
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/50d2c3f0-52cd-340d-bedf-ea1f163bd67b.roa
File: 50d2c3f0-52cd-340d-bedf-ea1f163bd67b.roa (raw, json)
Hash identifier: UbZ12tF+bxODPFNInQoSOKIxBeB1pSzpLUlIyG9nkqY=
Subject key identifier: 09:28:A2:A0:22:46:22:10:A8:8C:31:03:40:F6:22:BF:69:A2:7D:A2
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584EA79E25440B5BB7E8AF0ECE80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/50d2c3f0-52cd-340d-bedf-ea1f163bd67b.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7155
IP address blocks: 172.243.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9e:25:44:0b:5b:b7:e8:af:0e:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=771e11c6-7823-4f2e-a94b-a374bcca5b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b5:a0:27:46:07:e3:a4:ef:83:6d:26:53:3f:
20:3c:d8:c4:c7:bd:fc:c5:11:a6:d4:37:36:f2:aa:
ed:59:fe:39:cc:82:30:85:5f:72:39:ce:27:cc:ac:
f5:05:97:39:4b:1f:76:77:49:9e:30:07:1d:9f:3a:
b5:62:35:d6:02:57:b9:95:ff:06:94:3b:53:eb:7c:
7f:f5:ca:b4:4c:10:47:81:1c:a2:ce:98:bd:c9:ac:
25:8b:11:6c:c7:cd:df:37:b8:a1:82:1c:ec:39:bd:
af:6b:55:e8:8e:8c:30:28:a7:f2:19:7f:cc:28:95:
54:db:1f:68:00:26:e7:3e:e2:3a:64:83:40:d4:0e:
55:ac:fc:72:fb:94:c3:f1:ea:45:5a:25:77:8f:23:
da:2e:33:de:f3:60:4f:c9:41:67:7a:4c:ed:9e:46:
8f:2c:ba:90:ff:d8:1c:88:3a:e8:66:92:f3:e0:fd:
3c:a1:71:72:4c:e2:d6:08:7c:d2:f8:f2:3b:76:7d:
45:c0:9b:b2:0f:a0:36:70:24:e4:92:56:76:45:10:
ed:4c:17:5b:be:d1:0b:55:dc:17:97:7f:e5:9c:4f:
38:63:58:4b:7c:77:bb:6b:87:90:8c:12:9c:f4:2c:
11:b7:e4:2e:05:ed:88:40:bf:24:50:04:94:85:84:
79:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:28:A2:A0:22:46:22:10:A8:8C:31:03:40:F6:22:BF:69:A2:7D:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/50d2c3f0-52cd-340d-bedf-ea1f163bd67b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:ab:68:a2:3f:44:96:74:b9:5f:6e:79:2e:ad:a7:68:5d:87:
fb:cb:ff:c2:3a:77:38:bf:e4:3d:9e:d5:f2:5e:bf:9d:58:bb:
ad:e4:9d:cb:1b:0e:30:87:19:e8:95:3a:27:c1:f3:d9:4e:1e:
32:d6:30:f7:b6:c6:b0:87:37:a6:17:c6:74:67:97:a6:88:5d:
f7:ba:d1:36:fa:3e:52:6e:8c:bb:d7:ed:64:ea:27:be:0d:29:
ff:41:b4:93:9f:f0:39:67:22:a5:82:3a:10:1b:7f:a5:64:18:
b0:52:11:00:f4:f0:2b:dd:11:fe:01:94:e6:fa:6d:e1:43:d1:
ca:f1:6e:b9:e7:f7:01:0f:45:1b:ea:f6:bf:33:4a:6a:79:9c:
2b:31:9f:d5:82:b8:c8:48:76:c8:72:04:2e:36:55:b8:6c:c9:
d7:1b:c3:06:70:0a:5e:8b:ed:f4:65:9e:f5:72:55:51:00:10:
8c:af:5f:1f:79:a3:0d:a0:d0:fd:84:a0:b3:f3:7e:39:c9:ad:
25:c2:80:6b:fb:a1:70:ac:09:86:53:b1:de:c8:f2:88:49:f5:
e7:42:06:59:3e:27:70:8e:ea:3f:b5:60:a4:2a:14:39:5f:4d:
d3:a8:ff:92:d8:d9:d7:d1:0f:7a:03:41:50:eb:7d:f7:5d:50:
b3:d7:b2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:56:13 2026 by rpki-client