
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/83d5826b-959d-3af3-811f-1be839e2d7ea.roa
File: 83d5826b-959d-3af3-811f-1be839e2d7ea.roa (raw, json)
Hash identifier: pDKHtCz9FBH7RCjf0/sPwmgjdM+ZDmeCstkd/YzAZYw=
Subject key identifier: BB:3E:F0:BC:F0:AC:B8:1C:18:36:DD:DA:46:16:97:50:0E:61:D8:2F
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F497AFC6ED717D96FFF290CC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/83d5826b-959d-3af3-811f-1be839e2d7ea.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 70.41.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7a:fc:6e:d7:17:d9:6f:ff:29:0c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=2e0f26fb-11db-40e4-adb3-6d2bea9b4a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6a:43:d4:69:a0:72:82:60:29:f1:67:b6:56:
ff:dc:ed:66:23:77:f0:4f:7e:7b:b1:80:c6:51:c4:
13:ed:b4:b4:9c:54:b1:8d:67:57:31:bf:a7:6b:bb:
c9:49:4e:ed:80:8f:13:8a:7f:6b:86:16:d9:19:d8:
35:32:44:94:79:27:fc:b7:7b:b0:34:fa:1a:c0:a9:
bf:89:de:76:fc:5b:b3:47:04:70:c2:c3:29:01:b5:
42:43:6a:1f:0f:b1:31:c9:ed:b7:57:f8:88:86:c9:
30:3e:31:8b:db:a2:df:fc:45:1e:d8:20:99:c6:9d:
14:da:4f:dd:c6:49:1e:84:26:3e:df:e4:41:a1:65:
6e:cd:e4:c7:c1:26:d7:a9:bb:6e:16:49:11:39:ad:
ce:93:c1:99:cd:54:12:61:e7:d3:7a:44:94:bc:64:
64:b7:4e:e8:2a:7b:e8:07:6e:b3:1d:29:2e:f2:b8:
3a:e0:18:87:f1:e9:68:57:07:99:98:aa:20:c6:f3:
18:f9:4a:1d:5a:d5:c5:d5:58:bd:02:90:79:5d:18:
1c:8a:f2:b6:24:00:98:06:a8:d8:09:fd:f6:d1:c6:
45:7e:a3:08:41:d7:70:d2:47:e3:3f:82:ff:ec:03:
9e:5f:fd:5c:5a:ea:55:5d:e9:77:b0:79:ee:52:87:
de:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:3E:F0:BC:F0:AC:B8:1C:18:36:DD:DA:46:16:97:50:0E:61:D8:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/83d5826b-959d-3af3-811f-1be839e2d7ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:f0:a6:58:74:82:10:ad:2c:e9:76:34:1b:41:1a:e8:c7:3e:
84:e5:3c:ee:29:2d:fc:54:bf:7b:64:8a:a6:58:6b:ea:e9:28:
5d:12:5f:8f:a4:c2:c8:0b:3d:a8:ca:e9:20:04:35:0a:6d:59:
61:87:ae:cf:e9:b8:2b:8d:ea:7a:c4:43:2e:12:ba:9f:42:26:
d8:bb:98:68:13:e5:e8:65:7a:e0:8b:dc:02:ee:8e:f2:56:04:
e2:e3:9a:e8:b4:be:ac:5d:e6:eb:73:d0:97:67:8f:96:93:46:
34:b0:a0:b9:86:83:55:a9:a9:8f:4d:3e:0e:1b:66:e3:5a:f8:
3a:72:0c:30:9e:f1:b3:63:09:44:ac:4e:77:11:13:a5:bf:e9:
a2:77:26:bf:b7:12:fa:cd:d3:0c:70:b8:44:ac:04:54:d2:20:
46:d7:99:50:ca:29:7c:de:6c:66:e3:82:e1:00:ba:c5:4f:78:
cd:58:0f:f3:fd:ef:36:47:bf:63:0e:25:61:41:bc:c1:25:15:
80:4f:bd:c1:5e:ad:a4:28:b1:3e:25:f0:ce:53:e8:f3:a9:ba:
5d:8c:c8:f0:da:9c:96:14:ea:76:07:cc:8a:c5:34:3a:68:d0:
45:f2:76:81:c3:a0:92:06:35:1a:46:4f:87:1a:66:bc:52:97:
fe:ee:24:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:31:14 2026 by rpki-client