
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f77c4fb3-9b94-343b-bfa3-14555ddc190c.roa
File: f77c4fb3-9b94-343b-bfa3-14555ddc190c.roa (raw, json)
Hash identifier: Q4f+dih/2TPp32dajpCqOAYxmtQsUD2gLlad2my5J3A=
Subject key identifier: 73:AD:F0:E0:CF:EC:41:94:C3:6B:F7:95:0B:7B:37:9E:82:08:00:73
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F497C018EFD035B5BBBC04A00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f77c4fb3-9b94-343b-bfa3-14555ddc190c.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 198.45.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7c:01:8e:fd:03:5b:5b:bb:c0:4a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=ed87ca1c-690f-45a6-b0d0-f689e86bd08d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8b:b1:35:0b:80:e7:bc:f7:93:21:b9:82:90:
4b:17:79:4d:8d:e2:27:b5:a9:e7:4e:fc:71:78:8d:
29:fc:64:99:82:01:6e:ea:30:2b:36:22:3d:35:20:
91:c7:6d:8b:5d:f2:84:85:11:33:6e:e2:9f:b3:e9:
84:ce:e3:6a:45:33:2b:ae:b5:f9:ef:29:26:9c:a2:
03:00:ff:f7:e1:8f:69:3d:c6:44:74:31:a8:e4:2b:
54:ea:26:69:52:57:06:1d:7d:4f:3d:e7:a6:0f:99:
32:8f:15:c4:b6:d0:ed:b5:79:02:3a:53:bc:b3:ce:
ad:7b:b0:c1:fb:1d:55:7f:f9:31:9e:8f:02:61:4f:
ee:0c:05:f3:2a:d6:3c:71:20:82:2a:8b:57:26:c8:
e4:02:e1:ad:f8:d8:9d:af:b3:64:b9:d6:a0:5c:04:
c2:93:e2:fb:6b:5e:36:3a:e8:29:b0:d3:6c:f8:6a:
ca:2b:e2:9a:a7:00:b1:1b:8a:c2:1f:0e:e7:70:b9:
2b:30:80:30:10:c6:30:e6:c7:11:59:fa:a9:00:35:
af:77:c9:ba:75:8e:41:cc:72:51:48:ef:30:6b:2b:
a0:17:bd:a3:86:be:34:91:a2:61:25:55:74:23:d9:
f5:a6:ee:7b:10:3e:c4:63:5f:da:bb:26:40:f6:c9:
9f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AD:F0:E0:CF:EC:41:94:C3:6B:F7:95:0B:7B:37:9E:82:08:00:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f77c4fb3-9b94-343b-bfa3-14555ddc190c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
198.45.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:79:42:4a:f0:45:6c:dc:01:36:5a:40:42:d7:39:0b:e4:ba:
86:a5:cd:c7:e7:62:4c:df:1b:93:09:5c:8c:b6:cd:ac:34:ad:
fc:7f:63:98:4b:e7:a8:91:83:4d:6d:f7:89:e4:9f:b6:90:44:
68:6f:0b:17:37:9d:1e:dc:43:84:8a:b3:08:7d:fa:fb:17:ac:
b1:66:9f:1b:e5:51:1a:e4:44:41:ff:c9:cd:f0:cd:c3:f6:7d:
d0:b7:b5:77:99:dd:28:74:34:59:0c:3f:09:b6:03:97:81:9a:
dc:c3:33:4b:a7:c7:d3:a4:a1:f8:81:f3:8f:4e:3b:d0:25:55:
8a:fc:31:d2:8f:b1:30:92:7e:15:90:f5:fc:3d:c1:3d:58:fc:
05:55:dd:4b:17:1f:1e:0b:d8:cf:fb:79:0e:af:a8:15:dc:5c:
6b:f2:19:bd:6a:2a:77:60:81:d9:00:4a:ff:1e:8b:65:b0:69:
db:10:4b:7b:5d:92:f7:bf:c9:c6:53:aa:dd:68:a3:05:d9:fa:
6a:e3:48:43:be:76:be:b5:5c:99:fc:05:a1:ca:20:a1:9c:bc:
ea:b7:51:4c:95:c2:3f:96:12:08:3c:2c:dc:e4:99:50:b1:6a:
81:8d:ee:7f:c8:b4:6c:09:0f:43:bb:22:4d:cd:f5:ca:a3:78:
5d:db:fc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:50:42 2026 by rpki-client