90:e7:
3c:ce:ac:8f:41:f7:b4:f8:a5:c4:b4:fa:70:bd:55:5d:3a:9a:
0f:99:2d:47:85:92:13:ae:57:c2:90:78:50:af:a0:1c:31:3a:
fb:99:b5:97:ae:de:e2:6e:30:a3:c7:2a:43:79:42:5d:fb:8d:
85:f9:85:e8:6c:b2:a3:e5:94:cf:25:b5:a8:af:84:8b:cf:27:
d8:db:72:2c:b0:d2:11:c3:0c:b6:e1:5d:bf:d4:4a:13:72:34:
42:6b:a0:82:e2:3f:c9:3f:d6:bb:8a:0e:d1:e8:f9:72:7d:6a:
bf:29:f8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 21:04:23 2026 by rpki-client