
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a1793bfa-8b7f-31f3-b395-342f69bdfb10.roa
File: a1793bfa-8b7f-31f3-b395-342f69bdfb10.roa (raw, json)
Hash identifier: Vl1kMgOKmNqCn0ucX+Brk8jbJDdy+PxZ5Gpa+WWaKS0=
Subject key identifier: 48:73:90:F0:2E:02:13:3B:2B:C3:77:DD:AA:F5:A7:B7:4E:14:86:BC
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F4983E6B32B646607DD0F7500
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a1793bfa-8b7f-31f3-b395-342f69bdfb10.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 172.243.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 09 Oct 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:83:e6:b3:2b:64:66:07:dd:0f:75:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=696da4a2-cd24-49c3-945f-4163b30cf308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fb:02:5c:2b:71:56:44:76:21:2b:7c:3c:ff:
78:2b:f1:bc:3b:69:0a:97:96:7e:20:f8:a2:75:dc:
ad:65:49:4c:83:ea:31:58:c5:cb:ee:ec:21:ca:dc:
20:37:5c:6b:31:bb:3f:d3:66:88:01:04:bc:e4:0f:
a5:8b:39:2e:48:4a:92:13:1b:32:2e:a4:97:46:e3:
b9:cd:b6:f5:94:1a:de:d2:73:96:33:a4:b0:c4:ae:
7a:37:f2:4f:ea:ea:6d:18:73:2c:b0:7d:ac:84:f4:
af:80:9e:9e:61:b5:1e:0e:af:ff:f6:73:70:88:a9:
6a:4b:76:67:ca:d2:a2:93:e7:41:ff:c5:cc:96:77:
5a:cb:0e:ff:ce:52:01:17:23:8a:25:0b:ac:e5:83:
56:a5:23:58:41:47:de:60:bf:6f:7a:96:59:77:67:
72:82:14:c3:97:93:3a:4b:d6:b6:23:f4:14:9e:c9:
d1:d9:c7:d3:23:c0:4a:94:75:de:c4:10:bd:19:1d:
ff:37:da:c6:b4:a8:8c:39:87:0c:47:47:af:0c:8a:
6f:b5:04:56:bd:c0:e3:4c:31:50:90:8e:34:db:88:
94:a0:b5:6d:95:0a:43:ae:84:0e:bd:7a:66:cf:91:
9c:73:c8:50:66:82:e1:2b:91:9b:5f:dc:02:67:53:
0f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:73:90:F0:2E:02:13:3B:2B:C3:77:DD:AA:F5:A7:B7:4E:14:86:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a1793bfa-8b7f-31f3-b395-342f69bdfb10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:2d:34:b7:a9:40:df:c6:38:41:81:ed:ac:11:32:3e:23:58:
bf:a9:e7:cb:10:76:01:8b:cb:bc:04:05:e4:90:42:bf:72:73:
12:d4:17:f0:45:fb:15:84:46:59:2f:ec:f8:e0:ce:f7:25:f3:
ee:af:a8:29:70:6d:f0:74:9d:f6:c2:59:41:4c:b8:a3:3e:d5:
ff:12:8d:1e:08:9f:80:9e:83:f2:6c:2c:0c:48:67:25:ee:de:
3d:3c:48:1d:bc:66:2e:3d:6b:38:96:19:96:96:99:18:31:85:
da:ef:6d:e1:a1:b4:20:ec:b0:1d:0e:94:a9:a3:8e:1a:77:b1:
ce:99:bb:05:c1:48:78:83:9b:b9:af:8e:7b:73:c5:2e:11:c1:
f3:1c:bf:37:14:ff:1d:e2:ae:85:28:b6:5c:1d:36:6b:c1:15:
dd:4e:6f:fe:fb:32:81:7f:24:af:0f:ed:29:b4:84:2b:77:38:
76:f4:4e:7b:92:c5:49:a7:82:b6:99:1d:35:05:3c:6d:f9:b6:
b1:e2:ac:3c:b6:77:c7:2f:e8:bb:e1:f9:84:34:ef:d4:54:34:
c8:d4:6f:bb:a5:f0:a1:23:b3:e3:83:9b:95:93:9c:32:7c:53:
7a:50:f0:d0:4f:b6:60:ba:ab:be:d2:5f:1c:8b:96:a8:e4:01:
d6:c8:59:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:24:33 2026 by rpki-client