
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7232a66c-f3d0-3aa0-aad2-c594bf74bdb7.roa
File: 7232a66c-f3d0-3aa0-aad2-c594bf74bdb7.roa (raw, json)
Hash identifier: IqSiC+XChJRLuYhKcV+tbensHLMQZ00hJBhrHRvd4Po=
Subject key identifier: 7A:77:4F:73:AA:FA:13:69:1E:DC:C3:48:CC:F3:9B:7A:51:09:5C:09
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584EA79FCB8CBD9A008074541D20
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7232a66c-f3d0-3aa0-aad2-c594bf74bdb7.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7155
IP address blocks: 172.243.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9f:cb:8c:bd:9a:00:80:74:54:1d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=56f574d0-6dfc-49a4-b6ad-24a5b3797010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:88:e1:24:db:42:c0:8e:cf:8f:d6:53:9a:ce:
15:e2:e2:20:2a:03:d7:c4:fb:6e:a4:de:9d:28:31:
8f:35:a1:8f:d7:d6:1f:ce:ed:e6:b8:bb:5f:c4:0b:
55:58:c8:fd:04:89:22:e8:bc:28:be:5a:bc:66:4e:
3e:cc:cd:89:27:70:2b:e0:7c:24:04:39:18:c2:33:
fa:99:2c:e8:6f:18:5a:25:17:5f:f5:56:59:55:57:
7c:8f:8a:d2:3e:98:d2:67:13:93:98:64:b1:d5:d8:
7d:05:1c:cc:aa:1c:34:a4:61:c2:de:46:da:0f:f8:
8a:71:4b:9a:89:93:b8:e6:00:ff:8e:93:9c:be:43:
cc:20:29:6b:01:25:01:58:8c:2d:ba:3e:f7:02:c0:
8f:02:93:b2:a9:ee:e5:fe:42:5f:7a:da:26:60:6f:
52:a8:2c:1d:09:54:0a:10:01:43:cf:32:07:3d:3e:
ec:81:71:9d:da:10:5f:0c:b9:f9:cf:c1:6e:b3:51:
27:94:56:59:ec:18:e3:96:00:13:b8:1e:5e:cc:b8:
67:a7:57:22:3f:b6:cb:48:70:d6:b0:09:db:a2:5f:
9c:63:e9:78:08:a4:c1:e2:b0:c6:7c:18:80:fc:9f:
5a:cb:80:64:8d:44:da:ab:a9:60:86:78:98:26:60:
d0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:77:4F:73:AA:FA:13:69:1E:DC:C3:48:CC:F3:9B:7A:51:09:5C:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7232a66c-f3d0-3aa0-aad2-c594bf74bdb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:3b:48:66:2a:b5:7c:b1:81:db:21:e9:47:c6:19:b4:94:20:
b8:1a:34:7d:3b:94:98:cf:73:18:52:c0:da:12:7a:99:27:81:
40:f6:d2:53:30:9a:f7:46:d2:ec:04:4e:1a:64:4e:1b:d2:7c:
f3:0b:35:63:e3:48:05:5e:55:ea:db:a9:07:85:b1:89:81:56:
0e:c4:53:ba:d0:87:94:3b:25:b6:c1:24:35:9a:45:02:c3:e7:
2c:fd:a3:0d:df:d9:e5:be:cc:b2:68:83:fc:b0:80:d4:ee:23:
7d:bd:6f:f0:db:d9:cb:7a:73:41:8a:db:d0:46:12:96:97:5b:
6a:4e:ac:8a:15:4e:d4:17:10:b4:7d:0f:49:60:b1:76:7f:86:
29:62:f5:33:b6:eb:e8:fc:2a:9a:f3:62:74:e7:10:1b:e7:74:
82:a3:c3:ac:b7:2c:4f:bc:4e:9b:ca:36:24:04:19:d2:28:df:
f2:d7:fb:92:de:41:f4:92:b2:c1:3a:77:8e:34:9c:9d:c5:12:
5f:4d:2e:6a:12:d0:20:aa:69:a2:e4:1e:56:f5:cb:88:ba:38:
5d:2d:79:f7:e1:b4:72:1d:83:92:38:8a:ef:40:60:6a:92:4c:
69:2e:24:b9:7b:34:e8:0d:4c:86:52:03:f3:dc:d0:21:fc:a5:
54:05:fe:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:06:16 2026 by rpki-client