
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ac9e06ea-4249-3ef5-8fc4-315858a7630f.roa
File: ac9e06ea-4249-3ef5-8fc4-315858a7630f.roa (raw, json)
Hash identifier: zAghZ0l+zgmd6MVQlca3JORIeDVk8QzrxotU7sFKrEI=
Subject key identifier: 24:F4:07:EE:4B:37:36:FC:F5:33:E4:47:42:D0:F0:02:6A:7D:16:7E
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584EA79D678B0BE100B762E88D80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ac9e06ea-4249-3ef5-8fc4-315858a7630f.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7155
IP address blocks: 172.242.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9d:67:8b:0b:e1:00:b7:62:e8:8d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=5f302d46-84f1-4198-9e53-56ddff0f0474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c9:b8:58:f9:de:97:02:da:e0:5b:30:65:24:
f5:48:eb:43:89:ed:2c:60:7f:54:eb:7d:17:bf:72:
e9:6e:95:82:60:e3:31:5a:53:2e:71:23:6d:b1:55:
fd:ec:f4:46:15:1e:51:1e:dc:3d:db:34:69:ea:2c:
e4:09:47:b7:87:e9:2e:e8:ad:5a:a3:43:ea:cc:5a:
6a:e9:1f:19:6e:1f:1c:e5:22:a1:43:4c:3f:9e:e3:
8a:cb:11:91:e0:5f:97:ca:57:0e:44:28:7b:39:41:
86:b7:9d:25:c1:7c:99:2c:06:de:27:fb:77:27:6e:
c7:a1:ae:8d:1f:03:e9:0c:06:5a:17:85:42:e0:6b:
e7:8c:aa:d1:6f:f1:41:43:8e:ad:24:99:39:45:11:
4e:07:29:9c:51:13:34:3d:6e:8b:08:59:b1:96:b6:
98:f7:aa:ab:7d:57:d4:fc:e4:04:2f:94:de:6a:02:
f4:ec:22:41:a2:71:19:52:25:12:b2:5f:ad:77:78:
84:c7:cc:75:1f:bb:50:1f:4d:33:ee:77:6e:46:5f:
f5:7c:50:53:c3:68:70:b5:41:24:bf:06:7a:4f:c8:
7b:e6:e2:a0:aa:1c:72:14:39:b4:c1:7f:b0:d5:ff:
e8:80:d7:28:eb:f2:46:1b:b3:08:a6:66:e7:2e:f5:
26:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F4:07:EE:4B:37:36:FC:F5:33:E4:47:42:D0:F0:02:6A:7D:16:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ac9e06ea-4249-3ef5-8fc4-315858a7630f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:a6:87:0d:4f:8b:bb:9a:85:f6:e3:fe:ef:54:4f:8a:85:e6:
ac:9a:50:76:6f:4c:1c:88:a9:8a:5a:27:4b:fb:d9:80:47:ca:
3f:79:5d:b8:61:91:cf:df:e8:bf:e6:21:90:1b:5e:f0:61:17:
56:13:9b:e5:5d:1a:64:ed:86:09:1a:46:82:4a:c5:af:3b:c4:
0e:8b:09:80:32:0b:79:09:7a:9c:1c:7b:a7:63:d7:81:e9:cb:
32:9c:17:fc:c2:35:d4:9f:31:12:1b:1c:f7:9c:db:5f:26:c9:
9f:c4:c6:1b:ee:29:47:b2:41:50:c8:f4:d7:5d:8c:1b:30:7b:
07:24:2e:11:1d:e3:af:42:bb:90:e9:29:67:f6:4f:dd:8a:f2:
1b:5a:48:48:5c:f4:64:60:4b:50:3e:92:5f:93:6a:27:88:2b:
e2:1b:81:04:17:00:32:77:9a:68:90:1e:2d:d4:48:f8:59:01:
69:37:23:21:17:a8:97:6b:7e:a8:a3:7f:44:e2:3e:9d:9d:50:
85:1a:7c:33:f7:e0:03:f6:29:64:94:fd:fc:d4:da:a1:16:dc:
b3:f6:0e:22:7d:a1:6d:30:b2:fb:9c:28:6a:c6:44:23:a7:bc:
d9:11:73:50:0a:c8:99:ab:a8:df:30:3a:da:c2:9e:ef:cb:e5:
46:a7:f2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:15:30 2026 by rpki-client