
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/96392c48-2779-305c-84c5-00ddfc28bfbb.roa
File: 96392c48-2779-305c-84c5-00ddfc28bfbb.roa (raw, json)
Hash identifier: WbhiajAUcZ2BxPr87WpATxRXqqjVu5IGHUIvg20ZAZ8=
Subject key identifier: EA:4C:B0:B5:EA:6F:D0:33:EA:BF:63:EF:2A:46:4A:75:1E:83:6C:C5
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584EA79E200D63E30F3CED2DE280
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/96392c48-2779-305c-84c5-00ddfc28bfbb.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7155
IP address blocks: 172.243.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9e:20:0d:63:e3:0f:3c:ed:2d:e2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=4ad43971-c7cc-41f1-bae4-27e1b3bfae82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c5:04:fb:f7:ce:17:3d:09:ce:a4:77:78:69:
2f:93:cd:16:89:82:63:49:ac:6a:89:a1:39:e0:77:
bb:38:03:a3:c8:76:43:b3:9e:52:89:5a:94:e7:bd:
fd:38:b5:a9:dd:67:fc:ac:fa:c0:39:bd:22:3c:4a:
6e:14:e4:51:d4:a8:11:aa:e2:52:9d:76:3b:ae:04:
ab:b2:b5:b5:ef:6e:cd:13:4e:cd:5b:00:f7:dc:a4:
e2:68:ce:d9:63:16:1f:6b:a4:0f:f1:3d:69:60:ad:
dd:25:58:89:cb:84:62:48:ff:94:b8:0b:67:c8:51:
bc:50:ed:71:19:09:6d:00:a8:b2:f8:77:e4:e9:4d:
b4:ef:36:23:d5:5a:5e:74:14:2f:e2:3c:f9:68:87:
df:13:47:4a:ce:ea:bd:1e:95:02:82:94:47:c5:07:
a8:00:90:05:13:7b:c4:ab:b7:b8:69:05:d5:6e:a8:
26:d9:dd:16:60:17:8e:1a:02:84:48:08:9d:53:c7:
6c:51:2f:78:f0:e3:05:41:a9:55:c5:83:0a:11:7f:
30:42:47:16:39:d9:6c:77:18:0c:e8:46:c5:59:75:
bc:4f:09:54:21:39:17:f0:54:22:1e:4a:5a:51:b1:
4d:02:a7:6b:96:07:57:4f:ee:45:9e:de:3a:54:b7:
96:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:4C:B0:B5:EA:6F:D0:33:EA:BF:63:EF:2A:46:4A:75:1E:83:6C:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/96392c48-2779-305c-84c5-00ddfc28bfbb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.45.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c2:9c:91:61:87:d6:e3:3d:85:3b:4f:a7:ef:fd:54:af:00:85:
7e:5a:e5:95:44:4b:03:37:99:8a:3d:aa:39:bb:cf:ab:33:75:
f4:65:aa:37:d7:19:bd:89:78:fa:c5:54:a4:f1:7c:86:3c:f3:
95:fe:82:d9:62:c9:6c:f4:42:0b:dd:1e:d1:a8:a7:e2:67:fc:
84:7c:97:ca:58:5c:89:f1:4e:b3:c8:6e:80:a3:17:14:ec:6d:
6f:1f:04:91:29:d7:61:69:8e:02:07:e5:c4:46:20:55:34:05:
7f:e0:a9:56:0e:45:6c:3b:40:ad:14:64:be:ff:fd:c5:ee:89:
fe:f5:fc:62:94:39:17:0e:df:ca:84:8a:df:cb:b0:bf:7e:34:
18:10:6c:af:2d:4e:fd:2e:c2:20:b6:c8:5a:3e:51:bc:21:c4:
9b:2d:f2:a7:9e:b0:4e:ae:61:6b:55:54:ba:0e:e1:e6:4f:0e:
0e:77:18:b1:48:c0:b0:84:27:f2:bd:82:33:d0:8f:9d:92:d0:
a5:7c:1d:9f:c3:f7:d5:6f:36:f0:ca:1d:1d:d2:26:bd:f1:db:
b5:96:99:ea:7f:99:df:c4:b3:ac:d9:41:9f:59:77:4c:9a:e7:
bb:6f:90:60:95:87:72:e9:13:e3:8d:b7:d1:fc:c6:41:14:11:
db:b7:3c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:38:55 2026 by rpki-client