
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/494d5fa3-309a-3f85-8eb4-a1b59ffc6c61.roa
File: 494d5fa3-309a-3f85-8eb4-a1b59ffc6c61.roa (raw, json)
Hash identifier: GrQ0YeI2Nb8aJS//EQtjsrmgapJYmQZ8CHswi3iWiLQ=
Subject key identifier: 95:97:F1:C0:E2:F0:72:FC:4C:74:62:63:B5:D4:BE:9D:2A:39:51:B7
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584EA79F0F8E1E90109D42FFE900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/494d5fa3-309a-3f85-8eb4-a1b59ffc6c61.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7155
IP address blocks: 72.173.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9f:0f:8e:1e:90:10:9d:42:ff:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=a0e1f492-f6ac-4bd5-8490-999f2c64573c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e6:b8:69:cb:ab:c8:78:6f:b6:aa:62:8b:4a:
52:eb:15:5f:56:22:01:f6:e1:b9:75:fc:66:35:ab:
82:30:ed:31:58:6f:13:01:b9:69:7e:5c:fe:c9:26:
5d:9b:5e:0c:9d:2c:d1:84:3d:ec:cd:4d:01:68:61:
4f:7f:3c:4c:bc:7f:50:77:4b:3a:34:77:6f:f2:fb:
ad:65:33:d5:07:b7:46:e6:0f:86:67:80:e8:64:de:
00:f6:c9:1c:dc:23:8a:3c:88:37:ca:81:7e:14:7e:
09:33:c2:6e:8f:ea:6c:cd:a6:31:24:36:61:10:7b:
a8:29:7a:a9:1d:82:95:a6:2a:a7:88:59:b1:67:b2:
5b:ae:a6:32:2c:0f:a8:f9:24:45:5c:23:46:cf:23:
71:95:93:23:3f:df:37:57:44:5a:50:21:36:05:fe:
f4:9e:4f:1d:01:d2:03:8a:86:23:b7:6f:51:c3:f8:
e2:28:af:89:94:76:49:63:93:74:6d:5d:2e:7e:57:
c5:e9:db:9a:bf:dc:67:5f:02:f5:cb:3f:da:0b:91:
a9:2c:7c:4a:93:5c:e7:7d:e7:fe:29:83:e7:dc:7b:
fb:c8:bf:c7:fd:1f:ac:f9:45:f1:86:1c:7e:e2:83:
ba:bd:d1:29:2a:2c:ae:d4:68:35:24:42:92:58:61:
5c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:97:F1:C0:E2:F0:72:FC:4C:74:62:63:B5:D4:BE:9D:2A:39:51:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/494d5fa3-309a-3f85-8eb4-a1b59ffc6c61.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.12.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:67:05:66:a3:40:a9:d3:57:40:92:98:40:8a:38:d4:77:af:
d1:f7:c3:b3:db:1f:f5:a8:9b:5a:dc:11:78:80:5f:79:49:79:
c5:83:59:86:24:a9:c9:9c:0d:b9:80:03:92:82:26:6e:a8:f4:
11:44:4c:d6:d5:31:58:2a:01:ad:b5:0a:0f:f1:93:de:0d:30:
8e:43:20:61:2b:90:48:fb:ac:68:fa:8a:21:d5:b7:50:0d:7c:
1b:b9:8a:1a:aa:b4:1b:ef:d8:34:81:fc:54:ad:5c:2f:fc:63:
a8:e9:a5:2c:7e:f2:59:d1:25:b8:ce:13:b4:0e:39:c1:4c:67:
f4:16:5c:2b:4b:27:ce:36:c9:20:27:f2:ba:2e:b9:32:9c:fd:
9d:34:48:f4:28:33:26:dd:4a:a4:41:d9:7c:c6:cc:7a:f7:03:
1e:98:cd:b7:80:0d:79:a1:38:d8:4e:8a:76:bc:99:13:63:c7:
e8:46:25:3e:1f:f8:e0:34:1a:a5:7f:d2:a5:aa:71:0f:5a:1f:
b7:dd:b7:de:fe:fb:da:4d:b8:f5:8d:52:83:9d:be:fe:3c:94:
e4:91:89:12:97:f6:66:bc:07:85:c1:14:b9:96:72:05:ee:69:
0f:7b:b2:70:13:06:fc:a0:b0:73:a9:9f:d0:f2:df:16:19:06:
89:61:7b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:37:46 2026 by rpki-client