
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a4c9f293-34be-3685-8779-a865b14529b3.roa
File: a4c9f293-34be-3685-8779-a865b14529b3.roa (raw, json)
Hash identifier: +OSfP6NOi9JXdu1C4qHg5mUz9BRpCrsiMqrpkyuxboU=
Subject key identifier: 18:28:AF:25:08:DE:9D:26:0D:EA:B3:AA:31:DC:40:87:1E:D6:5E:6E
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F497B9466BF1247D2B5F5C500
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a4c9f293-34be-3685-8779-a865b14529b3.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 172.242.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Oct 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7b:94:66:bf:12:47:d2:b5:f5:c5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=91dae312-9b54-454c-a18f-3e046d8a27b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:98:50:ff:d5:46:83:8d:23:24:a8:d3:2e:22:
dd:f2:6f:a9:83:00:2d:cc:65:79:4c:20:10:8f:69:
dc:6f:91:88:ae:89:5e:ef:e1:e3:da:02:ad:ca:85:
86:cc:de:d2:ef:fa:ef:06:36:4f:0b:6e:ae:02:d3:
59:90:55:cb:52:1d:b7:7e:14:ac:e0:d2:a6:52:06:
e0:c3:2d:4d:40:27:7f:8f:97:6a:7c:03:06:b2:29:
a3:74:bd:2b:af:42:2f:57:99:68:80:1b:33:98:3c:
29:7a:2b:cb:83:98:81:4f:46:e0:5a:f0:5b:f0:43:
b9:c1:0c:15:65:84:eb:74:50:f4:6e:f5:a9:c5:12:
9b:ef:fc:7d:b7:fa:3c:14:a0:2d:3f:4f:a6:da:57:
bf:86:d0:c6:db:4c:b0:f4:38:7e:28:39:b7:11:6f:
d9:7b:0d:87:ef:aa:f3:65:10:13:17:4a:32:0e:1f:
f9:75:8c:78:af:86:b7:3c:c1:23:ec:ff:3a:c9:f6:
69:62:19:89:85:15:e1:36:03:3a:b2:57:85:b5:ed:
49:2c:e6:89:0c:b7:2d:19:f5:c1:a3:3c:43:2c:0f:
3d:8f:81:0c:86:35:43:bd:2e:13:05:41:67:b7:25:
98:e9:e3:ba:97:2b:45:fd:59:78:2e:e2:e6:e3:3f:
83:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:28:AF:25:08:DE:9D:26:0D:EA:B3:AA:31:DC:40:87:1E:D6:5E:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a4c9f293-34be-3685-8779-a865b14529b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.184.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:58:72:53:6e:3b:fb:e0:96:3e:f4:fd:b7:ac:07:d8:44:b8:
2b:b1:f5:a2:57:d3:9b:d1:a9:e7:cd:39:83:bc:34:3e:63:fa:
3c:be:8d:be:fd:c8:a8:2b:62:ae:e8:38:50:ac:9c:0a:78:ad:
c7:71:f5:10:4c:f0:28:24:35:c8:7d:88:28:52:6c:40:1a:41:
d3:67:e6:3a:7f:b3:0b:18:0e:ac:8f:2a:b2:3a:14:ff:1d:be:
5b:c5:c4:d1:54:81:6f:89:3c:25:57:65:1c:17:31:ee:ed:bb:
ef:aa:79:6f:d3:77:f8:43:a2:44:2a:4d:15:80:92:9e:9e:76:
d0:7d:24:46:96:10:f8:79:1e:6a:47:43:aa:4f:05:5f:49:be:
9d:3a:6a:7b:3d:f1:f2:f9:54:08:dd:cf:ab:95:f6:57:66:f0:
19:74:9d:38:32:40:26:2e:34:1b:0a:37:f8:7e:bc:cc:22:68:
01:03:4f:a3:92:24:bd:6f:8c:b1:3d:4c:66:33:70:eb:36:96:
84:9e:fd:aa:bc:a2:37:b9:ee:c8:48:e1:b1:14:31:79:be:d0:
ee:f0:f9:0e:dd:a5:bb:87:9d:a0:15:d2:91:6d:28:6c:43:08:
ef:f5:c9:02:58:96:79:7b:ac:35:4a:46:66:81:f0:65:c1:eb:
06:b2:f6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:19:13 2026 by rpki-client