
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/09984cd6-4e9e-3a11-8b1e-c812381993c2.roa
File: 09984cd6-4e9e-3a11-8b1e-c812381993c2.roa (raw, json)
Hash identifier: YgjZv0k4VG4W8De7V2gWxV3FBw24+6LCa4lZ/Efn3Eg=
Subject key identifier: 11:16:0D:AF:C3:73:CD:9A:DF:1F:8F:9C:9E:5C:3F:81:F1:F2:0A:D8
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F497AF01F14E572025E9FE900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/09984cd6-4e9e-3a11-8b1e-c812381993c2.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 70.41.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 29 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7a:f0:1f:14:e5:72:02:5e:9f:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=ca65f021-3042-44cb-ac49-7809fe79ac51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:92:34:d3:db:39:a6:72:e7:57:19:94:d5:53:
ac:55:1d:d0:33:25:f3:d0:92:57:3a:59:0a:e3:70:
eb:36:40:5d:f7:09:73:90:e1:e8:49:08:22:4c:e3:
64:a5:58:ad:f8:74:75:04:3a:e8:af:92:29:af:99:
ed:ad:ba:5a:1b:f3:14:38:72:c4:2c:a3:5c:fb:61:
0a:52:1b:8f:0a:c1:fe:dd:07:00:f6:9b:65:cf:af:
0a:11:83:32:10:5d:c3:1b:39:0e:3c:a6:a3:2a:42:
bd:e5:ce:0d:56:6d:2f:e1:cf:9f:63:c1:e9:c6:96:
02:ea:85:9b:9d:0f:af:f6:6e:ad:cb:9c:d1:64:fc:
19:1f:d4:d2:eb:2a:08:6b:99:8f:c7:fa:4e:16:17:
ec:09:d9:5e:ff:4a:8d:1b:36:77:c4:d9:0b:1d:39:
90:3a:c5:57:53:90:c7:82:9b:dd:6c:cb:66:3b:9b:
ab:96:aa:0f:3e:be:c3:a7:be:5f:64:1d:6a:75:05:
c9:5b:8a:7c:b6:fe:bf:dc:65:60:24:64:c0:bf:0a:
08:34:1c:e4:d1:ae:cd:d6:e9:01:7c:e3:2b:a3:29:
b8:3e:bc:60:3e:13:54:18:ae:02:78:5d:d3:93:32:
0c:38:c2:b5:44:f0:cb:fe:64:5b:31:71:f8:d5:f0:
7d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:16:0D:AF:C3:73:CD:9A:DF:1F:8F:9C:9E:5C:3F:81:F1:F2:0A:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/09984cd6-4e9e-3a11-8b1e-c812381993c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:3e:3b:d4:1c:aa:be:c7:b6:e6:64:4e:4d:10:41:a3:ba:93:
45:01:d4:56:e3:c7:28:3b:70:5d:7a:8a:03:e3:00:f9:6e:7d:
4f:3f:f1:6b:c3:27:37:0d:31:b6:f3:3e:e7:8d:68:3f:d0:dd:
06:7f:30:3d:f2:65:f6:7c:14:a5:16:24:68:f0:a7:3d:9b:78:
84:30:50:d1:3c:2f:c2:6d:6c:a5:2f:ca:48:1b:3d:21:7e:5b:
eb:37:7e:c7:f4:2d:c4:5b:da:f3:31:1e:60:59:03:47:dd:7b:
bf:0d:76:a2:21:b6:50:08:35:90:05:ad:52:5a:7e:3b:0c:8c:
7c:a8:06:34:16:fd:60:2a:93:c2:3f:2e:1e:3c:d3:3c:9c:7a:
48:3a:97:2a:35:ed:a4:60:82:9c:af:22:be:bb:f3:53:f4:d3:
40:3e:48:b9:e3:e2:68:99:aa:6f:86:38:ee:b1:85:8c:cb:06:
f8:0e:7f:42:2f:75:42:72:1a:3b:0f:ef:4e:f3:2b:7d:0d:89:
1c:9a:15:c7:fc:fc:e3:ef:46:ac:48:b0:a5:2d:c5:5a:f7:57:
1a:96:53:c4:aa:10:1a:94:8e:7c:66:00:dc:eb:4a:a0:65:92:
d1:1e:1f:31:e7:e4:38:5d:65:f2:ed:5e:94:ac:bc:9a:b4:d6:
e2:37:7f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:43:37 2026 by rpki-client