
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8197550-4b47-3563-b11c-54b7f751a9c0.roa
File: b8197550-4b47-3563-b11c-54b7f751a9c0.roa (raw, json)
Hash identifier: 45DuI7iuxzsKJ6smUQhHZpSx0QJF4fS9Q1sPmNeJJNY=
Subject key identifier: 2C:12:07:BB:5A:24:49:6F:17:82:DB:7C:49:4D:29:2A:D3:25:96:77
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584EA7A01D9056AA7D10BF9EB8C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8197550-4b47-3563-b11c-54b7f751a9c0.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7155
IP address blocks: 198.45.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:a0:1d:90:56:aa:7d:10:bf:9e:b8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=38c3f568-911e-4883-b66f-04880d851ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d3:f0:04:81:80:ef:c2:c1:99:a2:b3:94:91:
09:8f:01:f9:4e:68:55:2e:75:13:8e:93:2a:41:5f:
66:7b:b9:3f:64:c8:5e:12:61:50:ff:22:2f:ed:24:
03:9c:65:59:bd:c4:af:c4:95:aa:d9:da:8e:14:42:
cc:1a:38:35:00:dc:10:fa:0e:eb:a5:2d:1f:a4:e3:
64:26:2b:bd:40:e5:fb:f7:ef:ae:e3:4c:b1:4b:a7:
15:2c:2f:e7:31:2e:77:5e:92:1d:1e:87:68:99:9a:
18:e1:a5:32:f8:0e:e9:9d:67:1b:73:f1:25:6f:8a:
0b:28:aa:38:4c:98:56:8b:cb:d6:13:7e:70:3f:66:
9c:c4:18:49:c8:36:43:02:b1:7b:7d:a0:90:3c:3d:
c1:a0:1c:52:66:ad:d7:e3:81:93:bc:34:42:1d:16:
f8:4a:53:09:bd:af:e8:70:82:b7:6a:87:cc:b1:93:
8e:86:2c:6e:28:47:66:06:e6:7e:63:0b:4c:4a:6b:
50:5c:bc:42:f8:7a:92:97:61:5b:f5:f0:f3:6e:02:
58:5d:1d:ed:a1:bb:65:be:80:2c:68:8d:b4:39:9e:
32:95:d0:91:23:18:ac:c3:93:98:c6:82:74:cd:8f:
7e:bd:ad:b6:5d:e0:2b:79:cc:b9:ff:8f:ae:e6:55:
b0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:12:07:BB:5A:24:49:6F:17:82:DB:7C:49:4D:29:2A:D3:25:96:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8197550-4b47-3563-b11c-54b7f751a9c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
198.45.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:55:96:c3:5c:3b:9a:5b:4a:28:69:47:f0:e9:3d:37:9b:3f:
8f:25:df:8c:34:d9:09:68:77:53:96:c3:da:75:1e:9d:ca:c3:
93:a8:44:bb:48:3a:b8:e1:24:e7:bf:86:59:7d:ce:60:e6:92:
f8:ef:9b:06:75:ed:f2:d0:63:33:a3:9b:34:d7:bf:60:e5:52:
42:e9:ac:31:ac:3c:f2:04:0e:59:ba:02:3b:33:07:c0:03:be:
e7:ec:97:f9:04:ce:3b:b9:64:00:94:65:25:e9:4f:fe:28:34:
83:ab:e9:83:94:ef:41:c4:34:38:a3:16:34:6b:9c:87:41:62:
78:2a:0f:06:03:b1:9f:ab:98:dd:88:82:30:c9:4a:6a:ce:a2:
7c:c0:ae:52:ea:c0:38:45:71:5b:71:96:30:02:8e:27:6c:49:
b5:c5:3e:8e:25:2a:e5:f3:af:93:41:d6:08:50:a2:03:2d:d7:
89:b6:20:f4:53:80:f9:20:ec:16:fd:10:db:71:e4:1d:50:d9:
5d:7b:70:cc:64:1a:ab:7e:87:2e:32:27:00:35:a4:02:d6:a3:
20:5b:0d:4a:ed:fb:d9:d1:88:76:f5:42:5a:fa:2c:ef:e3:aa:
38:6e:72:0a:0d:47:ef:57:41:13:bd:8e:35:2a:08:7d:2b:48:
b9:78:34:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:29:44 2026 by rpki-client