
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b7026045-355c-3b15-b234-7758e3a7ea9c.roa
File: b7026045-355c-3b15-b234-7758e3a7ea9c.roa (raw, json)
Hash identifier: /BNhGZppDzYAKqhOJ7+tuRG7g9rsiSgaI4aQmpzkFio=
Subject key identifier: 9B:5C:45:62:23:B4:66:95:A2:91:38:66:70:33:82:9F:11:51:2D:AA
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F49830B342E9CA9BBECECB940
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b7026045-355c-3b15-b234-7758e3a7ea9c.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 67.54.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:83:0b:34:2e:9c:a9:bb:ec:ec:b9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=6892811a-f662-4026-a02c-339661399530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b3:ea:db:0b:dc:34:80:f5:97:fc:68:1c:86:
6a:9b:df:17:f1:c8:0e:7e:07:0f:3b:aa:66:c9:49:
ce:12:75:b4:38:ea:16:9b:a7:6f:73:ff:50:ed:04:
ac:eb:92:90:e1:6a:d3:60:30:20:3f:bb:de:eb:77:
30:09:a6:91:89:f4:e2:c6:f1:7c:47:0f:6a:28:56:
bb:ed:72:1d:f5:ac:97:c6:a9:e3:1e:a9:10:44:ca:
cd:2b:44:7e:e5:a0:c2:41:84:43:de:e0:56:fb:91:
ec:c7:7a:bb:4e:80:57:75:a1:7a:bf:39:3d:5f:f2:
44:1d:34:b7:64:76:ab:50:fd:cf:8a:40:a6:0d:c7:
7b:26:ae:48:88:ee:11:23:16:de:84:a3:54:4e:a5:
af:03:fd:14:10:70:31:97:b9:27:90:a7:e2:b3:8d:
1e:e5:2a:cc:80:8d:e7:70:b0:36:0e:ff:71:97:9e:
da:e1:42:72:c5:48:2e:ed:b3:92:77:ac:b6:65:95:
ae:05:23:cc:fe:e1:f6:5e:21:5c:d6:15:22:37:c0:
ef:db:3d:f6:67:d7:a3:32:e8:1b:85:d9:2f:08:67:
56:b3:75:f1:fb:e9:90:23:41:44:fb:94:ec:34:c2:
2d:af:5f:b6:ff:ba:37:14:65:3f:aa:46:3d:4d:4f:
c1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5C:45:62:23:B4:66:95:A2:91:38:66:70:33:82:9F:11:51:2D:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b7026045-355c-3b15-b234-7758e3a7ea9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
67.54.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:06:83:ea:02:de:09:29:a5:7e:a3:f9:b3:37:d1:7a:f0:3f:
86:3c:42:de:23:5a:f0:68:b7:83:83:c8:4d:84:79:9c:45:3b:
6a:d4:50:c6:60:b0:05:63:92:55:ba:95:44:c4:6e:34:fa:d2:
35:6a:60:ac:6a:61:9b:e6:b0:b9:d0:d3:b2:a0:b5:f5:a3:d6:
1c:e9:6a:d6:40:b6:57:94:20:af:b2:4c:a5:de:a2:21:46:5f:
ea:f2:3d:08:91:34:02:98:1e:3d:5b:ff:31:83:76:00:af:77:
3b:d2:5c:48:53:d1:9d:fb:65:17:6f:60:a3:9e:d6:f5:a3:57:
7e:6c:f5:ff:37:f9:41:03:19:e8:e1:17:a0:f5:2a:67:26:c0:
43:25:36:95:0b:b8:85:b6:b5:98:c2:e4:ed:80:63:bd:2e:21:
68:9a:33:ae:0e:be:68:83:8e:72:db:f6:6c:4d:48:02:f3:18:
1e:af:4f:c5:8a:58:43:a8:a9:f5:cc:65:5d:2c:88:62:d0:c5:
a1:b4:c8:4e:2d:26:e5:24:85:21:d1:00:fc:cb:51:28:68:23:
45:82:4b:a6:32:4f:2b:b1:5e:d3:48:22:52:5b:81:ad:d5:96:
d3:3c:d5:5d:07:7d:43:34:5b:d3:5f:ea:49:db:b5:8f:58:ed:
ee:c0:e2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:11:50 2026 by rpki-client