
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/977e7464-8fce-3f9b-8944-1e11ceeda01f.roa
File: 977e7464-8fce-3f9b-8944-1e11ceeda01f.roa (raw, json)
Hash identifier: p4FvOG0q0hrsGILXg489E59dfjFWt6U4T5bIktlhPVU=
Subject key identifier: A4:98:EA:40:09:FE:71:FB:2D:05:05:FE:9F:14:AA:CA:39:65:00:01
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584EA79F03BFE7A56E399DA68480
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/977e7464-8fce-3f9b-8944-1e11ceeda01f.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7155
IP address blocks: 70.41.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9f:03:bf:e7:a5:6e:39:9d:a6:84:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=943c9902-07d3-4500-bf5e-55204db69972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:88:30:7b:15:75:30:0b:50:a6:9e:99:54:11:
c0:ac:a1:f8:5b:77:38:43:ee:4c:65:1a:05:fb:cd:
78:d1:e4:79:cf:87:68:6e:05:28:ee:ae:39:d3:35:
0a:6b:13:02:43:e3:75:d6:3c:54:2c:c3:5f:28:d4:
8e:13:fa:db:df:37:db:35:10:a6:4c:4b:63:5e:ec:
75:c7:67:05:32:2f:fa:b2:08:35:03:10:79:4f:73:
67:4f:ef:82:b8:21:32:fd:6b:a1:7c:eb:00:a1:b0:
88:be:53:1a:66:02:39:92:c9:b8:77:f7:34:89:fb:
28:cb:8d:5b:ae:e4:91:27:b0:7d:a8:ad:6c:b8:72:
8a:3f:b0:d7:53:07:88:b2:c5:a3:92:36:25:b2:0f:
f3:e4:60:91:c8:b1:84:ca:db:f0:15:a9:fc:7a:57:
6f:74:40:0c:fd:40:6d:49:a0:c8:9b:b8:3b:8b:55:
59:6c:50:a4:f0:66:28:62:a6:29:c1:a7:99:20:d9:
66:cc:a4:5d:c1:f7:b3:c3:4f:6b:9c:b8:1e:17:a3:
d6:ac:a3:49:41:9e:91:40:37:50:49:d0:d3:54:c3:
1f:7f:ce:0b:36:cd:44:ee:b5:d8:19:64:29:24:21:
cb:ad:24:bb:3b:c9:9b:52:7c:ec:a1:f1:fa:a6:29:
88:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:98:EA:40:09:FE:71:FB:2D:05:05:FE:9F:14:AA:CA:39:65:00:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/977e7464-8fce-3f9b-8944-1e11ceeda01f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:c9:33:ec:be:a9:fd:5c:b6:65:be:6e:53:75:ad:95:23:8d:
ce:c4:6a:d1:d9:c2:1d:90:ff:98:05:7a:c1:92:c7:40:b4:20:
06:08:3a:e3:d7:da:63:40:c6:74:cc:60:b3:9b:16:28:c7:f1:
83:e2:52:c6:87:a5:6e:b5:4e:32:9f:39:da:c4:3a:67:c1:73:
f6:b0:91:2f:81:32:4b:8a:99:85:cb:de:e8:6d:e4:43:96:b6:
e6:95:d8:f3:9a:bc:b9:3d:c5:69:71:2f:9f:84:ed:2a:cd:6c:
b4:da:67:1c:2e:d3:58:a7:81:4d:64:ea:f9:c7:db:84:90:9c:
ac:b7:8e:96:c7:a7:16:a3:e7:d8:e7:d0:12:75:6f:41:b5:3c:
80:14:6c:7a:c2:66:e0:da:cd:6c:8d:29:6b:4b:4c:1d:32:78:
f6:38:62:5a:82:c6:cd:63:c3:15:9b:0b:d1:22:c5:97:7b:6a:
b2:1f:d5:59:56:af:d8:aa:f0:83:38:78:68:ca:48:f4:15:42:
6d:a5:f0:26:03:05:a9:85:f1:d6:65:41:36:0d:5e:d7:fb:df:
bf:79:40:e7:ae:33:33:9e:b2:f8:49:c8:a1:e4:91:07:a7:17:
68:48:a6:fa:98:34:69:91:a7:b5:35:ff:00:3a:43:b7:9a:af:
94:ee:d3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:39:36 2026 by rpki-client