
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c6053582-ce66-3bec-8a0c-1f7b92837dec.roa
File: c6053582-ce66-3bec-8a0c-1f7b92837dec.roa (raw, json)
Hash identifier: /iEn0R4zdrmWF5UT9ys539/MPxPSs17z2EKG9E9gzd0=
Subject key identifier: 7C:48:C3:1C:B8:F0:11:60:D4:8C:F2:3D:CF:F0:7E:7B:6B:DA:4F:C2
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F497B8F61704F04693AB47F80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c6053582-ce66-3bec-8a0c-1f7b92837dec.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 172.242.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 07 Oct 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7b:8f:61:70:4f:04:69:3a:b4:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=b0c0a0ca-ad05-4470-9962-b37e179b4d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d8:bc:62:77:c5:13:9e:51:78:f4:24:41:e7:
7d:23:a7:3a:50:c2:ce:a3:ea:04:46:34:23:7a:ba:
b2:43:c7:9a:9e:e8:3a:e1:22:90:2d:d6:e6:69:dd:
c2:7c:84:87:c3:92:db:ba:a1:3e:b3:a2:10:cd:e7:
6a:51:55:7a:10:19:3a:1f:ea:bb:58:d6:66:5a:89:
9c:cf:db:0d:0c:98:66:52:04:56:c0:53:45:7c:b2:
a6:ab:45:db:89:27:b4:f0:f7:2d:2e:26:ae:c6:ba:
70:52:e9:d8:b2:9a:76:81:9d:4d:8c:45:1d:18:76:
f3:e3:02:6f:63:ea:ee:1f:8c:32:f2:06:cb:29:90:
8b:6a:a7:8b:ba:1f:ef:7a:4b:22:10:34:33:3b:d1:
6e:82:17:3a:ac:42:6f:b6:bb:06:27:a8:ef:36:99:
ff:04:e9:9f:98:54:cd:6b:a7:c4:76:5c:55:43:3f:
a0:49:e7:cc:8a:ff:be:28:1f:5a:43:e0:54:ed:81:
ed:b9:8a:6c:af:4c:34:26:c6:c1:ce:cb:0a:64:ff:
71:32:b2:51:ea:50:91:52:86:a3:e1:69:e9:bc:cb:
b1:cf:f7:2b:ad:37:19:77:69:cf:9a:96:64:56:e6:
15:10:75:8e:16:4d:4d:3e:98:71:f1:74:1c:37:ec:
f7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:48:C3:1C:B8:F0:11:60:D4:8C:F2:3D:CF:F0:7E:7B:6B:DA:4F:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c6053582-ce66-3bec-8a0c-1f7b92837dec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d8:95:b6:58:f7:98:e2:6e:44:df:74:ff:cd:74:b6:f5:89:17:
b1:a5:fa:57:9b:45:1a:eb:75:c8:80:e0:c9:d6:26:da:7b:6f:
f7:39:a0:29:10:0c:b2:c9:7b:37:e4:72:27:06:f1:6a:6c:e3:
8e:15:b6:47:42:a8:38:8c:9a:7f:bc:86:7e:bd:55:0e:cf:c6:
d1:ad:1e:1c:6a:67:40:68:47:2d:ed:3c:6d:0d:f4:2b:72:a8:
c0:32:85:78:7d:e8:7d:21:81:71:7d:57:3c:ba:7c:7a:3c:3e:
49:b3:0e:57:12:47:a1:2d:f4:81:22:23:87:68:69:79:1e:d0:
fe:e3:1e:42:40:d5:08:1b:fb:da:0b:1f:9a:41:92:e6:b2:bb:
2c:26:f5:6c:f6:d6:cd:21:12:af:9a:d0:4f:a7:23:30:71:cc:
be:90:ad:a0:78:9a:47:4a:27:bd:05:2e:96:2e:d9:a3:94:d8:
a9:cb:21:18:50:49:5f:bf:53:24:a6:5b:5f:13:05:93:fa:a5:
54:4f:7f:5b:32:31:87:31:bf:2a:5a:0f:8d:be:c6:da:d9:7e:
1e:0d:72:6d:a8:72:80:b5:92:ef:82:a2:bb:b4:6a:16:aa:80:
1b:16:34:b3:e7:6c:b0:bd:4e:6a:05:a5:ab:76:61:20:fa:8b:
5a:ed:5d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:19:58 2026 by rpki-client