
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1a392fe5-ddf0-309c-89db-b58d570f08d7.roa
File: 1a392fe5-ddf0-309c-89db-b58d570f08d7.roa (raw, json)
Hash identifier: 6mbK8GK6IdT+9yaPpiDPcN+BjaLR43h/3og9NdWRs7w=
Subject key identifier: 00:CA:BA:2A:C2:B3:C8:E4:2C:21:22:BC:02:B7:B2:42:66:B4:D3:12
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584EA79D6AF001EEB34CBAA338C8
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1a392fe5-ddf0-309c-89db-b58d570f08d7.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7155
IP address blocks: 67.54.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9d:6a:f0:01:ee:b3:4c:ba:a3:38:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=e5ecd412-604f-43da-9080-7d1bbf717326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:29:0d:8b:05:64:d1:61:e9:80:be:ea:5a:6a:
66:ab:6e:c9:74:ed:4d:93:54:65:a5:84:a1:e0:ba:
51:7d:82:d4:34:45:c0:9b:f3:f2:62:36:61:ff:87:
18:0d:61:19:b7:de:3a:94:21:10:56:29:94:ec:05:
95:0d:a0:d8:06:10:38:05:02:dd:f9:ea:89:8b:c3:
e1:32:8c:24:e1:a5:81:7a:a4:0a:a9:99:9f:d2:ad:
f7:88:ec:21:bc:d6:f5:40:26:3b:f6:f8:86:cf:b1:
f1:ca:cf:2a:62:8c:94:b2:ee:ca:ac:dd:ab:45:1e:
a4:ca:29:d3:65:eb:ff:8a:1f:c5:08:a6:ef:71:6b:
66:4c:b3:f3:0b:a5:69:e9:c0:a3:9f:02:d3:2e:aa:
3e:d6:00:12:23:90:43:e2:fa:78:0f:4f:1f:a1:d4:
fa:ae:14:25:19:d0:27:a6:90:d0:0d:ff:7b:30:94:
6a:39:38:64:53:99:bb:61:3d:45:c8:13:11:6d:ef:
ce:c8:b4:c1:9b:0b:b2:7c:3c:2c:c8:ab:db:73:0c:
d6:48:1e:8a:d6:d7:cc:b1:d5:0c:69:f8:92:94:ff:
ef:6c:77:c7:fa:da:97:20:31:ac:5b:09:00:6e:39:
a1:a9:82:9a:fa:ce:be:d1:5b:b4:01:00:ab:31:00:
f4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CA:BA:2A:C2:B3:C8:E4:2C:21:22:BC:02:B7:B2:42:66:B4:D3:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1a392fe5-ddf0-309c-89db-b58d570f08d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
67.54.163.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d3:46:b1:cc:1c:e5:63:68:81:2c:92:4e:4a:96:74:3d:bd:47:
20:15:31:d2:90:2c:5e:ab:7f:0b:ca:83:fd:d3:4b:67:f7:62:
19:6c:e0:12:59:55:47:d6:86:38:75:b6:c1:5d:9a:db:2b:09:
4e:b9:2c:0d:8f:3a:75:0c:35:35:33:a5:cf:16:25:9d:97:8d:
e0:2f:c4:00:c7:f1:ed:39:0c:af:f1:b7:47:a6:c8:9a:99:12:
da:b0:00:d7:44:c4:cd:2f:f5:c0:d3:ed:02:fb:3a:9f:fb:58:
4f:e6:3f:47:cb:37:b5:37:b5:76:68:53:cc:37:04:b1:5a:4a:
ad:de:dd:05:2c:64:9a:96:8f:96:34:47:93:ed:f6:2c:27:61:
9a:38:ad:d5:13:77:fb:35:ee:a9:ec:56:5c:8e:7c:7e:b8:29:
9c:91:5c:6d:e8:08:58:5a:79:b6:40:df:a3:7e:bb:f3:17:e7:
e6:e7:4f:4d:e8:93:c5:20:72:0c:b1:e8:e3:b3:cf:2e:8d:be:
b9:0d:ba:b3:c7:8a:b1:72:26:be:db:cd:92:0e:0f:02:20:bb:
e5:3d:ad:5e:a8:ee:9a:65:4a:32:c1:72:2a:51:5f:fe:24:21:
83:a9:86:9f:a5:e0:6c:18:2b:bd:8f:d0:b4:0f:83:79:ef:8c:
47:0e:b2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:16:19 2026 by rpki-client