
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cd51f9bb-ad39-3d0f-b33c-e7fea5ec1b03.roa
File: cd51f9bb-ad39-3d0f-b33c-e7fea5ec1b03.roa (raw, json)
Hash identifier: 8CatarxqdNfX0K42Oe50Hmxhn3QG1iKxqtzPnjn+0z8=
Subject key identifier: 9C:82:12:E3:C9:1C:76:A8:36:28:43:BA:30:32:00:EE:0F:2E:4F:8A
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F497B06B03A9EA109D39E4740
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cd51f9bb-ad39-3d0f-b33c-e7fea5ec1b03.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 72.173.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 29 Oct 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7b:06:b0:3a:9e:a1:09:d3:9e:47:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=b5d129c0-5619-444d-bfa4-7ccdca39477a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d6:fa:99:84:62:9b:bc:70:fb:c3:79:72:3f:
24:af:20:f6:49:33:a7:31:9c:d3:cf:4e:85:bb:f0:
1d:26:64:c3:6d:6e:a2:fa:d8:e9:01:2c:1b:48:84:
aa:0d:99:3f:d0:13:82:04:ce:c7:05:06:c4:c0:14:
6e:1e:60:0b:b3:69:92:c1:82:a7:1b:98:15:73:d9:
05:66:fc:6c:08:e2:b8:5f:b5:1d:38:33:9a:a9:22:
c0:a1:03:cb:12:e5:e0:96:e1:b1:85:7c:52:06:64:
16:cb:6c:d8:91:8c:e8:b4:9a:6e:ca:18:4b:d6:ba:
a2:6d:bd:6d:0a:b0:dd:8a:cc:55:e9:fa:39:e3:3c:
50:b2:cd:d0:24:ff:84:9e:d6:23:6c:af:91:fd:b4:
23:92:0c:5b:02:29:74:47:06:ed:dc:81:fb:e8:79:
80:a5:41:cb:d3:8d:2f:84:7b:61:52:8b:8e:ad:a7:
9a:e8:9d:bd:61:14:e7:07:e0:a0:ff:f2:79:b1:8b:
29:11:df:4f:76:b2:d2:95:31:59:a3:92:2c:ea:8c:
40:20:06:c7:4f:8f:6d:b7:11:c9:c8:5d:c2:82:0a:
89:2a:c7:b8:e7:c0:94:94:87:3a:6d:c0:42:f1:06:
f9:2d:6f:66:50:81:95:15:d3:b2:24:e9:49:0e:2c:
0e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:82:12:E3:C9:1C:76:A8:36:28:43:BA:30:32:00:EE:0F:2E:4F:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cd51f9bb-ad39-3d0f-b33c-e7fea5ec1b03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:06:48:60:c4:d1:59:a9:64:f9:90:83:4f:89:a0:49:d5:f5:
0f:1d:35:50:8d:a4:f6:bc:ff:72:cc:e8:71:b0:bc:79:3a:9f:
4f:88:a3:85:83:b8:a7:ef:e6:21:2a:d8:e4:e4:f6:e5:7b:3b:
46:de:98:e7:4e:c2:76:a2:3c:e9:e8:11:ab:81:d3:8e:57:7c:
1c:0f:8d:de:6b:1a:ba:2f:ba:ac:7c:de:00:4a:6f:54:71:4b:
e2:8c:76:16:0f:21:da:69:4f:2c:c3:b2:88:58:b2:d7:d9:f0:
7b:07:49:26:95:a1:89:46:8a:68:c1:a2:4c:c1:69:de:43:2e:
99:b2:17:68:af:c4:09:af:4a:61:b0:12:5b:d9:cf:f1:da:c9:
b2:d3:15:30:db:09:b9:7c:74:30:b0:d7:69:b3:78:2d:17:54:
f2:f9:d6:06:df:6c:a4:c1:d4:84:af:df:ef:66:62:d6:6f:38:
ef:7c:5d:98:05:a1:05:6a:9a:df:55:c0:b9:d3:58:76:90:fa:
f1:b3:ce:41:0e:72:43:50:76:8e:ec:c3:48:d3:00:87:d8:8d:
30:9b:ee:72:2c:92:60:16:7f:c0:c0:4b:2d:21:4d:19:95:af:
a6:ab:7c:08:91:c2:3b:7c:c2:8e:ea:a4:e0:5a:de:08:b8:7e:
36:f7:ac:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:23:45 2026 by rpki-client