
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2497497a-d0c2-3ac2-a985-989d1bc97647.roa
File: 2497497a-d0c2-3ac2-a985-989d1bc97647.roa (raw, json)
Hash identifier: eG1UZZzK3tTF/oMA7q/M9faED5+1xjTzoE9POM0VSiw=
Subject key identifier: 3B:43:59:B2:EE:5A:8D:CE:C7:26:99:EF:99:3A:12:C6:1A:D6:A5:CE
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24DFC19FD3F16EC50E8CB200
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2497497a-d0c2-3ac2-a985-989d1bc97647.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 75.104.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:c1:9f:d3:f1:6e:c5:0e:8c:b2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=e038d445-298d-4e1d-8a70-09c65144c826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:8a:af:6d:d8:25:e1:81:60:6f:78:c5:97:c7:
1c:45:5b:9c:27:42:69:96:f5:91:f4:58:31:40:ca:
b2:b1:f9:eb:1b:7a:2f:37:99:7b:27:39:40:77:bc:
2b:3b:d1:1c:07:75:7e:e5:47:fc:a1:6b:7a:12:75:
b0:92:7b:6a:ac:3e:35:32:d3:bc:2a:a0:89:c0:c5:
41:e8:ae:4a:37:51:f7:3a:d5:b5:bc:c6:8d:0f:9c:
c8:6d:46:ad:8f:6e:32:c6:dc:aa:11:a6:60:ad:66:
1b:8c:82:79:08:79:38:59:79:c0:b1:2f:61:a2:77:
af:fa:f0:f9:67:37:7e:bc:9f:a3:a3:c0:46:a9:d7:
13:4d:cf:70:93:bb:f6:d5:be:06:34:ce:bc:7c:33:
a7:4b:ec:ba:75:3f:54:72:54:03:e1:af:23:34:d7:
55:7d:48:0d:b0:63:49:09:c8:ea:3b:c5:35:ca:ad:
33:55:8c:15:7d:8c:18:77:19:42:a4:97:69:70:e2:
5b:62:9f:b4:87:1b:ab:44:95:83:07:1f:bb:33:6f:
e1:35:78:84:c8:d4:48:e6:fc:68:48:50:4f:47:74:
34:51:45:82:08:a0:27:7a:4c:a8:e9:f8:48:4c:48:
b6:0a:45:ce:b5:39:b2:9f:63:56:4f:6b:5d:c2:29:
62:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:43:59:B2:EE:5A:8D:CE:C7:26:99:EF:99:3A:12:C6:1A:D6:A5:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2497497a-d0c2-3ac2-a985-989d1bc97647.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
75.104.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:fd:9a:15:44:be:92:7a:d7:62:29:65:f9:3b:40:95:3c:43:
d2:14:1b:2d:10:aa:e4:74:65:13:a8:2e:74:92:a9:3e:59:86:
00:cf:d8:2e:34:a7:00:81:dc:03:69:22:8c:41:8d:0d:c5:2d:
02:a4:d2:fb:6b:97:bb:6f:42:6c:6a:c7:e2:25:43:8b:4b:7b:
62:c8:43:27:a4:1d:b0:8c:e3:86:bc:b2:b7:73:39:77:e6:05:
68:46:5a:51:5f:0e:b7:94:e9:80:5e:5c:15:e1:80:58:46:6b:
8c:92:ab:e7:b3:49:58:22:bf:a1:7e:a7:ed:e7:6c:96:65:ba:
b8:eb:cd:19:e6:43:90:01:a4:44:e8:42:21:74:f4:d4:cf:bb:
8d:25:b1:fa:6d:85:a4:ee:be:de:56:4e:10:f2:c8:98:1c:94:
37:2e:a3:93:fe:c9:db:f5:95:46:d7:3e:f2:d7:5a:b5:bb:c4:
b3:f1:be:47:3f:a9:3e:cd:4a:49:90:91:94:ac:64:bb:62:05:
91:7a:d9:81:0b:72:9f:37:c6:a5:9f:ce:74:1f:b7:e9:84:fd:
33:2d:09:75:5e:7a:d4:fb:95:67:1a:01:56:d1:29:91:99:27:
e8:35:48:fe:8c:ad:a6:97:d7:e3:6a:b8:6a:37:77:07:7a:78:
79:61:0d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:09:38 2026 by rpki-client