
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/88d7537b-6670-3b15-9413-3b0aad3087b5.roa
File: 88d7537b-6670-3b15-9413-3b0aad3087b5.roa (raw, json)
Hash identifier: xsOHMsjy4+0WNAfOC0dy2d84STiElFM7ZqRwAiX0vRI=
Subject key identifier: 4D:CF:51:3C:04:4A:9D:9A:65:E0:26:62:B2:10:C8:11:0C:3A:C2:C2
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E0B6EF8AF92F269D28B600
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/88d7537b-6670-3b15-9413-3b0aad3087b5.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 172.243.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:b6:ef:8a:f9:2f:26:9d:28:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=37c17e6b-ba74-4750-8764-1dabe6f7380d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5f:d2:c1:e9:9d:7d:ca:0a:17:39:4a:8f:a5:
47:56:28:65:35:70:46:f7:56:62:63:71:0b:de:8c:
bb:90:94:a4:2e:a3:81:ff:24:fd:9f:b1:32:3a:e0:
18:5d:75:89:67:26:24:e2:8c:f0:06:3e:d9:73:dd:
04:f6:00:3a:46:62:6f:78:ab:3d:03:e3:29:c2:ed:
98:66:57:b2:a6:31:29:b8:44:9e:d5:39:7c:3e:4b:
6c:25:f3:a3:d7:e7:1d:5a:70:56:5e:1c:17:7e:03:
71:07:5e:e4:a0:8e:78:75:2f:93:64:78:94:ef:cd:
cf:4a:5d:36:b0:4e:a3:e9:e4:fa:d3:40:2f:74:eb:
bf:99:8b:97:b3:c7:17:7b:f3:7e:1b:1b:37:e8:6a:
a7:33:98:cc:a2:40:cc:53:4e:bc:0d:90:b6:5e:0a:
43:9a:1f:c6:83:a9:55:02:1d:ea:8f:16:a0:7b:ba:
2b:01:45:0d:f2:82:03:ea:6d:27:6a:ec:7d:16:6c:
33:0c:77:5d:3b:05:14:2d:41:3a:0e:60:83:68:b6:
c7:1b:1b:1b:ff:4d:fc:0c:f6:e3:74:39:f7:70:db:
3d:49:46:d8:ba:1f:2f:26:1d:39:d5:44:71:22:51:
25:7f:92:b3:09:4b:94:20:ce:a8:5b:ed:0a:2f:8f:
cd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CF:51:3C:04:4A:9D:9A:65:E0:26:62:B2:10:C8:11:0C:3A:C2:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/88d7537b-6670-3b15-9413-3b0aad3087b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.92.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:d4:e2:76:d0:0b:fa:55:43:4d:ea:15:18:53:f1:61:84:54:
a2:69:43:dd:cd:91:23:41:4b:d2:1a:9e:13:02:9f:00:7c:4f:
4e:cb:c4:8d:0f:15:52:06:2f:95:a0:4f:ae:ad:7f:6e:1c:65:
be:a4:45:35:1f:28:1a:c2:59:e1:ec:9a:b7:42:41:75:f6:ee:
34:4a:c4:a2:d9:10:76:44:2f:a5:5c:27:ab:26:57:00:c5:99:
e1:db:8d:05:fb:5c:99:40:0a:4b:a0:8c:bc:61:91:0d:5c:d8:
5c:c8:60:89:89:18:dc:ef:43:b5:90:5d:b5:a5:18:70:f4:57:
0a:3e:04:f6:94:f3:32:8e:a2:00:77:90:83:89:5c:e5:9f:5a:
32:87:9e:64:cf:a3:9d:d0:c2:8d:b3:7a:11:f7:4d:d0:3b:3d:
11:4a:8d:07:a7:f3:f8:a4:d3:44:85:f6:38:a4:4e:a7:ad:69:
62:46:ec:a4:67:97:9a:59:00:44:de:a3:80:99:f8:28:16:2e:
06:e2:cb:94:10:20:98:df:1b:69:43:9d:50:d1:83:b5:7f:e6:
6a:9c:4b:5e:55:cd:e7:bb:9a:18:38:48:20:ba:98:ab:b3:70:
12:68:c0:83:93:b3:85:b9:98:56:2c:5b:73:1d:42:77:5a:11:
44:e8:90:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:53:47 2026 by rpki-client