
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2980d33-98b5-38d1-838a-b707f9b0f46c.roa
File: d2980d33-98b5-38d1-838a-b707f9b0f46c.roa (raw, json)
Hash identifier: 5QBymoSMOZj2h734BPZHPTCIvF5RyzJ9Du0O5sAGNyA=
Subject key identifier: BE:2F:F7:4F:AC:D1:7A:93:C7:BE:CB:35:23:39:16:DD:BB:0A:99:A5
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F4983290245CB871AE07551C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2980d33-98b5-38d1-838a-b707f9b0f46c.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 72.173.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 10 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:83:29:02:45:cb:87:1a:e0:75:51:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=ed1bf93e-d7bc-4a0b-a189-a6554038831c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a8:d2:b1:a1:a4:52:c0:94:49:74:27:8a:a7:
97:5f:32:55:2a:51:f0:2c:ec:3c:fa:95:35:df:72:
0f:3d:e3:18:81:69:05:b7:d8:82:f4:f9:63:cb:83:
f3:8f:13:0e:64:42:8c:a1:8c:39:e3:87:cc:84:15:
be:be:ed:9d:4d:9c:a9:03:b5:f9:d2:a4:db:49:ab:
6a:da:b3:20:37:0a:f2:17:bf:34:d5:26:15:8d:9b:
eb:77:3a:d1:e3:e2:cf:ff:b4:0e:3a:80:38:94:98:
81:c2:55:c7:28:ba:fc:67:a5:bd:f2:32:be:b9:59:
5d:6e:3c:a8:ab:73:26:99:f0:19:a3:2f:d5:58:5c:
03:9f:f4:14:2d:3e:8d:b3:f9:a5:c1:d8:de:31:b3:
94:d3:5d:d7:cc:11:52:96:9c:15:c4:cd:10:e1:b2:
26:7a:30:08:bd:6c:fe:4c:bc:82:aa:b4:86:c0:93:
d8:54:5b:27:c1:05:0f:88:9e:66:ac:a2:73:a5:ca:
b9:9e:7d:24:68:80:de:2d:2f:f7:b5:07:ca:a4:bd:
96:fe:e8:16:ea:d8:68:80:29:e3:d3:16:f2:07:41:
56:e1:b3:34:98:71:c1:a0:63:8b:23:83:5e:5b:5f:
cb:67:f2:8b:83:14:3a:5f:bf:f9:1e:5d:52:42:ea:
ae:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2F:F7:4F:AC:D1:7A:93:C7:BE:CB:35:23:39:16:DD:BB:0A:99:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2980d33-98b5-38d1-838a-b707f9b0f46c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.94.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:b1:30:ee:42:d3:6c:23:b4:45:4a:82:49:53:1a:42:68:62:
2c:fa:db:75:95:9d:d8:1b:ed:3d:36:b4:30:fd:6b:24:e9:18:
fe:3b:a3:d1:11:cd:a3:99:0f:06:dc:6b:7b:06:1d:e8:ba:7a:
c5:4c:6d:ea:bb:3a:18:4d:e2:9a:e0:36:5b:a8:8e:1c:c4:32:
de:70:45:be:06:fe:d2:33:5e:9d:64:ab:7b:d9:dc:e4:f7:bd:
5a:51:b8:be:4c:22:3c:35:ed:17:53:75:97:c1:f5:dc:0c:19:
4c:81:06:33:a5:30:5f:32:0b:c5:1a:58:d5:9b:ef:6c:3b:fc:
3d:0b:13:fc:e7:35:19:3c:2b:87:c7:9b:f4:9b:4d:8c:0f:f9:
20:53:4a:8a:a2:e2:a4:c3:98:10:04:ba:e2:f0:0a:4a:71:51:
9b:09:82:58:cd:d4:40:13:76:35:80:64:15:8d:d6:c8:ce:a6:
1a:7d:0a:bd:6e:13:d4:d8:d5:be:96:f6:67:d1:40:d0:e6:9e:
ad:aa:03:82:16:af:3a:82:78:0a:7e:19:ff:41:7a:85:04:94:
84:fe:5b:a2:68:e1:af:8a:c4:05:7d:de:ab:e0:95:d9:95:f0:
d7:08:e2:da:ce:0f:b9:73:f3:44:85:da:20:8d:e9:80:f9:90:
2c:15:1b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 02:11:12 2026 by rpki-client