
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1c453803-1342-39c4-91ca-f1b344c927be.roa
File: 1c453803-1342-39c4-91ca-f1b344c927be.roa (raw, json)
Hash identifier: st9ri8uXXC9vNLOEDgVFoA6mCAV04pbM4r0Xb7kBZUs=
Subject key identifier: 28:AF:AB:C9:90:BC:CA:14:FA:25:FA:19:97:F5:CA:5A:F9:E4:B0:66
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E01503C880A0D059B108C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1c453803-1342-39c4-91ca-f1b344c927be.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 184.21.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:15:03:c8:80:a0:d0:59:b1:08:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=3f27dc84-7d79-4826-8230-85ceeac79c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6b:0c:cf:45:56:26:72:c7:3a:7a:3f:15:06:
9b:06:ef:77:6b:f7:77:26:01:cb:85:9f:99:49:2e:
88:4b:aa:97:34:2a:9a:d9:70:16:40:cd:31:0d:42:
77:e8:48:2b:f1:45:82:aa:0c:1b:0a:1d:a4:fe:f6:
db:f0:2c:ef:8e:db:99:75:02:d3:d4:e5:bc:36:d1:
b7:a0:11:41:50:54:0d:7f:88:87:b1:45:66:00:d7:
61:77:a1:25:c9:7c:a6:f1:00:dc:9a:0d:7d:0f:f7:
96:df:a2:e0:77:b0:d3:2e:42:6e:35:24:47:a8:33:
69:9b:2e:a0:79:43:3e:7c:c5:4b:5d:15:65:57:62:
bd:2e:be:a7:52:0a:f5:4d:52:67:73:da:25:cd:76:
e2:03:2f:28:c7:78:95:19:81:21:db:60:f0:69:5d:
10:d8:88:ac:81:fc:60:d3:a7:7f:16:07:ae:da:53:
a5:43:4e:3c:ef:ba:29:1b:8b:0d:5c:f6:44:36:35:
60:a8:06:1b:08:eb:35:30:f6:14:62:77:d6:fa:10:
b5:58:a9:a2:6d:9a:76:81:f1:8b:57:2b:1b:00:da:
92:f1:6d:ec:bb:9a:20:f9:38:5f:4e:80:14:01:79:
c5:c3:9e:f6:13:87:b8:b8:6d:b6:a3:87:ac:4f:8b:
5a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AF:AB:C9:90:BC:CA:14:FA:25:FA:19:97:F5:CA:5A:F9:E4:B0:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1c453803-1342-39c4-91ca-f1b344c927be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.21.251.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:0a:39:a9:22:10:85:16:9f:06:0b:3b:7b:51:c2:5e:e2:5c:
87:f2:fe:af:d9:78:2a:eb:50:e0:c1:24:25:bf:ed:f8:ae:10:
44:80:f5:d0:9e:34:aa:c8:df:9e:fb:ec:52:36:84:08:5e:d4:
09:0f:7e:e7:81:bc:34:d8:4e:cc:4c:f9:98:a4:78:68:98:71:
27:f8:5a:3c:db:b5:d8:b0:0b:7c:e9:cd:77:1a:0f:f3:b7:8d:
10:93:cc:43:e6:df:b9:fd:a2:4d:0c:f5:31:33:66:d7:f5:0e:
fb:a1:c5:7f:b5:1c:3d:e2:df:88:1a:6a:ac:79:7a:b6:a3:e2:
3a:dd:03:fe:94:fd:04:65:cf:80:af:4a:8a:11:e2:94:f8:a3:
ea:78:bf:5c:3d:79:e1:9e:c8:b1:73:cd:2a:9c:9d:ff:f7:03:
b2:01:c1:25:c7:b7:91:a5:8a:dd:e3:7a:cb:a2:a5:22:a9:84:
f8:a6:e0:97:27:39:9b:28:57:d6:79:f2:d0:16:53:0d:21:75:
fb:c9:5c:e4:51:a3:c3:bf:ee:9f:b5:8c:41:f4:45:cd:38:97:
6c:79:39:ae:47:89:e3:c7:84:7c:12:2d:9a:b8:fa:8a:40:7d:
b3:24:ba:bd:44:1e:ee:be:e3:0b:0a:06:9a:d6:ee:79:37:5a:
56:9a:1c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:53:27 2026 by rpki-client