
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9ed936c2-b7e5-3997-82d7-cc1780db4fae.roa
File: 9ed936c2-b7e5-3997-82d7-cc1780db4fae.roa (raw, json)
Hash identifier: rItCnYoP3KShPF2YmnyZeqqRUXlRCFyeUPRymrA23gA=
Subject key identifier: 4E:59:C8:8B:CE:07:4B:58:D3:E9:26:C4:A9:A9:91:6A:6F:8A:EC:2E
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F49831C7CD1F78DC2091DFDC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9ed936c2-b7e5-3997-82d7-cc1780db4fae.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 70.41.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:83:1c:7c:d1:f7:8d:c2:09:1d:fd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=f05c4809-9fbd-4823-810d-80c88427f464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:05:bd:55:83:f1:f2:ec:86:71:d0:53:07:f1:
e9:ad:58:fe:d0:5b:8d:1f:43:a2:83:1b:14:66:98:
4a:65:28:02:39:d4:16:aa:5f:0b:8d:4f:c3:89:cc:
5d:81:92:9b:67:00:02:7e:97:4a:7e:b4:a0:86:d0:
ed:7e:be:f9:60:93:c4:15:55:61:a6:1e:92:92:4c:
7a:ab:93:95:f4:f4:11:eb:3b:21:74:d3:31:58:8a:
2f:6c:28:fe:29:0b:6d:7b:8a:71:7e:59:e3:bb:c6:
8b:06:bf:97:c4:7d:75:07:0a:ff:bc:8a:09:56:00:
17:35:98:de:0a:a2:c3:b9:e7:db:c0:db:5e:17:66:
22:9a:31:1b:e2:39:10:6d:be:f2:e7:fb:00:fc:ca:
28:36:01:af:74:f8:74:e2:59:c5:fc:cb:91:04:3e:
1b:4e:d5:14:ca:e7:11:92:4f:e1:d1:36:a7:0d:90:
e1:ea:b1:cf:cd:ce:ab:c8:aa:80:f8:16:09:04:81:
36:ab:9e:79:e8:2b:54:08:fa:5f:de:94:55:93:9b:
3f:3e:5f:44:3e:d7:58:ae:68:6b:59:9b:17:1c:4d:
c3:d7:dc:0b:3b:09:ee:ec:47:dd:ca:e1:41:0e:b5:
7d:59:e1:49:be:6f:08:63:2d:37:8a:7a:b9:80:0d:
68:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:59:C8:8B:CE:07:4B:58:D3:E9:26:C4:A9:A9:91:6A:6F:8A:EC:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9ed936c2-b7e5-3997-82d7-cc1780db4fae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.197.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:71:4b:33:a0:f0:00:10:b5:c2:31:23:9d:39:3a:d2:c7:ab:
1a:ed:11:e7:c0:af:67:43:42:9f:f0:e6:e7:73:b0:cb:5c:8f:
49:7f:4b:60:23:67:5b:6c:83:b5:90:5d:01:83:01:7a:dc:e5:
83:14:21:98:8e:31:ac:af:e3:d4:92:ae:c8:4a:0d:16:77:45:
23:19:94:40:14:66:62:b0:d0:5b:37:11:b8:f1:90:5c:ad:b2:
89:27:52:ab:e4:7c:50:96:21:ab:c5:4a:57:fe:bf:fc:a9:21:
cd:92:a6:80:33:f7:6e:43:2d:7d:9f:d2:83:28:c1:97:4d:5f:
7c:3c:76:4f:c2:52:21:ec:42:14:83:b5:ce:f4:40:9e:a0:c5:
0c:d6:e7:e3:e8:d4:1a:41:e2:5b:0a:53:5e:7f:fa:f9:d2:ce:
73:dc:f2:2a:6d:d9:5b:b6:f1:c4:7a:e4:ce:12:c6:41:63:7d:
ec:f1:f4:1e:d1:e1:ff:41:55:d0:41:1e:4c:a8:c3:c6:72:f5:
bf:03:99:5b:0b:30:0f:e7:3e:ae:14:a6:6d:76:79:8f:d2:7e:
73:af:21:b5:04:b3:6a:cb:ce:90:05:8c:32:71:92:b4:18:75:
cc:64:1a:7c:52:73:8b:f8:5f:b0:0e:8a:fd:61:1d:d3:86:d7:
65:1b:24:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:32:23 2026 by rpki-client