
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cf451709-d980-3669-9932-82e62e6b34ad.roa
File: cf451709-d980-3669-9932-82e62e6b34ad.roa (raw, json)
Hash identifier: +HJF/8BN2cFN+mdUoccfPqoG9Geb+WI2+P/tb2De5/Y=
Subject key identifier: 4D:C5:01:DE:3E:56:3A:D9:75:17:C8:6C:6B:C3:0E:EC:D1:9D:84:CD
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F497B7D9960293C4170B79850
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cf451709-d980-3669-9932-82e62e6b34ad.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 162.72.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Oct 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7b:7d:99:60:29:3c:41:70:b7:98:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=0bff9d83-cb01-4893-816f-54477daf9aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8d:fb:8e:55:64:f6:ae:e5:cb:21:ea:dd:b3:
57:50:09:dc:e3:a1:6c:53:e7:d8:56:df:96:fb:a7:
31:a3:86:20:03:73:1a:49:ce:7b:49:8a:f3:ee:8c:
44:93:14:17:9d:c1:b0:91:a8:d3:76:57:11:da:10:
3d:86:8a:af:8d:b2:06:4e:95:fd:6f:d8:8a:88:7b:
44:85:fd:4c:1d:36:18:3f:e3:fb:99:10:07:75:54:
27:54:ca:8e:6d:be:5e:c9:c1:e1:2d:58:7f:16:c1:
94:6d:9b:8c:f6:68:47:89:37:63:a1:ae:12:eb:b6:
dc:c8:1a:0e:00:95:6c:01:0f:fb:f4:42:5a:a8:23:
99:3e:a3:39:9d:e6:32:60:c3:f0:3f:d2:b8:a7:bd:
94:fc:8b:14:63:10:79:cf:9e:05:ad:ce:bf:8a:09:
f1:33:d1:bc:da:13:fc:0b:26:f4:3f:69:90:cf:f7:
06:98:16:8c:fc:9c:55:a5:3f:0f:81:5e:fb:66:05:
4b:18:ec:5e:25:9d:08:d9:68:90:7a:42:93:8e:c4:
d7:dd:f7:a7:1f:1c:2a:4f:62:51:86:e9:ef:64:1b:
0f:59:94:1e:c9:4a:33:c5:70:91:04:b4:91:52:03:
8d:56:77:11:95:d8:44:ae:83:81:8b:37:33:99:20:
be:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C5:01:DE:3E:56:3A:D9:75:17:C8:6C:6B:C3:0E:EC:D1:9D:84:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cf451709-d980-3669-9932-82e62e6b34ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
162.72.53.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:96:64:3f:d8:da:c6:ca:82:f6:f4:1c:00:3e:0b:8f:fe:53:
07:11:0a:e5:bb:01:50:9c:8a:09:6b:f7:09:ab:37:b5:8e:b3:
a0:0a:57:0f:40:28:af:3a:10:9a:8f:41:78:f8:aa:52:70:20:
99:d1:27:0f:c1:80:63:71:7e:c6:d6:a8:f4:cd:8f:a7:13:5c:
eb:6b:ed:60:e4:8c:76:c9:b4:3a:3b:f0:6b:15:dd:14:97:a8:
ed:44:25:c6:e9:5c:fb:62:26:d3:99:59:97:60:b3:0e:72:a2:
33:b3:fd:3a:15:81:b5:3b:04:94:f6:97:67:15:f6:5a:42:74:
8a:1e:c4:75:e5:a5:4b:76:1b:70:f2:6e:ff:77:66:94:c3:b1:
9c:b5:1a:94:60:cc:42:5c:90:12:63:23:0c:71:52:6d:42:63:
fe:64:45:b6:84:34:81:2b:9d:15:42:4d:28:4a:e6:33:71:b2:
a4:da:67:a4:be:8c:97:c1:86:37:85:16:83:77:ff:14:7f:4f:
30:1d:39:b2:ac:23:3b:54:fc:82:86:fe:4b:c1:01:4a:34:4f:
2c:4b:c2:f6:52:b4:bc:17:17:4e:8a:11:fa:ff:d5:83:44:dc:
c4:25:04:45:55:83:9d:ac:e4:57:1c:bb:9d:55:81:bc:60:29:
99:22:2a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:20:48 2026 by rpki-client