
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b40d2e91-e660-3809-ab75-490067b1aa5a.roa
File: b40d2e91-e660-3809-ab75-490067b1aa5a.roa (raw, json)
Hash identifier: D3okV05HdlrI7rbLmSQ0G6P1zUSLolDCmVXv39cFXQs=
Subject key identifier: 0D:85:53:5A:50:D0:82:39:DC:0F:15:20:56:40:E9:98:B9:96:7A:D9
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F4983B72F7DD39BFFECC38B00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b40d2e91-e660-3809-ab75-490067b1aa5a.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 162.72.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:83:b7:2f:7d:d3:9b:ff:ec:c3:8b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=279b6fac-9bcf-45e2-8274-3ed2aaae9e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:35:67:9b:6e:f5:16:c0:d1:ce:5e:d3:24:33:
24:31:2a:e0:2f:86:45:11:02:2b:3b:fd:46:4a:d9:
50:c2:8d:1f:dd:7c:30:9f:45:55:b7:58:e9:37:bb:
f3:d1:97:e6:5b:2f:81:ea:fa:33:0c:b4:46:b0:06:
b3:f9:b5:9e:96:1d:35:9e:58:cb:a0:e8:f1:f7:2b:
43:f9:3a:0c:83:14:fd:22:a2:ae:71:aa:7a:80:d6:
92:7f:91:3d:ec:c2:32:8d:c9:39:d6:02:8b:32:fc:
49:5b:7a:4e:b9:fa:69:e7:05:b1:61:d7:32:d2:31:
cd:f9:cd:65:1b:c3:2a:58:28:f5:36:1c:db:65:66:
c2:68:72:59:df:df:27:33:15:69:0f:39:94:4c:71:
95:09:a7:a2:69:15:f1:82:70:7b:84:fe:88:9b:9a:
84:9e:cd:7f:b3:b3:da:f7:86:12:50:e4:ac:e5:32:
eb:bf:4d:d3:e2:9e:f6:75:89:33:e1:f0:52:c0:0c:
6d:eb:35:99:2e:5d:b9:0e:f6:db:88:6c:be:dd:34:
ad:fd:f1:3d:80:68:d1:0d:75:52:7c:b9:4a:f8:a1:
b5:e6:de:c2:3a:a7:84:8d:e4:c5:12:a6:08:aa:fc:
7b:2e:19:da:1d:f8:f1:61:71:d6:82:18:bd:8f:af:
6d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:85:53:5A:50:D0:82:39:DC:0F:15:20:56:40:E9:98:B9:96:7A:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b40d2e91-e660-3809-ab75-490067b1aa5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
162.72.39.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:9c:d5:38:a5:30:05:98:89:7d:67:a3:b3:e8:04:be:ff:09:
b2:99:6a:99:94:6c:82:f9:72:79:c3:08:30:8f:f1:0e:9d:82:
e2:5b:18:86:78:b6:91:99:89:7b:9c:80:e5:c3:af:16:64:3a:
72:d8:42:08:e8:d6:fe:a9:1d:48:6f:4b:01:5c:78:7f:40:ed:
a5:c4:11:1e:da:6e:a3:4e:20:69:85:5e:9a:1d:69:23:c2:9b:
8a:00:b7:83:58:21:9c:ba:74:78:ad:be:13:65:bc:f1:fe:f7:
47:46:3d:6d:42:c6:28:34:14:b3:7d:48:5a:0b:ce:38:ec:4b:
35:a4:a6:78:c9:66:a7:bc:21:52:fc:84:c8:b6:8a:13:0d:8d:
06:44:31:a4:90:7b:de:2a:05:12:92:7d:ee:5b:26:7b:6c:14:
bf:75:c0:88:d0:64:95:1d:ec:cb:cb:6d:9f:e4:45:f8:75:1b:
52:d9:cb:5b:d6:1f:e5:a2:c9:fa:3f:3f:ea:75:b9:85:d7:c1:
62:81:07:3a:a7:bb:b1:64:18:13:53:3c:0c:b6:5a:8c:85:bd:
c8:7b:69:ad:ff:cc:8d:05:00:8c:1e:2c:4f:4f:e2:19:f1:c5:
e9:94:e0:68:78:24:ef:af:4c:41:9b:17:c4:45:f4:ec:1b:d1:
61:02:4d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:13:49 2026 by rpki-client