
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be97825c-6d11-3dc5-9ad3-3d0a473e596b.roa
File: be97825c-6d11-3dc5-9ad3-3d0a473e596b.roa (raw, json)
Hash identifier: h8FL+qQpJ2A+OdG3crm+Y/6yAwHORsBfW51m1e9Xxdg=
Subject key identifier: FF:56:72:A4:4D:E7:5C:C5:E8:99:28:0D:82:32:04:D5:EF:56:19:A5
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F4982F8FA5A004B1A44990180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be97825c-6d11-3dc5-9ad3-3d0a473e596b.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 16491
IP address blocks: 75.104.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:82:f8:fa:5a:00:4b:1a:44:99:01:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=1996bc2e-1b99-4aad-9037-d88410d39d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ad:cc:d2:f2:4a:94:c8:af:d4:bb:40:37:55:
8c:50:59:f2:a9:52:c7:43:fd:b9:18:a6:53:1c:02:
f0:e0:79:72:9c:ef:05:32:4f:44:62:00:34:32:75:
64:88:d1:22:8c:ac:43:4d:31:73:ad:4c:be:c0:19:
de:99:ce:2f:a8:55:79:cf:1b:22:1a:28:3d:dd:c5:
e0:2c:e0:d6:a3:82:66:60:54:18:42:03:bb:b1:0a:
98:36:ac:6b:bf:24:47:cf:f5:41:84:80:cf:63:cf:
7a:0d:11:21:d3:c7:71:7a:5e:bc:0e:45:9b:ea:f4:
71:e6:58:16:40:0f:c3:28:bd:0a:0c:30:7c:4e:ae:
6c:55:bb:50:d9:97:48:b7:05:8f:af:c9:7f:9a:1d:
b2:34:76:17:ff:d7:c1:2a:dd:50:b8:2d:bd:95:fd:
2d:22:1a:81:36:ff:9f:62:3b:35:8c:51:41:62:ce:
3a:b2:d2:6a:1e:b6:8d:88:77:26:c2:31:dd:e0:70:
03:e5:9d:d6:fa:dc:6a:4f:e5:c9:c7:86:d6:98:ba:
37:4c:2e:68:f9:cf:cc:d1:62:15:94:46:3f:dd:c5:
bf:a4:7a:33:f5:b1:11:5b:d7:d2:55:de:98:7e:d6:
07:1c:3f:6a:92:0b:f0:6b:3e:bd:fa:27:5d:d5:8e:
e2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:56:72:A4:4D:E7:5C:C5:E8:99:28:0D:82:32:04:D5:EF:56:19:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be97825c-6d11-3dc5-9ad3-3d0a473e596b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
75.104.19.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:8b:63:6a:60:e8:ae:c3:9e:ba:87:83:f5:b9:03:78:f9:f8:
8c:17:41:68:87:bc:0b:c1:5c:50:04:d2:0b:f2:d4:ff:6e:94:
1e:18:5e:44:7c:29:bf:36:19:28:ab:63:2b:0b:a3:bd:90:b3:
fb:cc:1d:fd:d9:ad:20:7d:58:f0:dd:a7:1c:38:49:bb:07:c1:
23:dd:10:76:e3:39:c8:48:b9:2b:61:10:d0:d4:93:58:d0:56:
b8:9b:56:30:39:27:5b:41:69:6b:b0:1f:c9:87:31:ec:34:e3:
1b:b6:3f:c3:40:d8:db:ac:bc:00:90:be:31:be:a0:fe:8d:16:
17:d4:0c:04:6c:c7:33:de:6c:f8:1f:1e:56:fc:4a:d6:bf:19:
f7:6b:33:7e:67:a5:c0:e8:23:0e:a3:b5:aa:b4:3c:af:27:dc:
d6:b0:89:09:85:99:8a:17:5f:df:e4:32:7f:0f:d6:46:90:53:
37:58:3a:9b:f0:4b:13:37:5d:69:27:4d:0e:67:02:b3:ff:17:
0d:18:c0:98:20:45:74:22:9f:01:0a:27:43:e9:58:90:0f:f2:
d2:b0:64:9b:f5:cc:e3:0e:49:e7:f7:e0:3b:5d:6b:29:2a:8b:
e1:84:b9:bf:28:2a:3c:c2:2b:50:fb:1b:d9:cc:21:10:55:ee:
d0:d7:8e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:57:16 2026 by rpki-client