
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dceba2c5-8242-3262-bfe0-d5279a3e4851.roa
File: dceba2c5-8242-3262-bfe0-d5279a3e4851.roa (raw, json)
Hash identifier: solNyWycUhQXMHqOd+BlPFfmJAljJpzXJLq5SnAVDrQ=
Subject key identifier: 82:3B:CB:DC:0B:57:25:F6:D5:8C:43:15:29:4C:E7:2F:D4:93:EE:22
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F497AF9A941E25C4A3E0BE280
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dceba2c5-8242-3262-bfe0-d5279a3e4851.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 70.41.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 07 Oct 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7a:f9:a9:41:e2:5c:4a:3e:0b:e2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=f4e4535d-ad16-4102-b57e-e72593ffddd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:10:c7:f5:1c:d5:bd:3c:5b:e7:cb:50:16:8b:
28:55:54:91:64:61:9d:68:d1:eb:1c:64:da:b9:11:
ca:2a:6c:f4:76:b1:ed:5c:48:b7:96:db:19:68:dd:
89:db:a2:08:e2:b3:7c:9e:0b:85:f4:64:fa:cb:e5:
57:d0:62:49:dc:be:d8:f5:61:41:82:74:7a:f2:e0:
5d:0c:15:ac:b6:23:c8:30:ab:b1:43:32:19:cd:8a:
ec:20:68:3f:b5:34:b3:00:66:b6:08:70:2b:63:6a:
a2:92:44:f6:95:2e:bc:5c:3b:a7:49:d6:dd:ee:9b:
97:94:9d:75:18:e9:aa:08:ec:dc:78:db:64:1b:a0:
d6:dc:34:da:09:51:d2:0d:18:ae:9c:67:3c:f8:2d:
8a:e6:02:d9:c9:ae:7f:06:6e:07:5c:d5:61:ec:cc:
3e:dd:a9:db:7d:3a:ad:84:b0:35:de:7d:38:15:2d:
54:dc:3f:35:4c:89:02:79:2b:ab:30:8b:15:bf:b0:
e8:39:31:15:46:5d:12:86:9e:98:97:dc:2e:b7:66:
cd:64:ba:1a:27:d0:38:ea:c6:c4:d3:b6:61:5e:38:
6f:33:bb:b3:ec:8f:c6:37:da:33:3e:85:f1:45:27:
5c:5f:e2:65:6a:6c:4e:38:e8:a6:bd:c3:dc:2f:4d:
c6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3B:CB:DC:0B:57:25:F6:D5:8C:43:15:29:4C:E7:2F:D4:93:EE:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dceba2c5-8242-3262-bfe0-d5279a3e4851.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.165.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:79:bd:b9:39:da:c8:ae:65:a3:d8:4d:be:0d:57:a4:bf:10:
d7:3f:c1:fd:26:57:a2:61:dc:60:50:a5:28:4c:10:26:2d:b8:
d0:7d:09:f4:8a:86:06:5d:9e:44:8c:d7:1f:2b:aa:24:6c:ed:
f6:c7:14:23:0a:fc:fe:70:02:79:c9:ff:7e:63:53:9e:75:e9:
3b:1e:8f:bd:b7:a8:3c:aa:64:16:22:95:a3:dc:12:ee:f9:d9:
b3:cb:9c:8c:27:b9:53:49:69:78:7e:72:0e:d1:f2:5b:c2:a8:
dc:b2:79:1b:1b:20:10:0d:dc:58:86:e0:3a:8f:d8:36:16:94:
ae:4a:1d:82:1a:0c:df:fc:2b:87:d1:70:5e:da:20:bc:97:ab:
1c:b0:32:eb:05:50:fd:14:02:0a:a6:f1:c2:56:dd:38:7f:6d:
c6:40:72:12:84:3e:a4:a6:be:7a:78:89:3f:f1:88:ee:12:f7:
f4:ca:86:19:7f:25:12:8d:72:90:bf:c8:36:fa:c2:b1:67:05:
e5:37:92:5e:06:56:f4:40:c0:cd:12:47:da:a6:bd:a4:95:8a:
3a:58:13:dd:af:b7:64:18:30:f8:9a:c1:a5:52:bf:64:2e:3b:
a8:d5:50:b1:8c:c9:08:d4:f9:05:9a:34:a1:4e:53:8f:8e:88:
46:0b:c4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 13:26:00 2026 by rpki-client