
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a406a8ab-8aed-3d6b-8e0e-9bb029169708.roa
File: a406a8ab-8aed-3d6b-8e0e-9bb029169708.roa (raw, json)
Hash identifier: KDqKCtBM5iZ9IIyEE6MQskpmboviou3qZEKPOdMRIiA=
Subject key identifier: 12:8A:E9:15:31:39:D3:29:C1:91:9C:05:B1:43:07:D6:40:58:CD:DF
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F497B948A00C4DA44FD38AF00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a406a8ab-8aed-3d6b-8e0e-9bb029169708.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 172.242.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7b:94:8a:00:c4:da:44:fd:38:af:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=72b1c631-5c78-4c5f-8ca2-5dfb1b779c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f6:1c:44:54:ac:8b:cb:bd:20:3c:b3:da:36:
69:00:d8:14:52:e5:30:9d:48:c2:c1:a1:1f:9e:ec:
3e:bc:c0:6c:23:4d:25:0e:04:7e:cd:27:11:63:12:
6b:ce:17:62:3d:4a:26:2f:47:a1:9b:72:6f:d8:b6:
15:fd:1c:33:f2:f8:f8:22:74:68:dc:04:8d:0e:5b:
a4:e8:de:81:f5:53:83:fb:4f:31:ef:57:21:39:cf:
f7:1b:e5:1a:e5:37:a5:16:71:4a:1d:80:8c:1d:a8:
81:37:4e:af:7d:92:8f:4e:d9:a3:fb:3f:0b:6b:3e:
35:29:25:4c:6e:02:e0:07:1d:50:bb:1a:61:b9:0c:
9a:2f:40:51:af:1b:89:dc:bc:7d:92:95:b9:c9:6b:
9f:dc:69:64:c6:8a:cc:65:61:e0:33:b6:e0:e2:53:
23:36:b2:68:af:03:67:12:95:e4:22:ae:49:de:3b:
2d:60:fc:3b:67:94:65:49:67:5f:6a:e2:d7:65:2f:
f6:0b:66:25:12:59:81:34:1e:70:50:a3:2c:f6:a3:
9f:de:8b:ea:be:5a:ec:52:cd:b5:1d:67:2f:cb:a5:
ee:2f:9a:91:c6:38:83:04:ba:6a:2e:b5:2b:39:a5:
c5:69:aa:37:f6:ee:d7:c0:8e:c5:32:f3:70:3f:ef:
d8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8A:E9:15:31:39:D3:29:C1:91:9C:05:B1:43:07:D6:40:58:CD:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a406a8ab-8aed-3d6b-8e0e-9bb029169708.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:47:4a:49:0d:be:5f:76:ee:c9:4b:0a:01:b3:16:da:20:70:
80:b1:70:f5:1a:a7:2e:2d:6f:76:3e:66:29:86:eb:d1:3f:b8:
fe:e0:d9:73:4f:96:d4:2f:39:1e:f6:84:dd:bd:eb:00:9b:4e:
04:db:96:c2:fd:ad:48:bf:75:df:39:07:06:73:0e:98:1e:f0:
64:31:a2:68:61:e4:e0:c0:20:ca:36:fa:ac:38:83:3e:8e:0c:
3a:02:fc:a6:70:6d:95:e3:27:f6:49:c1:8d:76:0a:f8:f3:8b:
a3:98:f5:9d:89:72:d1:68:75:5c:44:05:80:20:cd:cd:f1:d8:
a4:ab:53:a9:82:92:72:eb:7b:3d:08:b5:7a:ea:1c:1b:75:2b:
ac:db:e5:1d:06:40:1b:85:d1:1f:3d:51:0f:e4:27:a9:96:cb:
70:82:26:85:df:19:f6:f7:db:f4:d2:1d:01:e3:e8:63:51:20:
a7:26:71:ea:f2:1f:2f:61:66:0c:75:ed:4e:f6:c7:33:6c:ee:
ed:74:50:da:94:44:ce:dd:94:f2:71:40:9d:d3:ef:c3:63:52:
08:4d:b0:86:21:07:74:c7:b9:2b:12:7e:41:48:57:ca:50:3e:
81:34:e4:70:04:50:60:3e:b7:3f:0a:98:45:95:9f:6e:8d:e3:
59:14:d9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:57:53 2026 by rpki-client