
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/967c7534-3065-3eaf-b81f-4f4f2f4f99e9.roa
File: 967c7534-3065-3eaf-b81f-4f4f2f4f99e9.roa (raw, json)
Hash identifier: 9lehQQtROZpa7MU1/sGhyUDQw+g6ZsOBHZWLJ/6GhkA=
Subject key identifier: 27:C1:7C:4D:85:E9:7E:61:E8:CE:5C:3F:8E:0E:50:F2:3D:F7:19:A7
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584EA79D5D10B79FAEE643782180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/967c7534-3065-3eaf-b81f-4f4f2f4f99e9.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 16491
IP address blocks: 70.41.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9d:5d:10:b7:9f:ae:e6:43:78:21:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=098243f9-5fc7-432b-a05e-fd7b89d6d9c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c9:c8:b3:54:25:e7:d6:df:0f:53:f9:64:6a:
be:56:81:3b:cf:b2:70:5f:7f:3c:9b:62:9a:44:de:
c3:b0:9c:9c:58:99:ea:b5:d9:b7:2c:56:8d:16:7a:
53:f6:4f:86:06:bc:48:bf:ba:84:1d:2e:51:d9:21:
2d:00:ef:4f:1d:48:d5:78:6d:4d:0a:36:4b:c4:68:
3e:d2:4b:70:96:e2:d6:ce:42:d6:2f:b2:b1:8c:05:
ef:26:2f:39:3c:f3:96:51:6c:26:95:e5:47:86:9a:
54:41:f3:7d:8d:39:ad:5b:d3:ae:eb:06:fd:ad:f5:
cb:0e:6e:59:21:d1:59:54:f6:e0:72:a4:75:69:93:
7e:26:6f:a6:21:51:38:79:90:12:38:8c:1b:f5:44:
c6:0a:17:b0:8e:38:6d:52:9d:c5:9c:d5:43:a4:4c:
ec:51:30:a7:7c:eb:c8:38:54:31:ce:e3:53:6a:64:
0e:8b:e2:c1:d4:ca:65:af:83:8a:31:58:f6:b2:5a:
7d:d9:90:3d:27:7f:9c:5d:f7:fb:37:65:da:88:9a:
49:b3:ad:b8:10:da:af:5b:30:30:3c:48:6b:76:cc:
bb:0b:75:32:ab:02:6a:9d:4b:35:29:09:bd:78:2a:
7b:45:28:6a:9b:6f:8e:a3:96:34:33:d7:29:a7:ba:
aa:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C1:7C:4D:85:E9:7E:61:E8:CE:5C:3F:8E:0E:50:F2:3D:F7:19:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/967c7534-3065-3eaf-b81f-4f4f2f4f99e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:02:5d:2d:7b:df:a3:be:15:ae:6d:76:f9:18:02:ad:dd:66:
31:a6:48:82:c5:91:94:9f:8a:9e:61:74:fa:a8:7d:06:d4:2b:
bc:a9:65:16:5c:49:3b:f5:0c:37:bd:f9:43:0b:bc:47:1c:7b:
87:9c:f5:32:13:1d:7a:bf:74:95:64:61:fe:a0:4a:b0:a9:6d:
fd:23:4a:a7:bf:f6:06:76:c9:1a:9f:5e:2c:bc:f3:eb:82:ae:
fc:41:cc:63:85:fc:ad:59:bb:61:9e:92:2c:4b:92:51:91:6c:
f5:7e:6e:0c:12:18:fc:b3:ae:a4:d8:f4:73:d9:b5:10:ee:e9:
d2:08:49:96:52:54:17:2f:3c:fb:15:a6:83:2f:fa:ae:44:5c:
d2:14:a7:12:dc:28:de:46:f1:5c:56:7d:20:aa:3f:90:1b:af:
f1:63:7a:8b:0d:46:f9:99:a8:9a:f4:1a:25:33:ad:ec:7d:14:
b9:73:a4:75:af:12:c5:35:6a:e9:b2:e4:8d:04:1f:b6:cc:34:
44:86:e3:8a:96:81:ea:71:c1:54:d2:77:65:43:55:3e:f1:96:
c7:5c:29:04:bd:e3:0b:a9:e0:96:df:02:80:15:a6:60:6b:bb:
7f:7b:52:3d:f6:c2:22:33:40:3e:2c:32:83:a4:51:fb:aa:3c:
b7:01:5e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:15:53 2026 by rpki-client