
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce18e426-c098-35aa-9953-66cefe297c21.roa
File: ce18e426-c098-35aa-9953-66cefe297c21.roa (raw, json)
Hash identifier: PXshqzg8sP30v2sGEE/wu/ulnczof57aGUq9gn5XU1c=
Subject key identifier: D2:B1:21:1D:C5:11:18:7E:A5:3A:40:A9:B3:1F:AD:9A:1E:C6:FD:49
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F498361E3A7416CA043AFFA00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce18e426-c098-35aa-9953-66cefe297c21.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 75.106.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 06 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:83:61:e3:a7:41:6c:a0:43:af:fa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=1e5f9e36-6e81-4b1f-983e-b290f70e79b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:92:fc:45:5c:76:c6:c3:b7:a4:fb:b8:5c:dc:
82:43:cf:ba:87:f9:fa:a0:36:28:e3:52:ee:07:98:
6f:be:aa:71:21:db:ac:f1:f5:82:54:bf:f4:ec:f8:
40:15:9d:8a:e8:a5:9b:06:d5:12:7b:93:33:df:68:
a1:f6:b2:92:b1:d8:b5:a4:2f:1a:79:82:3b:6f:28:
67:33:29:11:69:dd:d5:df:1f:c6:3d:a0:fd:41:a8:
bb:a9:9e:e5:77:16:fa:f7:42:45:f6:e6:f0:a4:4c:
60:e8:b0:c6:b7:79:01:b9:8e:eb:69:42:e4:b9:1b:
50:4b:c1:05:e8:b1:80:40:06:34:d4:33:2d:87:12:
01:5f:c1:21:4b:e5:2e:96:b5:27:c3:4c:8c:2a:71:
d4:33:2b:82:3e:ac:70:48:25:46:6a:c8:82:e5:9a:
e6:5c:5e:fc:9b:36:f1:68:9c:2b:69:1d:ae:35:99:
12:54:f0:8c:0b:c7:ca:f8:59:30:f5:97:3d:07:58:
35:5a:a5:d2:f3:55:81:6a:ab:cd:fa:8b:36:20:e3:
64:8d:21:8a:1d:31:09:3d:51:b3:6e:31:8f:09:b7:
4c:48:d8:aa:9c:04:42:2e:cb:24:de:0c:fd:54:84:
5c:b9:80:3d:6b:9d:68:3f:04:82:53:b5:ee:a3:15:
3d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B1:21:1D:C5:11:18:7E:A5:3A:40:A9:B3:1F:AD:9A:1E:C6:FD:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce18e426-c098-35aa-9953-66cefe297c21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
75.106.85.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:52:fe:b3:6b:64:ea:4b:d7:0b:fd:ac:1f:89:fe:71:8a:1f:
2b:15:b0:fb:20:49:21:9b:97:f9:08:ae:2d:98:bd:fd:95:50:
93:b3:f4:49:a0:aa:05:6a:90:1d:46:c5:e8:13:19:f1:65:bc:
49:a8:84:21:7b:b7:3c:69:b1:79:68:15:fe:94:18:a6:be:98:
36:7c:23:7f:7e:20:91:17:f9:a8:06:ee:ff:70:7e:72:fe:d8:
2e:6c:14:b5:92:7f:c5:10:f8:cf:98:01:1b:91:2c:48:a7:1d:
07:ef:81:3e:c5:3e:65:23:79:46:ef:5b:0e:5d:cb:43:37:41:
61:f4:00:cf:66:5b:f6:4a:60:81:d8:aa:70:06:bd:f0:7a:b1:
37:8f:de:c3:f6:3c:43:0d:8b:c0:35:fc:ae:6f:1d:ec:a7:83:
68:83:f6:3b:98:f7:2b:c2:24:b0:80:e5:76:f3:57:73:02:b0:
ce:0f:72:a2:00:02:26:ea:1f:c2:59:66:9d:c5:f2:79:b7:bf:
47:cd:17:18:14:ef:1f:58:ec:d5:86:53:b6:c7:7b:a1:37:b1:
d2:f7:e9:69:85:1b:f7:74:99:a9:86:0b:cf:90:d9:f2:a8:a8:
d5:ab:e2:41:62:a0:28:86:3b:82:74:57:13:da:28:4e:9e:09:
ea:fd:d0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:27:27 2026 by rpki-client