
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e73b0002-4ed0-3e2d-98a3-56867e7719f2.roa
File: e73b0002-4ed0-3e2d-98a3-56867e7719f2.roa (raw, json)
Hash identifier: ijjNXPbTMOAA8iGGGs85ylrjT4a4sHh8tULpShBww3U=
Subject key identifier: 32:0F:63:4D:8C:0A:E9:B8:BD:33:43:9E:65:55:9B:7C:CF:CE:48:C7
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584EA79FB7037CC08F0883325700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e73b0002-4ed0-3e2d-98a3-56867e7719f2.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7155
IP address blocks: 172.242.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9f:b7:03:7c:c0:8f:08:83:32:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=198fbe07-958f-4f95-951d-55aa2ea88e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ed:fb:72:ff:ca:22:95:f4:fd:57:a1:9e:6c:
91:b7:22:a0:0a:58:d9:d5:4a:90:1c:ec:f0:5a:69:
a2:fb:fc:fc:68:4e:2c:b9:62:ec:af:ee:33:3a:a8:
49:e9:f5:48:b9:35:55:a2:06:d5:b8:41:4c:59:18:
ed:de:c8:0c:b0:ed:f4:9f:04:d4:9d:47:92:48:19:
32:dd:eb:5e:5b:0e:3d:8c:6c:ee:ce:03:ee:13:88:
1a:d6:56:79:fd:4b:5c:bb:00:5f:e9:3f:6c:70:34:
a5:48:37:35:12:c8:fe:1e:6d:05:31:9e:68:c0:20:
04:df:d5:93:b9:42:98:3b:bd:0c:2c:08:16:39:76:
6c:fc:72:a9:f1:87:6a:1c:98:96:ee:ce:98:04:71:
9a:24:3c:2f:42:6d:b8:de:ef:31:c7:9c:a3:0f:99:
d7:c0:24:a6:ed:41:99:51:86:88:3a:2e:57:f8:20:
d0:4b:80:0f:06:14:d1:1e:57:b7:b7:61:e6:1c:fe:
b8:07:60:86:49:84:58:35:ce:f6:df:aa:26:94:46:
22:ce:a6:88:0c:7e:40:64:66:a0:0d:46:cf:2d:70:
dd:ed:61:19:ad:00:9e:c5:a4:e2:65:23:1a:88:cf:
8f:0d:3f:a9:ba:51:e2:4b:7e:60:b1:b3:04:85:2b:
ac:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0F:63:4D:8C:0A:E9:B8:BD:33:43:9E:65:55:9B:7C:CF:CE:48:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e73b0002-4ed0-3e2d-98a3-56867e7719f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.46.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:29:30:86:d7:4c:eb:a5:3f:74:c4:e1:83:fe:df:20:ea:dd:
3e:ae:79:bd:ec:03:54:2c:0a:5e:9d:ac:76:0b:28:54:63:45:
c2:49:54:fb:ab:27:aa:1e:8b:85:be:04:7e:db:dd:c9:31:e9:
91:e3:62:89:b1:7b:47:50:3f:db:dd:78:c7:6b:7a:35:0d:8c:
b4:4a:73:60:d9:07:15:3f:44:db:03:ef:f7:db:52:55:09:97:
b5:a8:6e:8d:15:ea:1a:a7:e0:3a:36:0f:a2:56:d7:75:51:9a:
c7:24:6c:99:f3:a3:a8:14:e1:f7:e4:e3:50:69:07:e1:43:b3:
14:4a:24:0a:e1:1e:c2:b8:0f:41:3b:76:1b:57:97:a2:cb:4b:
16:74:d9:2d:e0:01:d9:c6:71:c7:1b:37:3a:8d:17:79:b3:3e:
45:b5:8b:8f:3e:07:ec:2b:d4:47:95:c4:da:eb:c4:53:19:ac:
de:25:4e:ce:16:e8:14:1a:83:ed:7c:e6:dd:5d:88:99:6f:0d:
08:c4:bf:e3:6c:3d:6d:8a:f2:7d:2f:8f:94:4f:e7:da:39:d6:
39:6e:ff:98:dd:90:09:5a:2c:bc:08:18:f8:4f:07:dc:27:24:
b7:72:cc:29:19:4a:0e:46:b1:77:1c:b6:29:1f:40:df:bb:96:
13:5a:10:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:32:50 2026 by rpki-client