
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85ed9880-dd4f-309c-8299-a73fc851fdb7.roa
File: 85ed9880-dd4f-309c-8299-a73fc851fdb7.roa (raw, json)
Hash identifier: ihdxK9XW0dTzcNHh5cxm+c7uvXKUlRuu0txVG2iTLRo=
Subject key identifier: FC:01:2F:E6:A3:56:FB:81:59:0D:EF:79:60:4A:4B:4E:CC:9C:31:68
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584EA7A01D9BB9AA7F0427538600
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85ed9880-dd4f-309c-8299-a73fc851fdb7.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7155
IP address blocks: 198.45.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:a0:1d:9b:b9:aa:7f:04:27:53:86:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=27e16f47-6fea-4f6c-9166-fe4f64c9b320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ba:02:ba:eb:4b:ed:f3:6d:f1:99:5a:56:6d:
07:ce:eb:e3:12:29:45:f0:d1:c0:1c:e4:d7:47:8b:
08:17:f5:47:c0:9b:58:40:1f:62:95:c7:0e:cf:5b:
45:c6:b4:2b:67:85:13:fe:45:91:75:23:c2:81:6b:
ea:30:92:7a:b6:b7:81:ba:ef:bf:a4:0e:70:e5:5a:
74:1a:0e:3b:2f:8c:58:c1:c0:dc:8c:e1:69:98:0d:
b4:58:b4:c1:b8:7a:00:19:8d:4c:96:4a:5d:f9:8b:
23:b4:53:e3:1e:0b:7a:16:d4:03:a1:b2:22:73:00:
f4:1f:61:db:33:25:36:47:b7:e5:fc:21:78:b4:d6:
70:ce:2d:3f:e6:f8:4c:a6:6c:46:2d:de:dc:24:f2:
6a:d4:0e:ee:1c:43:12:56:49:74:a4:7a:55:08:ee:
db:e4:b2:af:44:bc:65:bf:20:db:70:e5:01:7f:17:
17:be:b5:a0:3a:90:d6:c8:35:7e:e7:bd:a7:c4:9d:
e0:02:ce:bf:25:c3:cf:32:6d:16:c7:e1:f4:f0:20:
06:de:d5:13:d2:d6:7b:90:7f:5b:5d:35:d7:32:eb:
d7:ba:df:95:f0:6a:ea:71:e6:7f:d0:e6:1a:60:6c:
f8:64:d2:5b:b4:80:70:ba:6b:9a:3a:0a:7b:5b:28:
2f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:01:2F:E6:A3:56:FB:81:59:0D:EF:79:60:4A:4B:4E:CC:9C:31:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85ed9880-dd4f-309c-8299-a73fc851fdb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
198.45.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:47:c0:bf:2e:f5:e2:2f:a5:5a:10:d5:e2:91:a8:ec:6d:c5:
86:f8:43:ef:dd:77:75:f9:be:08:bd:c1:d6:88:ac:1e:41:03:
d7:1c:7a:7a:5f:dd:5d:89:6f:6a:90:90:24:0d:55:b2:1f:db:
91:04:28:c1:84:71:ff:ce:18:de:07:c1:94:15:4c:89:e6:79:
93:30:5a:cb:01:7f:c9:ac:df:65:42:4e:a4:ec:c1:3c:98:bf:
db:f8:6e:0e:95:2b:99:12:e7:5a:36:a1:a1:ac:57:6f:4c:75:
79:45:23:33:e0:27:08:0f:10:b5:43:0a:00:10:43:a0:51:61:
a0:2a:50:09:b6:81:a0:4f:5b:00:59:e4:3c:be:0d:33:09:a4:
65:a5:41:b8:e9:9e:a5:e6:53:94:95:e7:4b:59:73:95:5c:71:
38:c3:d1:5e:42:33:c8:10:a9:d1:bb:81:18:3c:db:dd:ab:5e:
56:a8:3d:c6:39:d3:a1:93:e9:ba:45:c9:a5:6c:d5:6c:50:04:
61:f7:ca:92:97:63:87:d2:81:77:ce:8f:72:11:35:50:79:3b:
2d:37:b1:91:3b:0d:b7:b3:82:30:0d:5c:1e:9c:bc:f1:5a:d6:
a9:9e:84:4a:9f:2d:22:9d:98:8b:f6:69:28:7f:67:5a:ee:dc:
b6:3e:ac:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:59:52 2026 by rpki-client