
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cbd09f3d-86fc-3bd4-baa4-f341dfe0dd97.roa
File: cbd09f3d-86fc-3bd4-baa4-f341dfe0dd97.roa (raw, json)
Hash identifier: Dk/IHHT/aH5SnfeP+2nmNeBU/2EpSGBJVxvXxDr+aWA=
Subject key identifier: 42:A0:34:30:78:D3:4F:BE:F6:03:45:62:78:CA:31:00:EC:F4:7B:DD
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F4983E92CD7AF58C237DC1840
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cbd09f3d-86fc-3bd4-baa4-f341dfe0dd97.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 172.243.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:83:e9:2c:d7:af:58:c2:37:dc:18:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=086487eb-eb57-4620-aa7f-11035379171f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:84:07:e9:2a:3b:43:e9:ec:60:b6:93:e2:a7:
93:c3:45:74:66:93:2a:18:8c:62:8f:5d:69:d3:88:
e2:7f:50:de:cb:db:ac:d1:96:42:3c:1a:a5:af:0a:
89:45:61:37:2b:a2:2d:a6:c9:76:1e:7f:9b:ab:cf:
57:ed:5d:4a:df:ba:8a:3c:40:1f:ec:d8:9a:6f:77:
78:8f:3b:4f:0b:e3:12:21:df:2e:ea:5a:73:37:8d:
df:2f:8b:4d:a5:30:a7:97:1c:f4:39:55:26:36:58:
89:6a:72:2f:05:be:b2:c6:a7:eb:ac:e3:c8:0c:3a:
ee:f1:8f:fc:3a:44:c2:c1:47:ce:c6:eb:e9:20:3f:
ac:c5:16:8f:46:9c:a3:65:ce:51:3d:aa:53:d5:ee:
32:9e:6e:d9:4d:9b:a8:c2:e3:c4:c4:1f:44:52:81:
0e:5e:28:9b:a3:0b:fa:39:13:17:3a:76:6f:9b:ee:
df:b3:b0:e5:82:ff:cf:67:ff:1d:90:ca:ae:b4:ff:
67:e4:6d:3b:b9:0b:07:8f:5d:b0:81:00:91:94:b3:
bd:d8:1e:bb:09:24:6c:61:2c:da:c5:37:f9:74:28:
62:5f:fd:17:af:12:9a:32:d6:59:ab:e4:7f:cb:6c:
27:15:ac:f0:aa:b5:7d:60:49:d8:ba:b3:b2:b0:69:
1a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A0:34:30:78:D3:4F:BE:F6:03:45:62:78:CA:31:00:EC:F4:7B:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cbd09f3d-86fc-3bd4-baa4-f341dfe0dd97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:83:03:6c:e5:f6:5a:d0:e9:3c:44:e3:66:9a:83:f1:32:ed:
fe:fc:ce:4f:d7:7d:7d:5a:87:e7:4c:a9:be:7b:10:e5:dc:a6:
4d:e7:fa:f6:3e:30:cd:c6:1d:4a:49:52:a8:87:46:b6:88:d7:
4d:c9:46:7a:df:02:72:b5:ac:ad:bc:6f:15:1c:9a:3b:78:1b:
29:0b:0d:d6:44:f9:2d:8a:3e:d5:57:cd:ec:2a:ae:a2:6d:9e:
9e:8e:4c:4a:c5:d6:69:8d:62:a1:8b:e7:18:f3:19:22:93:35:
72:a5:f4:6a:5c:bb:22:81:30:84:3a:b0:dc:8c:86:33:f2:36:
c4:9f:c8:b4:f9:72:80:0a:80:58:fd:32:1a:ab:5f:cf:c5:ee:
65:16:2f:5e:41:5b:4a:bd:1a:cb:87:be:fe:6c:dd:e0:0d:08:
95:7c:1a:72:ac:18:fc:62:13:af:d1:7e:55:cf:eb:fa:b9:c5:
85:a8:4f:fe:87:bd:fe:55:15:a4:48:a5:80:ed:18:17:b8:95:
e0:5a:7b:57:39:72:67:01:0d:3a:69:4b:dc:4a:9b:f3:4a:e3:
9b:87:9a:36:66:4d:6d:d2:98:3a:14:01:f5:a5:a6:d8:bd:9c:
25:a9:dd:32:60:e0:62:2a:e5:84:f5:ba:84:ef:93:28:4b:34:
88:58:96:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:33:11 2026 by rpki-client