
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33f64eae-d336-3410-8c6a-2de4bf6a4c9e.roa
File: 33f64eae-d336-3410-8c6a-2de4bf6a4c9e.roa (raw, json)
Hash identifier: sHrExypnovm6S0rOgkAMPOVYT1Y4S4p6hgOx8V4iSTI=
Subject key identifier: 78:1F:9E:A4:D1:F0:F6:9F:76:F9:FA:26:EB:BB:08:EA:AA:07:4F:42
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584EA79E030DE0AA828A5E7ADE80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33f64eae-d336-3410-8c6a-2de4bf6a4c9e.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7155
IP address blocks: 162.72.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9e:03:0d:e0:aa:82:8a:5e:7a:de:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=6622d78a-8554-46fa-a7f2-996818986387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e8:3c:3f:d1:26:b5:62:b6:4c:2a:27:5d:35:
f9:a3:b2:7b:5a:e4:e4:59:99:a9:6b:b8:8c:eb:23:
8f:f2:30:ec:cc:88:5d:ca:8c:99:d9:59:80:73:7e:
97:8f:a5:f9:30:04:95:23:6c:67:ed:5f:0c:49:ae:
42:c8:23:1b:e0:b5:b1:f1:0f:73:e4:0a:a2:d2:20:
03:b2:6d:16:d2:97:2f:e9:06:76:ba:6d:f4:76:f0:
c5:42:bb:0c:c0:8a:74:62:2d:72:34:9a:7d:47:b5:
59:6f:33:b2:11:20:91:58:3f:2f:84:f7:64:97:75:
8d:39:78:f8:09:e8:76:7e:02:37:63:f0:a5:4c:8f:
ab:68:c2:72:74:20:59:3b:0f:ae:3e:70:85:86:1a:
aa:49:4b:56:f7:38:e8:27:d5:5f:47:fc:44:ab:7b:
77:38:05:c0:73:af:0f:b8:38:ff:87:8a:9c:b5:9a:
45:e7:7d:68:d9:01:d9:b3:49:5f:58:d3:96:36:a3:
31:fa:4d:8e:71:8f:0c:9a:a7:01:75:cf:93:e2:5d:
36:a2:83:52:78:75:83:5a:69:95:d4:e8:e9:af:44:
96:54:15:a5:05:97:b1:54:40:95:aa:6a:c9:be:27:
80:61:70:4e:8a:11:42:32:fc:16:de:8e:d6:fd:c0:
f8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1F:9E:A4:D1:F0:F6:9F:76:F9:FA:26:EB:BB:08:EA:AA:07:4F:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33f64eae-d336-3410-8c6a-2de4bf6a4c9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
162.72.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:85:db:1f:fa:40:62:19:cf:85:f2:4f:a9:57:29:5d:88:17:
a1:61:cf:06:6d:46:d2:11:35:6a:5e:06:f7:c4:de:c4:63:c1:
60:51:93:d0:0f:6a:3a:e7:a5:1c:d5:ab:1f:10:1c:e3:26:1e:
e2:64:29:57:a4:37:4e:2f:3e:fe:ca:f3:ec:5f:b0:5e:ff:5a:
20:25:78:bf:47:dd:49:81:bd:52:a5:a1:92:63:c3:77:ea:78:
f3:a3:eb:96:29:e1:39:9a:ee:c1:73:5c:17:ec:56:22:8f:40:
b2:ae:47:0a:ba:37:ce:01:6f:43:dc:f9:c5:fb:14:33:d4:b5:
bc:20:7e:4f:f7:a4:27:81:d9:fd:55:17:6e:7e:6c:af:ea:41:
e0:f9:8e:6f:b2:06:13:08:b5:07:e1:03:35:f3:5f:1c:81:ee:
0e:e9:dc:fb:3b:62:be:36:1c:0d:5b:ab:dd:91:ac:4f:7f:77:
2f:3f:e6:e0:04:e0:0c:34:fd:c5:96:05:d5:2d:fd:76:b4:3d:
af:cc:f7:bc:58:74:92:77:58:89:2d:ce:bd:28:f2:0d:f2:95:
3d:17:e1:3c:2d:4f:c7:47:54:13:22:79:04:8e:56:44:68:6e:
02:19:98:10:50:b3:90:68:aa:35:da:dc:28:09:c5:43:0b:72:
53:0e:ca:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:39:26 2026 by rpki-client