
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2c9121b5-c305-3491-b3e2-eafeec645052.roa
File: 2c9121b5-c305-3491-b3e2-eafeec645052.roa (raw, json)
Hash identifier: Ft0FTZCtj0h18dox98hhn5qri0JDmFTXyEsRcB+WVvU=
Subject key identifier: 15:B2:CC:45:CF:3B:85:AD:68:2E:E4:6A:7F:A7:E9:1D:E1:19:C8:59
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F49831A6A1FB28E0D6D856300
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2c9121b5-c305-3491-b3e2-eafeec645052.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 70.41.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:83:1a:6a:1f:b2:8e:0d:6d:85:63:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=2a11c1ee-a7f2-4243-a245-f2c2a6de9471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:10:ee:f8:29:1e:46:b2:68:83:47:30:40:40:
36:9b:ee:4e:f4:07:a2:9f:ab:f5:80:3b:06:44:21:
b0:a9:9c:8a:7d:be:de:73:d3:13:32:de:fc:95:15:
99:cb:9c:3c:bc:27:3e:8f:98:b6:66:66:3e:b1:ea:
2f:b8:97:00:57:cc:c2:b4:f9:29:71:51:e0:5b:f0:
36:03:c2:63:95:50:38:85:d8:ff:d7:cc:8b:b8:47:
b3:8f:a5:1a:22:67:d5:e9:15:78:c6:6d:cd:d9:30:
76:e0:d5:a1:b8:b4:91:3e:47:33:00:35:8a:0f:1b:
51:8c:98:01:a9:ec:34:10:19:53:e7:cb:19:4f:96:
56:b4:c8:af:5d:31:b8:4e:92:4f:b9:b0:11:47:1f:
68:5b:bd:f1:5a:1e:40:bd:76:4a:21:4d:63:0f:65:
a3:ac:d3:f0:7e:ba:cb:47:9d:8c:42:19:3e:9d:a0:
ad:ab:c4:05:e3:0f:18:ad:9e:ed:6c:23:c6:a9:76:
81:8b:c9:4c:49:e5:73:be:60:76:e6:47:d1:8f:7f:
52:fe:98:81:2d:d9:23:51:57:13:f9:1b:6e:f4:8f:
fb:d0:1f:f9:e7:ab:9f:77:db:b9:42:2e:be:b8:6f:
83:9c:d4:f0:51:c6:7e:7d:6a:fb:ea:0c:ae:9c:0c:
40:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B2:CC:45:CF:3B:85:AD:68:2E:E4:6A:7F:A7:E9:1D:E1:19:C8:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2c9121b5-c305-3491-b3e2-eafeec645052.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.185.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:3b:c5:8d:27:a2:2f:7e:9f:01:e3:2b:e7:c8:13:4a:2e:f1:
7e:e9:5f:59:96:7d:80:20:6a:a7:87:05:42:46:a3:9b:a1:4b:
18:35:bc:fe:22:d7:10:9f:f0:70:9e:94:da:c6:90:a1:fe:f0:
41:02:e5:74:1f:a1:ec:17:9d:95:bb:d3:1f:1f:b6:f3:44:cd:
b6:37:9d:aa:ef:4f:ea:c6:02:c3:db:35:09:1b:4f:3c:f6:af:
a7:82:1b:78:b0:a8:6c:61:3e:44:ff:99:10:bd:e3:c6:64:9e:
9c:73:47:89:a0:91:90:18:8e:2d:2a:e7:5b:0d:c2:be:67:31:
14:0a:06:dc:39:cc:92:6d:83:4a:dc:04:00:5e:d0:16:7f:b8:
4e:81:49:d6:d6:7f:20:a6:e5:31:6a:9e:13:4a:ff:d8:64:57:
82:a3:7a:b9:ff:2d:8b:ea:a7:8e:c7:e6:dd:7e:77:95:e7:cc:
21:c7:d4:56:ca:56:dc:68:58:8d:17:b1:6c:0a:a5:c8:6c:e0:
ff:83:c1:80:ab:ff:ff:97:d4:9e:e1:29:0a:7d:79:b2:3b:ca:
4f:fd:44:e7:47:31:20:1f:be:7d:d3:94:4a:c4:87:d1:df:12:
ed:a0:f3:9b:20:36:d0:06:1e:f9:e4:4e:18:da:61:2a:e6:1b:
a5:3a:e8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:54:56 2026 by rpki-client