
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b4961562-203e-30aa-815f-ed2248d93b7a.roa
File: b4961562-203e-30aa-815f-ed2248d93b7a.roa (raw, json)
Hash identifier: KAdpGlXXQQAZuQvlIGi8fulXdrZgrS0ATd9ph5cfAwo=
Subject key identifier: 38:EC:CC:70:3D:35:56:2E:31:0B:1D:19:36:B1:65:BF:D0:A1:77:2F
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F497BFDA8FA61482FB21F1080
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b4961562-203e-30aa-815f-ed2248d93b7a.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 198.45.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7b:fd:a8:fa:61:48:2f:b2:1f:10:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=7ea4ea59-6345-40d4-9924-dbe5f025f9b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9c:fa:1d:da:3e:f0:33:dd:8e:8b:31:c3:9f:
f2:69:59:1b:51:f2:68:f7:09:6a:9b:a0:25:5b:fe:
7f:87:31:fd:96:f2:a7:7a:6c:4e:fa:f7:2c:8f:4e:
bf:82:e0:6a:00:20:7b:bd:d9:ea:4c:1d:f4:eb:37:
11:db:9e:5f:da:bf:70:b4:80:2d:47:57:83:6f:2b:
ac:cf:3d:e5:03:9f:fa:02:64:ab:e5:85:5f:ae:70:
b8:91:03:ae:98:23:64:5a:6b:c6:34:dc:32:85:a8:
b0:83:b2:8b:d8:88:7e:ab:04:a3:92:27:71:6a:aa:
f2:a7:6a:bc:be:84:ac:a4:2c:25:ae:dd:19:ed:cf:
d4:21:de:58:36:c7:8a:8d:fb:42:43:b3:d0:10:52:
cc:1d:92:5c:25:c1:0a:05:ea:14:7f:23:3f:13:ec:
8d:04:be:1c:0d:c0:30:4f:c9:5f:64:f6:7d:f3:e7:
3a:3e:40:09:a6:29:c3:8e:ea:3e:fb:d9:bb:b4:27:
31:4b:d6:dc:87:3b:0b:e1:29:b0:e6:77:e4:c4:b5:
05:87:53:cd:b3:f0:90:dd:0d:09:74:07:24:b1:17:
b6:12:95:9e:de:85:8c:26:72:bb:96:5c:05:a9:c1:
77:6b:22:4c:a6:a2:bc:fc:c1:5d:de:64:0a:8c:ac:
03:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EC:CC:70:3D:35:56:2E:31:0B:1D:19:36:B1:65:BF:D0:A1:77:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b4961562-203e-30aa-815f-ed2248d93b7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
198.45.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:ab:c9:4b:f7:ee:7a:df:2a:09:0a:34:2f:0a:dd:fc:1c:3e:
18:f3:e3:c9:f0:ac:b0:b6:d6:02:4f:90:57:a7:a4:b3:e2:fe:
e0:a0:d1:97:ca:c8:f2:16:15:8a:a4:f3:30:c6:c6:96:e3:ce:
c0:4a:ac:6e:80:d9:55:7d:71:43:7c:53:3a:88:85:44:db:ae:
48:75:46:bf:0f:64:e5:d1:c5:b2:c7:cc:f5:5e:65:0c:2a:a8:
88:4d:27:de:03:d9:57:8f:d4:6f:08:eb:3b:b8:bf:84:ef:0e:
f4:ed:a1:e2:a4:97:7c:1d:26:b9:86:1a:6f:6e:87:c3:b2:13:
1a:81:5a:dc:80:36:91:56:08:82:e0:a1:90:8c:95:db:b4:e0:
96:81:0b:c5:9b:bf:80:26:51:a0:72:fc:47:3b:b6:0e:a8:88:
d7:e4:7d:4c:ff:c6:37:45:0f:4f:d1:5a:08:28:41:f9:90:4c:
b6:6e:4b:92:9e:24:b6:83:06:bc:ca:27:86:7e:cc:c2:a2:8a:
7c:f6:a0:8d:e1:9e:a6:f2:a4:dc:ca:f0:09:4f:c7:65:31:5e:
6b:79:a1:3f:f8:d4:1f:2a:ce:f5:4e:32:66:a0:74:5e:58:79:
72:a5:fd:9d:fb:e6:e3:e6:53:e3:21:65:76:be:56:58:e8:94:
43:62:c3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:51:45 2026 by rpki-client