
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/48de43b2-2480-33ef-9a52-04b037ff14a4.roa
File: 48de43b2-2480-33ef-9a52-04b037ff14a4.roa (raw, json)
Hash identifier: JmPsUYjIfPlmtabqkmWcWLxu2Mpk2G73rBGsqZH7CH4=
Subject key identifier: BD:45:A6:68:48:D1:1C:95:A1:DF:B5:1C:2A:36:AE:28:55:F7:E2:B4
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584EA79DD3CBCB2BD54DB24F2980
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/48de43b2-2480-33ef-9a52-04b037ff14a4.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7155
IP address blocks: 75.107.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9d:d3:cb:cb:2b:d5:4d:b2:4f:29:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=84b97f8e-b9e9-4607-8ab3-419b0745268b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:84:be:31:8b:5b:e2:5a:17:30:3a:41:16:3b:
eb:bd:c6:eb:08:16:8b:19:39:a7:6d:1a:cd:5b:8b:
1b:eb:91:f0:f2:a3:87:49:fa:31:a5:64:24:b3:69:
93:dd:08:d0:6a:55:c2:6d:b1:63:11:06:5c:3e:db:
32:5d:c5:aa:75:5f:d6:b5:79:38:02:9c:0f:bd:88:
60:89:dc:eb:06:f6:6b:98:f8:37:6e:29:f8:d2:a6:
e8:a6:9d:cd:9f:51:fe:0f:0b:69:35:e7:dc:0f:23:
79:f8:27:9d:bc:da:a5:3f:2e:bb:e3:51:15:3e:06:
5f:c4:11:bc:a1:72:c3:66:a7:e2:e6:f7:29:12:3d:
e8:d3:19:7f:1a:3c:b9:d6:d2:46:2d:ce:6a:13:fb:
d1:82:fd:9d:8e:17:15:3e:bf:9e:6e:c9:0a:28:e1:
8c:72:81:bc:35:5e:1a:4a:8a:51:49:d3:a0:5d:5e:
e8:62:19:6d:f2:0a:41:30:a2:c9:45:13:c7:53:a6:
04:60:61:a7:bf:94:a1:a0:64:81:70:54:ed:84:36:
f1:cd:94:ed:09:01:e3:a2:53:96:7d:08:cb:af:d6:
e6:03:c8:b3:ba:6d:9a:6c:93:87:71:96:22:ad:9a:
18:c0:e7:b5:7e:54:c7:f3:cb:8e:d4:a1:3d:1f:da:
44:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:45:A6:68:48:D1:1C:95:A1:DF:B5:1C:2A:36:AE:28:55:F7:E2:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/48de43b2-2480-33ef-9a52-04b037ff14a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
75.107.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:35:3f:4b:85:1a:58:fa:9a:b9:e8:90:c0:64:08:f0:97:3b:
b7:89:2d:3e:d5:e7:ce:55:60:2d:d0:ed:3b:d3:2c:2a:d0:68:
49:b6:73:24:05:2d:23:41:7b:97:dc:22:94:a8:d3:26:66:e8:
e0:1d:8f:e1:32:16:a7:97:03:6a:76:74:24:ea:50:86:b8:da:
9c:c1:a3:12:9b:d4:de:73:11:00:6e:2c:6a:7f:4c:5b:7b:d1:
ca:0e:5b:28:11:25:62:3b:e8:a7:f4:30:73:bd:ee:06:f2:49:
05:ea:98:68:0b:6c:82:2e:2c:88:c5:bc:ec:ae:51:27:21:7f:
60:37:66:1a:73:5d:a6:38:4f:62:66:26:7f:3d:e4:cb:15:b4:
b7:81:78:61:fa:db:2a:55:e3:8e:a9:dd:7e:0d:de:3e:d9:88:
75:f8:e1:eb:7b:41:c2:c6:17:4b:a7:52:92:e5:ac:05:7f:a9:
10:d5:22:9e:84:1f:0a:e2:35:68:d5:28:70:f2:d4:4c:74:ea:
b9:f5:bc:f0:99:17:5d:c8:28:91:87:70:0c:fa:4d:c4:45:dc:
43:6e:8c:2d:f7:91:7d:65:3b:3e:98:a9:38:ae:7b:39:ce:c5:
93:cf:d8:b9:4c:83:68:8c:29:60:60:5d:00:b0:86:db:65:fb:
2a:66:3b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:56:04 2026 by rpki-client