
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7fd7311b-7d62-3cce-b784-f910bbc2150b.roa
File: 7fd7311b-7d62-3cce-b784-f910bbc2150b.roa (raw, json)
Hash identifier: a3q7wdeqPnqOpUy8vKwhG8GhpqjbWyKM1+Szz4QM4+I=
Subject key identifier: 8E:3D:0F:C1:05:44:D4:42:EF:F5:85:6B:52:E1:9D:23:65:80:C2:B3
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E01237234692A117BB2880
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7fd7311b-7d62-3cce-b784-f910bbc2150b.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 184.21.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:12:37:23:46:92:a1:17:bb:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=c5a7687f-a7db-4d9b-a87a-052521b08d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e2:7d:22:1b:79:e7:61:7a:43:cd:71:67:4a:
5f:02:b5:b0:1e:ca:72:1e:09:ae:8c:81:98:83:80:
07:42:11:58:19:22:6c:23:9d:65:cc:f1:df:13:52:
f8:1e:0c:90:b4:21:85:43:03:f1:0b:fc:b3:95:44:
c3:ac:6a:1d:16:19:0a:b9:fd:57:30:6a:33:cc:8d:
be:5c:66:40:68:6a:6d:96:0c:d8:45:14:36:a2:ab:
07:14:ec:d3:2d:12:8b:29:fd:7a:3e:fa:93:f0:a0:
79:63:91:65:81:1e:d9:07:58:75:27:5b:07:80:1d:
3a:bd:1e:fb:55:a4:df:db:32:81:b2:86:c0:d4:2e:
69:63:13:66:3f:21:88:9b:e9:ff:a1:4a:72:84:18:
b5:4b:e4:fc:09:35:aa:a6:0c:63:7b:f8:67:42:53:
b0:cd:ce:fc:c3:d1:5c:12:dc:eb:53:ac:d0:c9:f1:
17:07:f9:42:01:e9:ea:02:75:78:93:34:c2:e9:92:
18:1e:76:75:df:95:b8:ff:b7:87:1e:8d:1a:aa:bf:
d5:71:61:06:bf:fd:46:3b:fc:d8:ad:27:4d:2e:a7:
df:20:75:4f:84:e8:be:3b:4f:46:63:41:88:f8:00:
82:dd:ae:fb:a9:7b:9a:c4:5d:19:7c:d6:d8:64:6c:
92:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3D:0F:C1:05:44:D4:42:EF:F5:85:6B:52:E1:9D:23:65:80:C2:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7fd7311b-7d62-3cce-b784-f910bbc2150b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.21.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:fe:98:d8:42:6b:66:8b:83:9f:1a:cb:fc:cd:37:0c:cc:ad:
51:e5:fd:51:ad:d4:f1:a2:d8:33:e7:16:2f:12:5d:73:b3:98:
cc:93:78:45:8d:12:41:4e:d7:52:1a:3f:8a:84:14:0d:21:ed:
0d:f5:f7:3d:36:f8:61:71:8a:07:3f:58:ca:7f:99:02:79:7b:
62:b3:5f:be:0d:35:44:20:44:0d:d5:97:8d:fe:62:c4:53:e8:
71:d7:a1:c6:bc:b0:4f:8c:4f:0a:91:3b:4e:74:88:cf:54:84:
90:f7:0e:8d:76:c6:95:0c:73:42:52:2e:9a:50:7d:af:e3:0d:
a2:5a:b5:df:41:73:43:bf:a4:bf:9a:46:cc:7b:14:b9:bf:af:
fb:43:69:57:f7:ef:ce:94:64:2e:fc:3d:ed:80:90:f7:d8:5b:
71:89:82:1d:34:0f:fa:ab:f7:b3:49:e0:ec:a9:76:67:88:47:
96:52:23:45:20:37:0c:e4:a6:21:3c:be:d6:4d:63:15:c2:eb:
94:32:ec:8e:d7:e9:24:48:a6:aa:b8:0e:33:49:7a:a0:4a:7d:
0c:41:50:18:39:93:1a:5b:c2:62:d4:8e:36:0b:05:dc:01:79:
36:44:8e:88:33:ab:c4:d8:aa:32:98:37:b6:99:3a:31:62:2a:
67:9d:7b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:53:14 2026 by rpki-client