
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f9be7533-16e5-3578-8e4c-bd8237ce20e2.roa
File: f9be7533-16e5-3578-8e4c-bd8237ce20e2.roa (raw, json)
Hash identifier: qUS/Zw5V5WeA0mMJ70uOQKJ5LAATonYevAGgOYZVEQ8=
Subject key identifier: 8B:A0:EE:1A:BD:B1:2F:5C:08:C8:CE:DA:75:22:A4:23:09:67:CE:26
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F497B06304B1295F4B72274D0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f9be7533-16e5-3578-8e4c-bd8237ce20e2.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 72.173.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 05 Oct 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7b:06:30:4b:12:95:f4:b7:22:74:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=cb0709ae-e5d1-4794-8dd6-9918e889641c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:76:d6:47:36:01:e4:e5:8c:3a:5d:82:60:06:
af:4d:1d:a7:d5:ba:b2:f4:fa:8f:6b:97:b3:99:71:
ed:fe:78:7c:b1:ab:2a:b1:8d:3a:59:c6:49:4a:54:
00:48:42:c0:4f:6c:e9:02:51:7a:cd:f0:38:f9:b1:
e0:d9:92:ef:b1:4e:7c:5c:47:0a:e9:fa:02:82:b8:
9a:f0:40:fd:04:48:c2:de:bb:ca:06:32:73:b0:f0:
38:16:68:67:d8:48:a1:4f:de:f1:bb:5f:a4:14:bb:
c0:7b:c1:0c:01:0c:27:e9:9b:06:97:f2:48:86:c4:
4f:3c:86:07:69:ec:5a:54:da:0b:d7:f6:32:04:09:
b6:79:30:7c:db:1e:04:39:87:b5:49:99:63:2b:ad:
ab:56:92:12:24:f4:36:50:3e:bd:01:cd:52:6c:96:
d2:d4:1f:de:22:9d:3a:23:45:09:95:95:52:27:9a:
96:f3:b7:7f:6f:e0:3b:71:7a:4d:eb:01:ef:d2:1c:
5c:e6:3a:b8:44:96:39:6a:a1:fe:25:81:60:34:83:
23:a1:c6:56:ac:8b:a9:7a:2e:f1:b7:9e:e1:c7:1e:
c7:71:2d:a0:5d:5f:36:8f:0f:53:f4:8f:93:e6:27:
47:72:63:c2:ee:68:38:58:9b:3a:b6:58:25:68:54:
be:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A0:EE:1A:BD:B1:2F:5C:08:C8:CE:DA:75:22:A4:23:09:67:CE:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f9be7533-16e5-3578-8e4c-bd8237ce20e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:92:27:d8:5f:8c:12:98:a5:04:a0:31:d0:dd:df:71:21:c8:
92:48:7c:d2:a3:d6:84:59:0a:e0:b4:7f:ca:e9:95:88:41:a3:
e2:e5:da:8a:d4:15:35:a6:e3:c4:0a:e0:dc:c4:40:ae:80:9f:
2f:66:42:b6:18:8a:61:08:bc:51:f7:46:76:d1:d7:60:5f:ba:
60:b5:92:88:d2:c2:63:62:87:8b:b9:a7:bb:1f:b6:c5:c9:0b:
50:89:09:f5:c7:e6:aa:e3:08:98:b1:15:19:e1:e5:35:7f:35:
2f:e2:04:86:bc:3e:fc:5d:ae:be:05:03:c6:cb:e3:52:13:7a:
61:f9:bd:f0:ec:7e:f7:13:99:13:89:7b:f0:13:22:cf:1c:bf:
4b:7a:ba:9a:7a:f9:70:c2:b8:23:6d:4b:68:27:3f:21:f1:cf:
0f:9f:8a:4e:0b:5c:e7:a9:08:54:a3:14:cf:fd:3e:ae:b8:00:
86:82:57:0e:81:03:f6:7d:6a:eb:10:ec:00:5d:8e:80:aa:89:
c3:49:0b:85:ca:d0:a7:31:17:f3:3d:3c:21:1c:8b:3c:0b:ea:
a0:ff:45:9e:88:08:e7:ad:98:5d:e4:3a:0d:0f:fa:b8:f1:65:
03:1d:7d:71:21:a6:fa:8b:4d:27:6e:c0:87:8d:11:3f:77:ee:
17:3b:39:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:15:47 2026 by rpki-client