
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3f6d5d1-32fc-3049-a1c1-cdb56db66651.roa
File: a3f6d5d1-32fc-3049-a1c1-cdb56db66651.roa (raw, json)
Hash identifier: rHBhrTYcB13KzX1F1H8+CnheBCNgHUsTyv98pAubsJ4=
Subject key identifier: 08:B7:DB:24:5A:55:8A:6A:B2:74:C1:0E:A9:33:98:C0:F6:15:B5:98
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E0C71CABF20FEF95C86A00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3f6d5d1-32fc-3049-a1c1-cdb56db66651.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 184.21.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:c7:1c:ab:f2:0f:ef:95:c8:6a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=2dc4b6e2-9125-4c98-b7ec-6c07618815f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:96:d6:27:b5:36:14:9e:ff:84:c0:59:57:23:
3b:c9:f6:8e:c4:0e:bf:86:0a:6a:0c:7d:ea:ff:da:
f6:5e:b6:0d:25:a9:86:2a:39:71:6f:be:a1:9e:a8:
64:5c:57:ff:4f:5f:64:9a:8b:cb:33:bc:8c:17:f5:
45:c3:0e:59:91:b1:c3:2b:11:3a:be:0c:20:35:cb:
a5:13:12:13:da:f3:65:88:2a:74:d4:b6:62:74:ca:
9f:70:0b:66:2b:03:06:97:07:57:6f:ab:26:06:a1:
c1:6a:3a:8d:44:9c:f9:f9:e7:75:85:df:74:1f:93:
43:f1:74:8d:02:54:46:fb:6e:39:99:6d:fc:bd:d5:
43:88:3e:d3:48:91:f8:8b:d6:d7:10:c7:f9:1a:cf:
aa:9b:72:7b:d9:b9:4f:88:1d:df:ad:e8:7a:6f:67:
b7:3f:98:05:9c:ac:ea:43:ad:44:ef:8a:d7:2b:cc:
30:5a:91:de:50:0d:1b:4d:91:33:03:75:00:e1:20:
2f:77:71:9a:f9:a3:0d:c0:ed:54:c2:8d:23:89:ed:
49:1d:ef:1c:7a:23:4e:e0:b2:c4:5a:e4:e8:e3:9b:
57:5c:4e:81:72:69:7c:15:94:d5:8e:84:58:c5:45:
cc:5c:76:c9:d3:d8:a9:59:46:47:a6:a8:9a:9c:ef:
23:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B7:DB:24:5A:55:8A:6A:B2:74:C1:0E:A9:33:98:C0:F6:15:B5:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3f6d5d1-32fc-3049-a1c1-cdb56db66651.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.21.122.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:b4:c5:b4:ba:b1:93:a4:ec:e9:71:89:2c:99:54:9c:ea:c7:
79:9c:b8:5e:be:5f:2e:73:4b:c0:8e:50:6f:4b:c3:fc:6a:19:
fe:3e:72:23:32:5b:7d:58:bf:b0:69:26:77:08:d1:39:45:1f:
d7:d1:12:08:d3:d6:8d:c9:5e:fb:c5:26:16:7c:4e:de:27:18:
16:31:65:a5:79:47:7c:ae:e6:f7:74:17:ec:01:07:4f:d8:54:
af:44:e5:72:f9:d9:f6:2c:3d:df:ed:3a:49:bb:50:ef:38:82:
c2:f9:e5:cc:1c:4c:a7:ea:29:07:7a:22:db:1f:eb:83:aa:85:
27:83:ff:cd:1d:77:50:e7:de:a3:91:c1:c3:a3:51:66:10:c1:
b5:e5:71:11:12:1c:61:35:cc:66:05:1c:23:5a:00:af:0d:34:
2f:56:e7:7f:1d:f0:bb:83:ea:98:01:95:f6:13:c1:97:7c:11:
7f:e0:9c:04:09:b8:99:1d:38:80:05:01:c7:ec:04:6f:3d:1c:
ba:98:a3:3e:0a:de:24:78:8a:50:0d:9b:7d:ff:e5:c2:a6:77:
d7:ec:52:9e:68:d1:4b:7d:ae:6d:a5:cb:7b:1a:d8:5d:b1:b2:
b6:d5:12:ec:d0:3c:af:c9:bd:dd:55:bd:84:69:bf:95:2d:d1:
2c:01:e2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:52:29 2026 by rpki-client