
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a6e6ddc-4fc6-3076-9cb0-02e1f50ed650.roa
File: 5a6e6ddc-4fc6-3076-9cb0-02e1f50ed650.roa (raw, json)
Hash identifier: RGQiA0tozoocxTpOIEj6/MYVj2GFFrIlLqeTk9zgy8o=
Subject key identifier: 17:60:A1:DE:96:60:0D:7F:FB:C8:EA:27:0D:02:75:A6:15:3E:90:22
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584EA79F08F3D32118942DDE9B00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a6e6ddc-4fc6-3076-9cb0-02e1f50ed650.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7155
IP address blocks: 70.41.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9f:08:f3:d3:21:18:94:2d:de:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=8a303b1a-3c04-4ee1-9cca-8f76710f5960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:83:c7:e0:47:0f:21:b3:d3:3e:a2:c4:3f:03:
b3:5b:39:4b:89:e7:bb:72:6b:d7:af:2f:d5:76:16:
96:40:10:ed:52:94:14:ba:dc:a3:f2:ca:d0:54:19:
0b:da:b6:a3:83:a4:6b:73:ad:95:ed:6c:3e:43:f1:
98:c4:75:e7:f0:94:d5:3a:92:bc:9f:5f:d0:90:3d:
91:00:45:b9:ae:e1:b9:16:67:2b:5d:e6:19:41:47:
3a:fe:d1:d0:df:ea:bc:2c:29:c2:12:59:c5:ca:a5:
9b:82:fb:2e:7d:53:fa:78:f8:f8:df:f4:98:26:25:
91:84:f7:f6:49:84:e6:6c:05:1b:c1:85:b8:6f:c0:
11:77:57:51:56:30:b5:8e:ba:e5:11:e9:08:76:6f:
67:d4:97:7a:37:09:9c:c9:2c:b0:73:e3:33:fa:08:
e1:f5:49:9e:c9:c4:7a:a1:11:d8:5d:c6:35:19:09:
5f:41:4a:70:21:8c:ad:fe:ed:a6:7c:e0:c9:8e:15:
1e:04:2a:5f:98:68:48:69:0d:6e:62:16:86:75:84:
95:24:e6:7a:39:40:7b:e4:54:04:49:fc:b0:e1:8f:
e0:78:3c:e8:9b:1c:08:97:e7:84:ad:ec:21:98:de:
ea:63:02:55:e0:4e:19:89:a8:67:b3:dc:52:12:70:
aa:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:60:A1:DE:96:60:0D:7F:FB:C8:EA:27:0D:02:75:A6:15:3E:90:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a6e6ddc-4fc6-3076-9cb0-02e1f50ed650.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.195.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:f2:96:72:4c:07:5f:6d:4b:d8:59:27:f9:92:ae:41:eb:f8:
10:a7:b0:1c:02:7f:97:9b:a3:9e:90:ed:09:df:a2:79:74:20:
4d:71:bc:dc:0a:67:c2:33:da:97:dd:56:09:e7:53:f0:72:9e:
91:b6:a1:50:55:fc:66:b5:1c:9e:68:6d:0d:19:11:74:6e:2c:
75:38:2c:70:49:cc:a3:4a:08:f4:95:c4:72:53:cd:97:97:04:
97:c0:c6:b2:00:1f:cb:e6:2a:d7:e8:6e:4a:6b:c3:d7:b8:80:
3e:d2:4d:5b:4a:4f:49:bb:cb:71:ad:5a:eb:02:d2:fa:27:9c:
0f:54:b6:ea:c9:9a:27:8d:83:c4:95:72:25:bf:c1:e2:68:e1:
0f:17:52:c1:78:a1:ec:53:22:0f:84:63:56:a8:16:8d:d7:37:
1a:2b:0a:a8:d4:56:f5:59:69:c0:43:4f:d5:ba:f9:61:30:61:
b3:96:72:db:02:5e:ec:6f:49:fe:92:69:a4:3d:ad:81:48:44:
b0:85:ce:6e:23:75:f2:15:af:db:3d:59:d9:7b:c1:82:48:95:
01:df:85:de:4c:aa:bf:65:76:3c:c7:8d:f5:0f:7f:99:38:d2:
8c:49:67:7f:63:30:6e:b6:b4:2d:8d:b8:ec:f6:8b:c8:ea:76:
47:68:21:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:12:48 2026 by rpki-client