
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0fe02132-0b80-36a6-a779-6399e4ac9fbb.roa
File: 0fe02132-0b80-36a6-a779-6399e4ac9fbb.roa (raw, json)
Hash identifier: vCGaD7C631Z4WuacixQfuM478aKeQ0JB8lFQtrMdT2M=
Subject key identifier: 03:AF:C6:FB:F5:6C:9E:FF:6D:50:B8:7C:EA:00:92:BD:7C:9A:31:67
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F4983D890A42EF8A1581CF200
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0fe02132-0b80-36a6-a779-6399e4ac9fbb.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 172.242.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:83:d8:90:a4:2e:f8:a1:58:1c:f2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=f2a68293-ef94-4a31-ab38-b1be4f01c1ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7c:eb:e5:90:cd:31:3b:83:21:94:ac:9c:7a:
98:67:04:f2:44:ef:95:c2:a5:51:29:5f:45:d6:08:
72:ab:51:30:c2:99:82:76:df:7b:4b:00:2a:42:0a:
c6:a3:cd:d3:e1:36:14:74:09:6b:38:c0:70:4f:7a:
2f:00:3b:37:03:8f:eb:21:cc:33:78:52:03:4e:ca:
e4:45:ec:53:21:1e:ac:fb:b8:72:26:ac:8c:f8:20:
3f:9e:0f:40:2c:f6:09:b0:6b:51:a4:0b:18:53:08:
f2:a8:53:4d:97:ee:8b:ba:c4:a7:64:f7:55:8b:ae:
e3:4f:e2:e0:8a:08:3b:2b:07:7b:8d:48:fe:bf:23:
b1:9a:9f:ed:6c:1a:47:a7:e4:99:b5:2e:b5:b0:21:
71:9d:a6:53:eb:e3:f4:31:da:a6:4c:57:86:59:68:
2c:57:a6:c0:13:8b:59:5f:1b:bd:a6:1b:0c:99:2f:
31:b0:ff:59:66:cf:c4:72:0c:0e:ce:4a:85:49:e9:
66:cd:81:fc:5d:9d:ba:c9:da:c3:d7:87:ba:f5:4d:
08:9e:54:40:9d:51:97:f7:79:38:6d:fc:66:9f:c0:
73:52:a9:5d:64:0e:f6:19:88:e8:c3:f4:68:1e:71:
f6:2e:5d:d8:50:02:ff:d8:1e:24:29:d4:23:66:b1:
a5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AF:C6:FB:F5:6C:9E:FF:6D:50:B8:7C:EA:00:92:BD:7C:9A:31:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0fe02132-0b80-36a6-a779-6399e4ac9fbb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.185.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d3:77:e4:77:c1:a9:69:4d:c3:41:71:f2:d5:e4:e6:e8:58:b6:
3e:f9:d0:15:90:4a:4f:36:7c:d2:fd:7a:66:1e:78:02:88:dd:
44:cd:75:6d:21:17:6e:20:08:c4:1c:af:55:df:9a:91:7e:18:
85:ae:0b:b8:1e:3e:e8:7e:84:75:77:28:3d:eb:28:a2:da:88:
03:0b:cf:73:8f:c7:34:2c:36:7b:8c:59:c0:86:08:52:be:83:
3f:5f:d3:00:68:e5:74:38:0f:eb:a1:48:3d:a2:4f:c5:a1:5c:
63:9b:a6:10:bc:3e:bb:96:2d:de:f5:ba:cb:a6:b3:78:a7:ff:
96:ed:ac:a3:80:62:72:72:05:c1:b5:d2:26:99:50:a8:7b:ee:
5e:3b:9d:83:6a:81:85:97:5c:81:32:fc:9b:a6:7e:27:d8:cf:
01:3f:ef:f4:fa:f4:c0:b5:14:9b:2d:03:16:8c:54:bd:7a:32:
5e:a2:80:52:8f:1f:b8:ae:d2:1a:d1:32:aa:59:e7:bf:3b:84:
e7:bd:d9:f6:ea:8c:a2:53:4c:02:57:ab:9d:8f:f8:bc:d5:8d:
e4:23:94:04:4d:3e:bb:2b:da:61:f5:c1:41:d8:58:27:b7:54:
d2:7c:37:36:e2:01:63:a4:26:3f:71:5d:0e:ec:c5:50:11:85:
57:00:a3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:27:02 2026 by rpki-client