
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ba88815a-de9e-372f-8a24-3232cbdebebd.roa
File: ba88815a-de9e-372f-8a24-3232cbdebebd.roa (raw, json)
Hash identifier: 9xX4fs6+3DIryEcaWaI7Zt/vZkMYJNq8bt6jF4VSRvs=
Subject key identifier: 59:F3:B2:1B:CE:90:AF:60:1B:9C:74:17:65:72:81:5C:21:9A:44:C8
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584EA79D86071D502151BB1B35C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ba88815a-de9e-372f-8a24-3232cbdebebd.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7155
IP address blocks: 72.173.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9d:86:07:1d:50:21:51:bb:1b:35:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=00f289ff-4f61-4f88-949e-ee8d5b69f3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ef:11:4f:59:3f:7a:62:ea:8c:f7:e5:73:4e:
29:1f:d2:40:2e:e1:3f:45:54:01:00:7f:14:e7:b8:
27:91:96:8f:a4:f7:df:73:4e:ad:3b:49:8c:e1:bc:
90:c2:82:2b:f5:09:61:bf:42:63:a6:23:3d:86:a8:
8c:56:08:1c:4e:ce:fe:fa:02:70:ea:bb:42:48:70:
28:5c:39:2d:42:12:de:a2:3d:47:48:db:a2:45:c4:
8f:af:60:18:3b:97:13:62:16:11:d3:fa:3e:e7:25:
49:ce:f6:87:01:e4:b8:c6:7d:f1:8f:22:23:b9:52:
d0:c8:34:0d:42:01:1a:9f:d0:12:c9:fc:96:11:5b:
ba:47:8e:61:ab:2c:62:eb:24:d2:38:fe:84:05:fd:
58:75:1f:f0:2a:66:97:13:d4:cc:82:fc:a1:9c:f8:
07:e3:0d:aa:2e:e5:57:8c:d4:a1:b8:b6:99:4e:57:
34:22:12:c1:30:88:c1:b8:e4:30:cc:c7:5e:2c:42:
62:e8:ee:b7:50:b4:ae:50:f0:d2:e9:e2:8f:a4:84:
a9:ac:38:73:69:d0:ef:13:f6:fd:8e:5e:bb:b7:c7:
f9:6f:53:fc:53:a8:03:3b:07:72:8b:02:84:aa:92:
c9:1e:70:3b:ea:91:c6:0b:37:02:48:ea:79:47:07:
65:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F3:B2:1B:CE:90:AF:60:1B:9C:74:17:65:72:81:5C:21:9A:44:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ba88815a-de9e-372f-8a24-3232cbdebebd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.61.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:9f:46:f7:34:85:fb:30:07:15:05:b6:0f:b9:f9:16:11:2a:
83:95:eb:3e:d3:f4:56:31:01:5f:3c:21:e6:1e:38:28:01:aa:
04:6a:b8:b8:ed:19:e5:f4:23:09:ce:f5:b9:e4:4b:84:17:0f:
a9:51:4d:2f:c7:05:63:c7:f7:a1:82:43:ee:3d:e1:b5:a9:67:
9a:ce:14:06:54:bc:b4:74:bb:14:31:a1:80:88:ce:18:f8:6f:
ff:9c:31:16:7d:21:8f:44:5e:a2:b7:f4:81:e0:e4:ad:e0:99:
0e:9b:9e:bc:83:87:96:ba:83:a3:69:ad:9f:c7:ce:a9:43:33:
aa:32:48:e8:f5:b1:56:f7:f9:b6:27:e5:21:7d:d2:9e:d5:da:
05:ec:12:c8:49:86:33:4d:76:cc:1a:2b:29:ac:5d:9d:38:db:
98:c0:34:ee:d8:0d:46:71:09:cd:36:4d:30:68:dc:0a:da:32:
22:8b:b3:ac:9c:2c:69:ae:8f:6f:73:66:79:3b:06:23:1f:fe:
43:08:a9:22:fb:05:ad:73:2b:86:e4:5c:0d:cc:f9:fb:4c:ce:
8e:4b:f0:6f:55:31:59:31:61:eb:09:54:96:cc:b5:a8:09:f0:
7f:9a:15:d9:92:aa:1a:b3:7c:80:99:31:82:bb:d9:8e:b4:71:
8d:55:e4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:33:38 2026 by rpki-client