
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/21249c04-184a-348a-8117-43a314e9ce2a.roa
File: 21249c04-184a-348a-8117-43a314e9ce2a.roa (raw, json)
Hash identifier: jgOT98nzvkLhojAAz8YZTZe0G5UUA1igIlFYDNujULw=
Subject key identifier: 08:F6:4A:9D:93:91:5E:11:BF:5E:FD:31:9A:0D:B8:8C:CF:7C:CD:16
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584EA79E17F8C3206E9E71FE8C80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/21249c04-184a-348a-8117-43a314e9ce2a.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7155
IP address blocks: 172.242.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9e:17:f8:c3:20:6e:9e:71:fe:8c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=420f0964-52c7-4fe4-8ca1-6176fdb7777f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7f:a5:1b:e5:6f:02:0b:14:89:23:e5:e6:47:
d6:78:3f:7e:d7:a6:62:39:bb:f3:18:36:a7:20:64:
9b:a1:07:33:26:66:e1:95:a6:dd:aa:2a:ee:6e:b2:
c6:bc:91:de:a3:a3:c9:7d:fc:c6:8d:30:40:9a:1c:
65:fa:da:46:fd:b6:30:60:bf:5f:6c:b4:c1:4d:95:
05:2c:8d:41:a3:fe:7f:0e:59:f3:9b:d4:41:69:6b:
b2:f9:8f:b3:9e:dc:45:e4:a9:f7:c9:cf:2e:a4:74:
af:28:c8:72:12:2b:92:df:34:59:3e:6f:66:6d:17:
06:fa:39:34:f9:01:6b:bc:06:80:a8:89:0c:13:96:
91:00:13:10:0b:f1:04:7a:a6:d7:13:14:52:ed:10:
cd:2c:2d:0d:d5:5f:50:32:3b:bd:42:f1:c9:cd:e9:
d8:3c:9d:2a:63:78:d0:6d:e4:57:40:e7:55:2e:5d:
94:5d:c5:b0:b4:13:e5:44:e0:b0:57:1b:28:c7:72:
fa:e5:e5:69:b9:3e:72:91:fc:05:2c:d9:1e:33:2b:
21:2f:9d:55:6b:50:a9:14:1a:dd:59:a2:d1:46:6e:
a8:f0:82:b1:de:a3:c1:2e:44:3d:ca:03:58:9e:f5:
be:f6:37:9c:77:b6:e9:d9:d4:e9:f3:a8:27:28:26:
b3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F6:4A:9D:93:91:5E:11:BF:5E:FD:31:9A:0D:B8:8C:CF:7C:CD:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/21249c04-184a-348a-8117-43a314e9ce2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.197.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:27:ff:11:4f:de:43:3e:ab:9d:14:b7:45:98:36:7e:64:b2:
70:25:33:84:59:e0:6c:b7:f8:b8:74:50:59:c7:be:b7:98:7d:
37:e3:39:72:2b:d7:4d:1f:d6:02:07:1a:f6:b4:66:99:c1:19:
5a:30:f9:51:69:57:9a:09:06:6c:9d:8e:dd:9e:99:09:81:bf:
f0:20:6c:09:bb:a4:ae:7b:4c:61:81:3c:ce:32:f8:d7:e9:15:
4e:f9:a0:f8:31:74:7c:b3:dd:4e:67:20:b1:e9:e5:48:05:76:
bb:a5:0a:14:3d:2e:78:86:2a:a6:ac:e4:c0:ec:36:29:30:8f:
bf:fe:db:72:bc:5e:a0:52:67:b1:9c:65:57:ff:44:6c:d6:58:
ab:3f:35:c6:e4:89:7c:8b:d8:61:e5:95:be:8e:db:c1:a6:19:
2b:f8:9e:e3:70:74:a0:11:24:9b:21:9b:39:49:70:07:c3:76:
d5:eb:e7:13:0e:b2:10:af:21:79:d8:d7:d1:03:71:08:79:87:
3c:35:5f:de:ed:b2:49:b9:b8:fa:4f:e1:fa:1e:da:41:82:4f:
9f:7a:66:08:f5:70:89:2e:72:78:0c:16:42:dc:1d:7e:b1:ab:
58:6d:0f:b4:fd:93:45:c0:09:6e:0d:f1:06:d2:1f:7c:c0:7b:
c5:a8:d1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:36:37 2026 by rpki-client