
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fe09bc36-af6b-314b-bd5b-973946014ec1.roa
File: fe09bc36-af6b-314b-bd5b-973946014ec1.roa (raw, json)
Hash identifier: UR4X76rYcVKov+IggGHGWXNAzfrwE5I/bL/bXek1Ljs=
Subject key identifier: B1:FB:3A:2C:17:31:4D:69:BD:95:DC:67:29:AE:57:79:29:43:5D:51
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F497AEDC1933A3BE6A8EA7B00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fe09bc36-af6b-314b-bd5b-973946014ec1.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 70.41.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 01 Oct 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7a:ed:c1:93:3a:3b:e6:a8:ea:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=8400e2f2-2254-468a-bf12-ce1339d315d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f8:5b:98:09:95:3b:c8:db:2e:6a:1f:17:21:
15:69:c2:82:f5:e9:77:ba:91:52:72:10:f6:83:b4:
49:7b:5c:ae:67:e2:83:a8:65:05:a7:3e:51:f9:07:
10:5c:5a:33:a5:d1:a0:c3:c3:5b:99:77:bd:5e:1d:
ca:22:b5:be:6e:33:46:c5:37:b0:3a:69:8c:00:ea:
65:ce:b7:ae:9f:ba:77:1c:98:96:9e:32:0c:8c:06:
24:03:d2:25:fb:44:26:37:56:33:59:fb:b8:6e:06:
34:8f:9b:e7:21:79:c6:fb:38:46:1d:ae:28:51:dd:
0c:7e:98:89:b4:16:b4:54:c2:aa:aa:f1:1e:99:79:
c8:3e:98:2d:96:73:a5:a6:14:f7:46:4e:f6:14:78:
78:ae:32:93:19:ca:c5:ff:17:bb:8b:fe:91:14:49:
00:fc:0d:ed:0a:f8:b4:e2:86:24:02:ec:40:37:33:
c7:ea:06:a6:76:aa:5f:8e:db:6c:1d:b0:a8:3e:1a:
1a:ff:6d:81:03:54:52:b2:72:c4:e0:63:95:db:1c:
81:6b:51:65:b1:ad:6b:01:57:11:b3:5c:ef:35:46:
99:59:c6:f4:c3:da:b4:d7:bf:d1:16:7e:9c:d5:48:
a5:4a:69:15:11:3e:03:58:9c:80:9a:f5:ec:4f:a6:
39:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FB:3A:2C:17:31:4D:69:BD:95:DC:67:29:AE:57:79:29:43:5D:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fe09bc36-af6b-314b-bd5b-973946014ec1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.52.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:b3:88:4f:26:a7:f9:da:d1:5b:31:03:f5:cd:86:ae:79:08:
bf:a5:9b:da:a9:6a:5b:d3:f5:88:7b:f2:d7:f3:f5:64:37:31:
b7:66:da:99:3e:b3:d4:b6:92:dd:b8:07:1d:8e:0e:c5:b9:18:
40:aa:2a:cc:e8:51:a5:ed:89:ec:64:18:06:5e:87:0f:2b:86:
80:74:be:0b:7a:7e:af:e2:df:55:a6:0c:95:d5:ea:1e:a7:8b:
6d:6e:bf:a7:e1:52:6c:42:40:49:ab:01:5d:7c:86:fb:f3:4d:
67:9f:98:8e:4f:98:c0:ae:ce:7b:75:de:b8:ae:12:a8:a7:28:
a2:10:d9:0b:e7:f9:d9:fc:1c:93:7d:3b:27:46:a5:7b:b6:de:
41:9c:22:23:5b:74:f2:0f:59:05:b3:3d:28:54:2a:47:c2:b0:
e5:dc:ee:2f:c6:5a:93:73:f2:11:bc:1e:22:7d:ec:cd:cc:45:
29:e8:a8:07:12:0d:3a:31:60:a9:a8:6c:a0:8b:31:bd:ec:8a:
e5:5c:02:f7:57:51:08:06:61:74:85:8b:ec:cc:62:2e:a4:b3:
44:7e:79:10:85:bf:02:39:3a:90:c2:8c:ab:a5:41:e7:38:f2:
45:95:3d:2e:94:53:d4:17:80:39:d9:93:4d:4e:46:b7:d2:e4:
2f:b9:5d:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jeu3Bkzo75qjqewAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ODQwMGUyZjItMjI1NC00NjhhLWJmMTItY2UxMzM5ZDMxNWQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/hbmAmVO8jbLmofFyEVacKC9el3upFSchD2
g7RJe1yuZ+KDqGUFpz5R+QcQXFozpdGgw8NbmXe9Xh3KIrW+bjNGxTewOmmMAOpl
zreun7p3HJiWnjIMjAYkA9Il+0QmN1YzWfu4bgY0j5vnIXnG+zhGHa4oUd0MfpiJ
tBa0VMKqqvEemXnIPpgtlnOlphT3Rk72FHh4rjKTGcrF/xe7i/6RFEkA/A3tCvi0
4oYkAuxANzPH6gamdqpfjttsHbCoPhoa/22BA1RSsnLE4GOV2xyBa1Flsa1rAVcR
s1zvNUaZWcb0w9q017/RFn6c1UilSmkVET4DWJyAmvXsT6Y5hQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLH7OiwXMU1pvZXcZymuV3kpQ11RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmUwOWJjMzYtYWY2Yi0z
MTRiLWJkNWItOTczOTQ2MDE0ZWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARik0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKKziE8mp/na0VsxA/XNhq55CL+lm9qpalvT9Yh78tfz9WQ3Mbdm2pk+
s9S2kt24Bx2ODsW5GECqKszoUaXtiexkGAZehw8rhoB0vgt6fq/i31WmDJXV6h6n
i21uv6fhUmxCQEmrAV18hvvzTWefmI5PmMCuznt13riuEqinKKIQ2Qvn+dn8HJN9
OydGpXu23kGcIiNbdPIPWQWzPShUKkfCsOXc7i/GWpNz8hG8HiJ97M3MRSnoqAcS
DToxYKmobKCLMb3siuVcAvdXUQgGYXSFi+zMYi6ks0R+eRCFvwI5OpDCjKulQec4
8kWVPS6UU9QXgDnZk01ORrfS5C+5XbM=
-----END CERTIFICATE-----
Generated at Wed Sep 30 15:24:49 2026 by rpki-client