
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5aa488c8-62eb-3d14-8264-d82bfd4f8814.roa
File: 5aa488c8-62eb-3d14-8264-d82bfd4f8814.roa (raw, json)
Hash identifier: tLb6IZXF8uEc8vZBbtsXCu5WYwTXdQXn9bvRZzy/FdA=
Subject key identifier: 51:64:67:08:FC:D1:0F:02:D1:5F:6C:C4:3E:A2:49:03:89:49:53:89
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584EA79FE8158DB32DB0F8C9B700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5aa488c8-62eb-3d14-8264-d82bfd4f8814.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7155
IP address blocks: 184.21.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9f:e8:15:8d:b3:2d:b0:f8:c9:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=618caab2-14d3-487d-a33b-bdac65b87121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:18:05:c4:43:65:4f:79:32:44:1b:6c:8b:16:
bf:8c:61:0e:48:95:d5:76:0c:fc:7e:bc:83:79:fd:
e2:b8:34:bd:aa:10:7b:38:1d:34:a8:e0:4b:b5:14:
4d:bc:4a:0c:20:31:1f:72:42:c3:24:23:85:8c:85:
09:38:93:6b:25:cd:e6:cd:45:e5:98:b5:a9:f9:e8:
4b:7e:7f:45:9f:bd:f2:f2:39:9e:a3:2a:8b:d8:bd:
3b:63:89:b6:ec:68:c8:7e:3a:2f:27:c0:e7:ac:f5:
71:fb:84:87:94:bf:01:80:77:c6:e9:de:92:a0:40:
7b:8e:86:1f:a3:15:b7:ae:a9:0f:e2:aa:ff:d8:db:
5c:b3:92:98:c5:44:a3:5f:26:88:87:d5:8a:9a:ce:
dc:f1:e5:18:9d:17:40:12:82:37:26:83:d9:40:4f:
07:de:9d:a6:8f:fa:96:12:ed:23:19:db:68:7e:59:
3e:b7:60:ba:b9:dd:bb:ed:32:2b:d5:25:f0:7e:b5:
55:ad:fe:d7:c0:2e:7b:1b:6a:60:73:b9:82:3b:29:
38:74:d1:00:d1:71:64:ab:39:cd:f9:1d:8e:9c:8b:
08:12:ce:c6:8a:b0:6e:a0:e6:37:09:16:81:07:27:
12:b1:90:14:55:62:b3:0d:2c:38:61:30:9e:31:65:
43:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:64:67:08:FC:D1:0F:02:D1:5F:6C:C4:3E:A2:49:03:89:49:53:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5aa488c8-62eb-3d14-8264-d82bfd4f8814.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.21.13.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:c8:41:32:56:cb:1a:2f:f4:53:e4:62:4c:a0:6c:56:07:b6:
a9:52:5d:94:c4:3d:c6:b2:51:5f:28:be:0c:49:a8:54:b9:7a:
80:c0:e6:71:4a:31:fe:b7:21:d9:e4:86:37:e4:25:17:af:99:
07:02:14:d0:eb:56:f1:2f:99:67:21:26:dc:99:29:66:8b:5d:
11:f6:0c:64:c3:5a:1f:69:d2:52:d7:df:fc:0e:32:b4:5b:24:
d4:5d:dc:01:a5:96:24:ce:d9:57:7d:11:02:d7:3a:1b:c6:32:
21:4a:c9:4c:37:15:b8:3e:bb:5b:c4:1d:24:8c:85:8e:77:ed:
0a:61:8d:7a:33:37:c7:44:de:db:79:8b:aa:8d:76:b9:ea:0f:
31:08:db:7b:7e:e7:e6:56:0c:18:68:90:29:0e:a2:2b:0e:7a:
cd:52:1f:50:24:2d:aa:8b:ad:6f:aa:80:03:85:07:14:4f:f2:
14:d4:57:96:f1:e3:e4:cc:04:d7:56:10:8d:99:53:0e:f2:bf:
9c:71:fc:a9:38:5f:85:f4:1a:5c:34:5c:7a:41:53:3c:94:9e:
7c:e0:52:c6:1b:e5:54:12:bf:42:e0:6b:fc:e7:d2:a0:68:47:
e0:ec:64:f3:42:68:29:a0:25:05:81:18:fc:5f:95:91:19:6c:
ad:c4:af:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:21:23 2026 by rpki-client