
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/828b930b-7b34-36a0-b4bd-a9d0526461ed.roa
File: 828b930b-7b34-36a0-b4bd-a9d0526461ed.roa (raw, json)
Hash identifier: B4dFE7CA/FgATkQ71fxqeqGhGuBYkHgx+JpHZJBeJG8=
Subject key identifier: 1A:09:56:29:C6:F4:FD:AE:A9:7B:76:AC:A7:01:81:C1:62:6B:33:8C
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584EA79D67DCEA6E92B332F39300
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/828b930b-7b34-36a0-b4bd-a9d0526461ed.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7155
IP address blocks: 198.45.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9d:67:dc:ea:6e:92:b3:32:f3:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=3b1101cc-954d-4f7f-9863-9126681ef1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:46:78:24:7c:6f:36:bf:b6:23:59:4b:0f:c0:
73:0d:30:bd:fa:b9:15:31:dd:6b:76:bc:26:5c:6c:
09:50:9b:87:73:5a:b0:b2:37:63:07:e4:9a:fd:28:
b5:cd:58:72:39:e5:7b:9d:0d:1e:f6:b1:1e:cb:c1:
29:eb:eb:76:7e:d7:3f:85:b9:2d:c0:26:76:b2:18:
70:98:29:d2:a1:04:35:dd:a4:2d:93:c6:e9:0a:42:
ea:5c:4d:37:c0:cc:ee:fd:a3:e1:85:3e:c0:ce:bf:
3d:be:63:42:dc:ff:2f:45:90:4c:4c:7c:a4:56:00:
09:ae:ca:92:ba:e0:78:24:86:ec:b0:9c:14:24:1a:
66:13:ca:73:69:cb:a1:8b:72:90:8d:60:2b:e7:e0:
4e:af:07:fd:db:36:15:8b:1c:dc:05:6e:3c:9b:d0:
08:12:d3:ba:6c:0d:40:0e:99:32:84:35:29:97:e1:
8b:07:0e:c0:b8:55:0e:cd:8e:d9:a3:f3:b1:fc:8f:
87:89:79:df:e6:58:ef:b4:76:61:ac:c0:94:df:12:
40:8a:56:cf:dd:05:c8:3d:39:e7:70:47:e4:05:33:
3e:b0:b2:ee:fa:49:29:da:cd:c4:18:a9:db:0f:4b:
06:fa:3f:89:64:07:01:2c:5c:92:06:7a:d6:ff:fe:
c6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:09:56:29:C6:F4:FD:AE:A9:7B:76:AC:A7:01:81:C1:62:6B:33:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/828b930b-7b34-36a0-b4bd-a9d0526461ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
198.45.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:52:33:79:0e:1f:b6:43:7e:24:69:28:e3:ea:99:8c:40:d3:
a5:65:dc:99:3c:6e:db:bd:4c:02:0d:36:3f:d2:a5:82:32:89:
86:63:45:85:51:eb:c6:41:4a:b7:8f:5a:ea:6c:d0:4f:6b:0f:
dc:af:6e:e5:5e:bc:bd:89:9c:e0:ee:1d:9b:ff:ae:22:0e:66:
3a:2a:a1:b7:20:1a:10:e9:5a:d1:9d:fd:ed:fe:7a:3f:b9:7f:
c0:44:c0:f5:4a:1b:6d:1a:7f:4c:f3:c1:4e:82:1d:57:26:ee:
a2:57:7e:ad:4e:ca:75:ab:0b:a2:9a:64:af:be:65:c9:73:dc:
33:94:94:52:03:7b:f1:1a:aa:72:53:6e:69:6b:6f:e0:71:46:
25:ef:21:6b:be:6c:c5:f6:83:f9:58:ae:85:3d:da:70:80:bf:
ce:c7:3c:62:3a:64:bc:e0:bc:f9:7a:d7:fb:76:77:87:6a:1e:
0c:a8:8f:40:ab:a7:a3:7c:2a:0e:e2:51:80:2b:23:b2:92:0e:
f7:98:d9:eb:9f:c3:d0:f0:d6:50:e8:f6:65:6f:41:e2:3d:37:
28:9c:b4:59:e9:8b:a0:71:6f:fe:35:0e:8b:a7:c8:11:04:12:
97:ad:ca:a5:36:91:e1:dc:67:c1:f3:0f:a0:83:12:a9:b8:c2:
fd:46:6c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:05:28 2026 by rpki-client