
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bc68bafa-3578-3489-94f0-78c2ebcbf97d.roa
File: bc68bafa-3578-3489-94f0-78c2ebcbf97d.roa (raw, json)
Hash identifier: Qh6ZJLwp7709rks5SnVUxFGG08YiuHZrup2flnRWREg=
Subject key identifier: D9:53:CA:4A:F0:1B:C2:AA:B7:F9:5D:28:56:A2:8C:86:FC:60:97:A1
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584EF124C89C48FE5DF1D087EE80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bc68bafa-3578-3489-94f0-78c2ebcbf97d.roa
Signing time: Mon 24 Aug 2026 09:52:26 +0000
ROA not before: Mon 24 Aug 2026 09:52:26 +0000
ROA not after: Sun 22 Nov 2026 10:52:26 +0000
asID: 219394
IP address blocks: 72.244.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 27 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f1:24:c8:9c:48:fe:5d:f1:d0:87:ee:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Aug 24 09:52:26 2026 GMT
Not After : Nov 22 10:52:26 2026 GMT
Subject: CN=c8093f31-8389-4bdd-b59e-0d72a61cfb20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:bd:2d:df:78:ea:32:fc:16:91:4e:a9:e2:4f:
fc:fb:3b:6e:4d:48:09:4d:16:cc:77:56:1a:d3:4f:
22:99:c3:57:3c:c5:cc:6c:40:c3:71:15:c5:0a:f4:
72:92:0b:20:46:c4:ea:32:88:98:cb:f7:fa:e8:c7:
6c:49:06:ce:e7:8a:95:ee:8b:32:e9:3c:42:01:4f:
17:fb:25:0d:7d:cd:37:5d:2f:ad:6a:ba:54:28:29:
9a:ae:32:71:6f:e0:b6:6d:80:c2:dc:ee:ba:fb:e9:
f2:40:66:af:71:5e:46:f4:b1:57:08:e7:05:52:31:
f6:01:d1:dd:d2:b0:18:6b:38:17:aa:59:72:f2:21:
f9:bf:55:4f:80:e8:5b:ab:ae:a0:c8:85:66:26:35:
7f:19:49:d0:c9:84:1e:5e:43:50:29:56:5e:ae:6d:
49:28:f7:8a:3b:0f:95:fb:28:6c:48:3b:d9:de:77:
6f:b1:e2:7f:f4:2e:05:d5:a2:e4:bd:73:00:57:80:
61:10:55:24:68:81:ee:db:5f:dc:c4:c4:64:a9:9e:
76:2a:d8:87:6a:fc:17:87:27:cd:12:05:df:f3:6f:
28:29:3f:2e:02:fb:90:9a:e5:e1:bf:03:48:66:54:
43:da:d9:90:69:90:2f:03:c7:3b:0b:c6:8d:4d:37:
2a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:53:CA:4A:F0:1B:C2:AA:B7:F9:5D:28:56:A2:8C:86:FC:60:97:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bc68bafa-3578-3489-94f0-78c2ebcbf97d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
72.244.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:6e:ba:8d:8a:bf:26:48:4f:98:b5:19:5b:08:e6:bf:6a:19:
fb:35:57:8a:93:68:13:aa:24:84:01:06:c6:b4:91:01:74:d1:
11:c0:fe:10:a9:ea:ba:3f:2d:ea:b0:96:b6:fe:34:41:52:4a:
25:70:a8:81:c6:05:dc:f8:f2:77:16:49:b8:cf:99:b6:76:81:
e3:2e:52:93:80:83:82:73:25:c4:47:ba:e8:c2:59:ce:fb:8c:
39:66:96:b4:44:5c:77:8f:15:65:e3:f5:09:9e:d0:90:67:74:
f0:c3:66:8e:02:56:0d:1f:65:48:59:cd:76:ec:73:98:7e:31:
df:44:df:4e:f7:9c:95:84:b5:39:d4:fb:19:00:92:09:18:a7:
3d:39:96:58:75:fa:1e:79:92:34:4e:3e:75:6c:04:27:26:6c:
98:67:27:77:1b:06:e1:e2:5c:cb:2a:05:fa:45:9d:c9:87:f8:
aa:da:05:15:53:d8:74:1a:dc:ee:2f:fb:d1:e2:7c:21:cc:87:
2f:16:7e:cd:ba:92:3c:45:45:37:79:00:85:d4:f8:f1:68:6b:
27:fa:3f:e1:5d:c4:fa:7d:97:aa:05:41:0e:2f:41:ea:71:10:
77:8c:8c:9c:26:7e:64:81:76:b4:86:71:e2:ca:cb:a7:48:3f:
f3:bd:04:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 08:50:20 2026 by rpki-client