
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dcf38adb-0101-3d54-88e9-679d1eb551c9.roa
File: dcf38adb-0101-3d54-88e9-679d1eb551c9.roa (raw, json)
Hash identifier: 4F7VqUuBGwR8dnI5jADa2KNnpcKdS360bTApfUmwve8=
Subject key identifier: A4:58:F0:6E:41:F2:C8:E9:4C:D0:7C:E6:39:9F:38:94:B0:C3:8A:97
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584EA79E21E506C2E9F58E30B880
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dcf38adb-0101-3d54-88e9-679d1eb551c9.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7155
IP address blocks: 172.243.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9e:21:e5:06:c2:e9:f5:8e:30:b8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=876f27b2-f612-4032-a34c-01c82b06ba9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a9:14:c0:de:b9:23:f5:96:60:be:7a:32:5a:
85:dc:64:14:11:b0:e2:dc:a8:79:97:8f:64:e9:48:
9b:36:07:65:07:b4:0e:1a:6d:2b:ed:fa:d7:7c:41:
70:0b:62:72:16:6e:d5:cd:a5:e7:e4:1a:45:72:6d:
a5:b9:44:e7:03:da:8b:4e:c3:4a:d6:9c:48:15:b2:
8a:46:04:6b:09:72:23:e4:10:63:bc:14:b1:76:fc:
5c:e7:d1:89:12:da:68:bd:18:e2:fd:0a:bf:ed:9a:
e0:d1:55:96:a0:ce:62:33:3f:e1:2a:bf:73:9b:b0:
62:0a:a6:cf:b4:fa:e6:b3:2e:63:72:aa:f0:e2:db:
79:d3:29:68:da:29:27:fc:06:75:07:7d:82:45:38:
36:9a:a2:3a:b8:4e:24:7c:81:9d:d9:3a:ec:2b:44:
df:e1:de:05:56:12:ff:9a:6b:e9:d4:23:1e:74:ba:
fc:91:6f:65:df:15:8a:31:d8:46:fd:0c:cf:97:07:
cc:3f:76:33:b7:eb:50:8b:15:31:51:7a:86:23:99:
49:3a:91:68:06:e7:6e:96:02:ac:80:d1:ab:26:94:
81:98:39:16:24:dd:d4:f8:c6:55:68:ee:71:8b:01:
ef:92:2c:89:b3:51:d6:78:e5:05:35:72:c6:e5:ea:
b2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:58:F0:6E:41:F2:C8:E9:4C:D0:7C:E6:39:9F:38:94:B0:C3:8A:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dcf38adb-0101-3d54-88e9-679d1eb551c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.59.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:fa:7a:62:fe:59:6c:38:88:2c:00:05:24:43:04:20:93:a3:
cd:58:9b:47:91:5a:51:17:cf:eb:0e:51:2c:49:7d:45:30:f8:
e7:17:fa:87:32:66:08:d2:45:06:dc:e9:c6:a4:54:ba:d7:fc:
fa:03:bb:c3:9f:3e:0c:40:f5:15:a7:8a:f5:17:e1:0c:67:86:
50:9f:0b:95:f2:3b:62:ce:e6:2b:97:65:6f:17:12:2d:23:06:
10:16:a5:24:69:8b:d1:42:7f:02:60:e8:f5:25:73:5a:63:68:
b9:15:0b:21:dc:35:06:27:3e:e3:e8:a2:fd:a4:3e:6d:df:77:
e3:f8:04:5d:ba:60:a8:f5:02:d8:c7:6d:e9:70:25:db:49:af:
d5:69:da:57:09:55:3e:91:b4:70:7c:87:7f:54:85:5a:5c:c4:
48:c7:73:8f:7a:ea:d9:95:73:c0:fe:8a:d9:bd:ae:b5:f1:2a:
f8:95:b3:17:80:bb:1b:9b:89:67:3a:1f:4b:df:46:4e:1a:34:
6b:42:cd:aa:e7:e7:56:46:c7:98:77:5c:cc:f8:a0:8d:93:01:
90:db:77:bb:b9:19:26:40:fe:b2:6c:0f:94:c6:c8:6a:db:b9:
13:6d:d9:17:41:1b:f8:43:b3:b7:af:8c:c9:ad:dc:c5:e1:5c:
d1:c4:af:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:56:04 2026 by rpki-client