
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/993ad79a-98a2-3187-8b24-728cada43a62.roa
File: 993ad79a-98a2-3187-8b24-728cada43a62.roa (raw, json)
Hash identifier: 6gTgG0tIhXyqLWUnFdtwXF+4DbZUvh3JiVtKPrtLc+c=
Subject key identifier: E3:44:91:8F:62:93:DF:EA:61:5F:0B:33:CD:11:F3:DF:FC:17:91:E5
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584EA79F1F42D9BF8E0C7E38CEB8
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/993ad79a-98a2-3187-8b24-728cada43a62.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7155
IP address blocks: 72.173.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9f:1f:42:d9:bf:8e:0c:7e:38:ce:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=43fcc408-637d-4e60-b954-6553678e5e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d9:3c:78:a3:8a:31:00:04:53:61:4a:0f:75:
09:16:bc:d5:74:a2:98:9b:8e:b3:fe:ca:43:fa:13:
3b:11:5c:9d:06:c7:8e:d1:c4:6d:52:f6:db:c1:b6:
d3:73:f6:80:5e:51:e4:a2:04:91:9b:59:d5:cb:85:
ca:f1:1f:8f:52:9f:cf:be:94:0d:8d:44:57:0a:58:
9e:82:79:04:47:98:d9:c4:f5:45:85:fd:41:e0:f5:
67:7d:b3:c1:af:f2:4e:a6:ea:c8:d1:38:ab:8c:bd:
3e:0a:f6:ea:12:74:aa:fa:6a:4e:21:a6:4b:b8:86:
74:c6:fa:5f:61:a4:33:0d:de:b2:2f:a2:6b:f4:17:
8c:28:dd:c1:3c:f3:b0:25:c1:07:91:26:da:e9:2d:
b7:6f:02:47:6f:23:da:7f:c1:e5:7b:7e:a9:48:cf:
9d:dd:95:1b:21:8d:42:9a:be:01:d3:0b:78:7f:90:
26:3d:c0:2e:4c:b8:dd:f4:c9:29:5b:51:96:79:d6:
00:74:2e:50:59:7a:20:1c:b1:0b:42:c2:62:92:46:
03:1b:5a:2a:4e:29:ef:ff:cf:1b:37:8d:68:f9:e1:
db:bf:8e:6f:5c:26:13:15:59:f8:d7:38:0b:28:ef:
80:9c:f6:85:03:a4:8a:10:d6:8e:09:ab:1e:9f:70:
56:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:44:91:8F:62:93:DF:EA:61:5F:0B:33:CD:11:F3:DF:FC:17:91:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/993ad79a-98a2-3187-8b24-728cada43a62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.195.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:21:a2:73:96:73:95:9a:84:7f:80:fc:37:3b:7b:be:3a:84:
d2:72:85:51:f4:9e:5c:d2:cb:1b:39:ce:c9:e3:14:3e:aa:12:
5e:4e:f3:3a:66:e2:51:88:ac:5e:99:83:91:b4:10:4e:16:96:
37:cb:ae:23:be:ec:26:b7:52:bf:0c:bc:14:33:00:42:95:d7:
1c:7a:81:4e:6e:45:ed:cd:0b:a7:38:0f:79:b2:12:00:fb:9b:
07:0c:d7:af:b9:26:f5:f0:89:1a:3c:25:96:f5:ce:29:27:de:
48:5f:70:d3:56:7b:2e:ce:81:f0:96:db:22:1b:ab:42:36:4d:
89:90:fd:7f:26:87:e9:25:1c:c0:b5:78:71:ed:b8:d2:67:04:
27:17:3d:5e:ab:07:aa:6a:28:a2:59:12:07:f3:55:89:25:02:
0e:38:3b:24:56:49:62:27:c9:31:46:45:4a:ac:d3:b9:08:9a:
c8:93:60:b1:0d:0c:45:bf:d2:fd:9e:97:3e:6b:d5:21:73:05:
04:3b:5b:6c:d2:83:05:48:7f:ed:36:d0:9b:dd:9d:28:6c:b7:
50:2f:1a:a5:5f:d8:20:3c:91:45:4d:a0:78:22:26:b1:6b:96:
54:2f:b5:13:59:f7:c5:9c:b2:6c:54:c7:2a:0f:d9:19:7e:be:
41:b6:e1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:36:06 2026 by rpki-client