
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/888a9cb8-dc13-32af-bce1-0cdb0968ef96.roa
File: 888a9cb8-dc13-32af-bce1-0cdb0968ef96.roa (raw, json)
Hash identifier: bmM8J6wHFUMNLPZS2NntcNNli0x/4YZntyB/RIrWnd8=
Subject key identifier: B1:BD:FC:E5:D3:32:C4:77:A5:D8:EF:32:AE:48:DF:A2:0F:CC:EE:94
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E00DF9DE1948ABADA45C00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/888a9cb8-dc13-32af-bce1-0cdb0968ef96.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 184.21.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:0d:f9:de:19:48:ab:ad:a4:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=8553f08f-8669-46a1-9ef0-b30add69a41f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5a:61:da:97:7c:ef:99:8f:b5:41:cc:f6:bb:
dc:88:d9:15:f9:52:f1:b1:49:e4:b0:c7:87:e5:0f:
d6:31:6a:de:26:49:2a:46:08:19:53:3a:82:33:ec:
3f:41:2a:af:12:47:7c:29:54:46:9a:c9:71:30:ff:
1c:e6:dd:07:0c:f3:e1:8f:ff:a5:d1:b5:cd:3a:d0:
1f:dd:91:d1:26:75:80:2b:92:86:36:4c:dc:81:06:
3f:20:66:7c:80:a0:fc:ba:d0:47:13:04:22:98:43:
77:e7:85:8c:e5:70:b2:f1:0c:ca:a8:4c:9b:4d:04:
98:03:06:6a:3c:fc:9e:cc:c1:6b:a2:89:3d:06:a6:
9e:e2:47:ac:aa:3a:a0:74:d1:50:57:af:d1:08:c5:
a2:a8:de:37:9a:9d:93:74:13:2f:85:f9:48:da:26:
9e:9b:bb:d1:da:60:0b:2b:b8:57:dc:b2:d0:58:12:
5e:c1:a6:aa:2e:b1:8f:32:86:87:0f:c1:75:43:7e:
d0:88:c7:fa:b9:6b:4d:e2:f2:58:8c:ea:f5:a9:27:
36:3e:7a:6a:c1:25:33:64:9b:31:8f:08:1c:a3:53:
e5:76:f6:77:01:30:dd:51:98:1d:05:06:c6:0d:57:
2b:e9:68:f6:05:1f:05:8a:09:7e:e7:74:fb:64:17:
f6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BD:FC:E5:D3:32:C4:77:A5:D8:EF:32:AE:48:DF:A2:0F:CC:EE:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/888a9cb8-dc13-32af-bce1-0cdb0968ef96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.21.22.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:f2:d7:1f:90:60:d1:10:52:e6:41:9c:26:b7:3f:eb:f1:a9:
a8:43:39:ae:73:7c:e3:06:cc:28:16:59:38:04:3b:1e:1d:d9:
ed:70:8d:9c:65:9f:3a:e6:7c:0d:51:f2:0a:68:81:dd:80:c0:
4f:bd:e7:65:5a:65:7d:00:d2:79:d7:17:18:5d:44:08:48:d9:
93:10:47:2b:39:67:2b:4e:58:63:41:52:49:bc:51:4f:ff:6d:
25:26:0f:50:ca:ed:98:91:c7:eb:c6:65:c2:82:53:1a:0b:8f:
21:c3:a9:ea:49:aa:6b:e0:03:30:f9:4f:97:82:5a:85:00:19:
0f:5b:22:b7:dd:44:2e:86:a4:a7:b6:75:ff:4a:f8:89:d6:c9:
28:99:24:12:9e:43:d8:14:12:5b:66:b4:05:3d:71:72:aa:af:
3f:71:f5:01:50:c6:b8:d0:47:4d:48:60:71:bf:f5:7e:e1:56:
cd:c5:8b:f5:83:14:fb:7d:0a:cd:05:74:4a:ed:7d:4d:e5:85:
2c:ab:d2:e4:42:a6:72:71:65:45:b5:0c:62:2d:6c:15:f0:96:
e1:cd:33:29:ad:a4:fc:30:58:14:06:67:bf:b7:54:63:1c:ba:
28:5a:22:14:71:1e:c6:73:49:04:40:18:48:aa:a0:be:2f:04:
67:77:7e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:54:39 2026 by rpki-client