
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a075d9a6-0847-3cfe-a202-526dec364124.roa
File: a075d9a6-0847-3cfe-a202-526dec364124.roa (raw, json)
Hash identifier: UCi2TYF7Wcj4s4ReJ3BOHzNdgA1SM6/hVmpG6p6BdDY=
Subject key identifier: 3D:20:3E:C0:68:E5:9A:03:A1:41:A3:1A:3D:78:67:F3:B7:BD:63:5F
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584B64CD91D450F280F98BCD8948
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a075d9a6-0847-3cfe-a202-526dec364124.roa
Signing time: Fri 03 Oct 2025 01:00:32 +0000
ROA not before: Fri 03 Oct 2025 01:00:32 +0000
ROA not after: Thu 01 Jan 2026 02:00:32 +0000
asID: 7155
IP address blocks: 72.173.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:64:cd:91:d4:50:f2:80:f9:8b:cd:89:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Oct 3 01:00:32 2025 GMT
Not After : Jan 1 02:00:32 2026 GMT
Subject: CN=271342fe-851c-4df7-8c5c-f921f1f0c184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:44:7e:5e:30:e5:37:ba:c7:ab:ee:45:30:82:
5a:42:0e:e8:c1:ea:80:09:95:8b:16:67:ee:ee:b7:
c0:ed:5e:4a:9d:54:c4:32:dc:94:be:0a:31:57:9c:
08:45:3c:99:1b:d0:0b:d7:bf:88:7c:dc:58:dc:07:
e1:d8:29:c1:fa:e5:15:ae:41:50:8b:1b:33:02:68:
1c:c0:45:21:0e:d1:83:e2:2e:44:77:7e:91:5a:03:
a4:85:c5:e1:69:a6:ca:ac:70:8b:1a:83:5b:20:0a:
9f:69:7b:65:e9:31:a0:4d:3e:83:dc:48:22:db:5b:
aa:2f:fa:6f:2d:32:81:f7:27:dd:59:d2:5b:4d:35:
8b:95:8a:7c:e0:e8:a1:71:c0:76:dc:85:22:ac:3b:
89:06:cb:c8:42:9a:db:4c:29:e9:f5:a4:de:6c:3f:
8c:5d:ff:86:ac:c7:39:84:da:c6:b7:87:3b:19:31:
07:df:da:e4:d0:44:f0:78:60:16:be:c0:0b:13:36:
ad:01:6a:fa:b4:24:5e:91:b0:d8:b5:33:dd:d2:ae:
6f:37:94:5d:62:c8:55:04:11:59:57:e8:5e:aa:c6:
c9:23:4e:25:f2:e9:11:53:53:d5:2a:50:ca:17:8f:
7b:0d:56:a8:7c:a1:1a:e9:a1:ef:62:89:be:20:ce:
2c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:20:3E:C0:68:E5:9A:03:A1:41:A3:1A:3D:78:67:F3:B7:BD:63:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a075d9a6-0847-3cfe-a202-526dec364124.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.247.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:83:e7:4d:1a:b3:e0:cc:c8:a0:ee:01:18:5c:58:48:eb:68:
2c:ac:aa:d2:2e:1d:2b:4f:e4:90:0d:b8:65:92:35:b3:d9:b1:
46:aa:17:65:55:19:2b:7b:19:d0:fc:6d:15:81:52:9a:d7:54:
d9:f5:24:b0:98:56:55:35:96:9d:20:4e:79:a2:14:6e:1b:33:
7e:42:86:ea:b8:a1:86:5b:cc:11:5f:33:ed:7e:d5:fd:8c:60:
69:88:35:83:67:ea:08:10:4d:c1:da:c1:69:76:e4:21:76:db:
76:27:08:92:8c:2a:60:57:97:6f:19:b3:49:ce:db:8e:89:7a:
f7:8e:09:93:3c:d5:fd:a4:80:4a:b5:aa:69:c1:00:14:c2:1c:
ac:fa:2b:87:27:09:60:15:32:fa:66:3c:3b:90:fa:42:88:09:
d5:bd:f4:66:89:c2:00:17:e3:13:70:a8:f3:0f:9d:61:dc:f6:
56:9f:bd:3d:fb:ca:93:0a:95:23:62:9f:62:02:b4:2d:af:0e:
c6:f6:a1:e3:e0:e2:39:56:bb:90:d9:df:fd:6f:c6:5e:20:73:
d4:de:26:65:ac:75:80:4b:48:ba:5a:71:38:a0:c9:22:3f:33:
9d:02:c0:8b:9b:da:59:5e:32:9f:c8:3a:73:35:d8:16:2a:8e:
ef:29:48:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 12:10:07 2025 by rpki-client