
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d5c1194a-1d8a-31c9-9fa9-875062b6c6d5.roa
File: d5c1194a-1d8a-31c9-9fa9-875062b6c6d5.roa (raw, json)
Hash identifier: E7AVRugpQY/axwRgl3lvIiZXotlCEp6gE8q2yMn1lFc=
Subject key identifier: C6:7B:33:FB:6D:1E:62:EA:EF:66:73:D4:50:A3:31:84:88:36:14:AF
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F4983D606A3D08D0646851300
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d5c1194a-1d8a-31c9-9fa9-875062b6c6d5.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 172.242.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 07 Oct 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:83:d6:06:a3:d0:8d:06:46:85:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=92e8f715-ad67-4260-a2d8-f773b1151a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3d:bc:97:7f:2a:36:50:b6:65:9a:37:aa:02:
13:1c:89:4b:57:bf:d3:c7:03:84:26:69:8d:5f:c1:
2c:58:4a:f1:35:f3:fb:e5:8a:91:9d:65:54:07:3d:
c3:b8:48:52:ca:03:71:a9:ed:88:2b:06:4a:5c:b7:
fc:ff:f5:99:c0:19:ba:9b:81:6b:ff:df:5b:da:8e:
5b:29:78:c6:f4:d3:d2:0b:34:0f:0f:01:e4:40:5d:
52:9a:8f:ab:bc:ec:fd:52:1b:d5:f4:f6:ba:da:2b:
4f:a3:3f:ee:f9:6b:99:e1:a5:15:bb:1a:95:4e:ee:
99:f2:2f:c8:c9:a7:75:a0:35:9b:d0:23:9a:4e:8c:
46:20:b9:dd:e3:cd:2d:f6:2f:92:01:b0:ea:38:b5:
3f:71:cc:73:a4:53:df:a5:30:07:54:4e:e8:21:2b:
38:77:67:b7:a7:d6:62:e8:01:72:d0:c6:02:43:89:
a3:1b:7f:ae:73:9f:3a:22:0a:2d:31:ed:af:41:88:
aa:b9:0f:04:0d:80:79:0d:bd:97:6d:df:1c:6f:db:
ca:68:d3:d5:89:02:85:99:f2:21:a1:da:28:40:a6:
36:fa:f4:78:98:12:e3:59:45:1c:fc:a1:c4:99:40:
c9:6e:70:9d:75:18:80:07:27:aa:62:71:26:84:e8:
60:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:7B:33:FB:6D:1E:62:EA:EF:66:73:D4:50:A3:31:84:88:36:14:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d5c1194a-1d8a-31c9-9fa9-875062b6c6d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.140.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:38:24:5d:81:c7:1b:39:3c:68:8e:f2:d8:3e:05:9b:72:e4:
74:4f:02:ac:58:76:4f:86:cb:2a:37:d9:a2:e1:30:20:1c:27:
db:e9:97:20:58:c6:aa:e0:e3:ef:5e:33:54:fb:00:5f:85:13:
59:98:2b:90:32:a3:72:48:85:eb:b7:3d:96:5d:85:fb:19:18:
25:fe:86:aa:fd:8e:e8:b5:59:81:52:53:1f:d6:60:b7:a4:5d:
c8:b1:14:35:f6:b8:43:f2:e2:84:42:c4:1a:34:1f:1f:6c:3b:
f6:ee:73:74:a7:0b:a2:e7:28:26:7e:4d:53:7d:42:50:c6:22:
37:57:2b:7e:53:75:47:f3:6a:72:82:9f:c4:0d:b7:33:de:33:
c2:c7:64:3c:63:23:b5:7a:46:43:94:0b:ab:41:ba:c5:90:e2:
63:ba:9c:ee:21:df:2e:25:95:6c:a3:00:64:64:26:b2:9b:d4:
75:9a:72:f5:7d:60:cb:05:ed:a0:d5:79:ff:a8:2e:05:5e:ea:
a6:ea:a9:6d:97:4e:66:dd:09:d2:20:b0:b3:1d:ff:2c:33:9b:
01:4e:09:84:fa:10:eb:29:a7:06:58:bd:59:d6:88:d7:0d:cb:
68:1f:25:a2:0a:87:dc:10:b9:ca:09:29:5b:1a:33:a2:a4:ee:
9d:e2:7a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 13:55:56 2026 by rpki-client