
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d3f9173f-8c9c-3b1e-aa4c-0c41c102fe9e.roa
File: d3f9173f-8c9c-3b1e-aa4c-0c41c102fe9e.roa (raw, json)
Hash identifier: AigC7F/YIz+sFwfmA+aC1T7KP1Apr4K7hoXmc+8oG60=
Subject key identifier: 85:3F:A4:40:28:58:D0:5B:4C:18:3D:A3:37:B1:F1:85:4F:D7:67:7C
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584EA79FB6E2F3178F213F2F7900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d3f9173f-8c9c-3b1e-aa4c-0c41c102fe9e.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7155
IP address blocks: 172.242.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9f:b6:e2:f3:17:8f:21:3f:2f:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=de26ad52-e75a-4176-a19a-5e09b2aec805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cb:ac:1d:22:3f:e3:ce:cc:7d:eb:d3:b6:cc:
51:3b:67:57:e2:a0:b3:4b:a7:be:8d:43:d1:b2:c9:
b4:04:49:a4:36:8b:e2:23:26:65:22:86:40:fd:88:
50:e8:15:dd:b6:0e:7b:3c:df:81:e1:37:3e:5f:a6:
08:09:a7:d3:d4:67:f5:f7:c2:f5:78:b1:39:1c:51:
77:46:84:50:49:11:6d:70:4c:2d:2a:49:94:cb:64:
fb:cb:49:91:23:a9:0e:10:7b:5f:52:77:2b:3c:0f:
d5:a9:3c:43:d6:9b:90:45:dc:88:99:62:f0:59:67:
36:eb:c3:cf:00:cd:9c:0d:82:67:e7:03:04:e2:a5:
c9:d9:6c:57:52:13:51:38:69:90:b9:62:a3:bf:31:
c7:39:b6:11:a9:8f:ab:c6:88:4a:ea:01:d6:dd:1c:
b7:26:36:6b:41:ff:c0:eb:49:56:0e:e2:79:57:78:
4b:93:66:18:ae:95:03:84:d2:f1:bc:dd:d8:bf:f1:
35:92:07:05:de:d4:26:a0:46:95:f4:df:f2:41:2c:
13:00:15:af:01:ac:89:ca:ca:3d:5b:f5:38:f9:37:
63:e6:8c:c3:42:89:9d:ce:3a:e4:e6:7b:aa:e1:d0:
80:0e:93:01:68:e9:33:6f:f5:8d:ff:c1:5b:e1:3a:
8a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3F:A4:40:28:58:D0:5B:4C:18:3D:A3:37:B1:F1:85:4F:D7:67:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d3f9173f-8c9c-3b1e-aa4c-0c41c102fe9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.43.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:3a:3b:28:ea:f6:9d:aa:e6:13:bf:b5:05:d1:bb:a6:95:99:
f7:75:7f:2b:a3:ab:6c:4a:71:f1:d7:ef:2d:a4:85:38:b4:98:
22:14:21:9c:e1:f0:20:3c:72:6c:a8:11:5b:b3:2f:af:6b:ec:
cb:0a:a3:11:1b:f9:1f:74:a4:bb:c8:94:16:2d:a9:4e:c2:0d:
79:0e:ec:83:7a:7d:c6:b0:a2:15:ba:79:34:76:d4:ab:e7:a1:
a3:ac:64:4e:c2:70:81:9c:24:c9:ec:a1:4b:04:2e:fc:98:26:
69:c9:72:31:39:b6:62:31:92:b7:30:df:ec:70:6a:00:cb:c0:
c9:69:4b:e2:43:ce:de:93:8e:37:74:b2:15:96:71:c3:38:e2:
29:7c:9d:5f:55:3b:db:93:13:64:3c:61:1f:18:81:3e:44:57:
4e:72:61:a3:46:1f:91:2d:9c:dd:71:21:dc:f3:cd:16:0b:12:
34:59:66:a1:30:a9:de:77:09:93:40:ae:47:8d:87:32:3d:91:
eb:25:ea:de:b6:0f:63:76:10:41:af:d8:f9:69:4b:77:a2:6e:
80:be:cf:a8:32:df:a9:6e:20:1e:1b:2b:a5:a2:c5:08:b2:69:
45:09:2d:47:b3:21:cd:5b:e4:94:3e:4f:0f:80:81:de:ac:da:
c5:3b:b6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:55:03 2026 by rpki-client