
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d8b2421e-1f44-30ea-bbe2-059c816eafe7.roa
File: d8b2421e-1f44-30ea-bbe2-059c816eafe7.roa (raw, json)
Hash identifier: gqkngnJv0FJwIPF2x7t9EBaOZvqD/9pN3lwg94jhuFA=
Subject key identifier: 05:F2:96:2B:E1:AC:7D:17:B9:67:88:2E:2B:25:84:1C:21:74:9D:00
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584EA79D92D6D8E55BFD1AB78780
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d8b2421e-1f44-30ea-bbe2-059c816eafe7.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7155
IP address blocks: 72.173.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9d:92:d6:d8:e5:5b:fd:1a:b7:87:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=b33c256c-bd1b-4abd-92b6-947e2dc5072e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:07:3e:14:4b:fd:7b:ec:10:7b:8b:60:6f:87:
45:b4:ec:88:43:98:a4:1e:57:c6:19:4c:42:79:6e:
4b:de:6a:59:6a:88:2e:73:da:3a:84:c9:23:de:71:
7a:9f:ed:b2:70:3f:dd:de:01:30:34:79:33:2b:49:
d6:13:0d:b6:6a:b0:ca:53:79:7d:56:03:06:24:c0:
c7:63:d1:81:f9:09:4f:f6:2c:8d:9d:16:98:b9:95:
ed:e5:0a:e7:9f:66:33:d4:bd:0e:95:f7:8e:2f:38:
89:a8:79:fc:48:42:fe:fc:12:e4:74:9e:0f:89:f3:
b8:c3:04:a4:b8:e1:16:8d:32:e9:2d:df:ed:7c:64:
62:48:20:98:1d:2c:25:2f:49:5b:5a:ac:3e:bc:72:
3e:83:6b:d9:e3:1f:14:dd:c1:c3:34:d6:51:16:85:
7b:eb:71:a4:13:56:4d:5e:67:aa:8c:b5:60:6a:3f:
6d:a3:44:80:24:36:e9:f5:c9:88:b3:9e:eb:e1:1c:
ef:90:bf:0a:c1:c2:b0:9c:ba:42:1d:66:86:8a:14:
a6:01:7a:5a:7a:d9:a5:61:fb:38:6b:60:e6:7c:c4:
79:f2:3a:87:dd:0e:0d:d8:c6:37:03:e4:8c:bf:18:
df:89:0d:89:12:5a:94:b3:81:7e:b6:4f:09:23:6a:
b6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F2:96:2B:E1:AC:7D:17:B9:67:88:2E:2B:25:84:1C:21:74:9D:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d8b2421e-1f44-30ea-bbe2-059c816eafe7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:9f:ec:09:73:bd:f9:7a:23:b9:56:aa:fe:ef:98:5f:49:5b:
9c:81:42:80:19:55:b3:05:30:00:9a:c0:fe:54:10:cd:be:cc:
0f:18:25:53:9e:78:1b:c1:a0:84:7d:23:b5:a7:dd:e5:48:69:
dd:ed:ce:85:80:72:60:d4:d7:38:7b:b5:1a:9e:2e:52:40:18:
25:ee:23:07:3b:06:cc:d2:6f:c6:c0:c4:d4:68:33:d2:55:4d:
e8:5c:8f:b0:9c:67:88:c0:e8:73:1b:ff:62:8a:75:74:d9:93:
ea:42:7f:a1:3c:38:a1:52:88:11:e3:5c:e0:18:1e:a4:e5:71:
7b:37:b6:a8:ec:36:a0:2b:d4:4d:ab:9f:26:a8:2e:ce:70:da:
7b:9a:e4:f7:bd:c2:06:9e:b5:12:14:8e:b6:40:b4:c3:32:41:
26:ca:a3:a8:bc:0c:6c:25:c4:22:de:07:77:9e:11:12:29:ae:
0b:cc:ba:e1:53:5f:a2:af:f9:65:fd:09:93:d8:24:6d:c6:39:
52:c3:74:d1:04:f6:1e:39:ba:02:c7:b7:f3:ae:1f:0e:d7:97:
c0:ce:6d:25:3f:34:45:fd:1f:80:0d:ed:14:88:77:3a:e5:10:
41:4a:61:ee:fe:13:43:62:84:ed:35:46:e5:8f:42:7d:48:f7:
01:a1:49:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:47:19 2026 by rpki-client