
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/27dfa490-0043-389e-905d-b29373777a3a.roa
File: 27dfa490-0043-389e-905d-b29373777a3a.roa (raw, json)
Hash identifier: fdgF0IR2GDqCDAmNpEMQUJkTP4fWqerxtG5tAWEnK3s=
Subject key identifier: 23:C5:A4:0D:04:23:8F:E2:08:E4:90:21:2D:C2:E2:B1:74:28:9A:62
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E01268708A447C22A85F50
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/27dfa490-0043-389e-905d-b29373777a3a.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 184.21.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:12:68:70:8a:44:7c:22:a8:5f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=1c7c5bc8-575b-453e-a675-c20bcbcb79fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f5:ce:26:fd:91:d7:34:77:e0:c6:2a:06:9d:
a7:4f:ae:61:e9:a8:b2:f3:a6:1c:6d:59:0c:24:20:
89:7d:a9:db:a7:61:45:90:35:41:28:e2:5a:44:e8:
8e:e6:8b:ff:69:b8:f1:c8:d0:57:a8:61:92:de:73:
3b:87:30:cc:33:0b:7e:77:3c:e2:22:ef:8b:09:20:
25:62:fd:19:10:28:80:d2:a5:f3:8c:a7:df:1b:fe:
04:7e:fe:1b:65:7c:e0:46:0d:74:d7:b2:de:be:87:
26:9c:02:ec:f8:6a:87:5d:33:91:72:16:ed:81:32:
8f:76:a7:36:aa:a0:40:95:47:f0:44:e2:33:84:08:
a9:05:c6:c0:33:6c:9a:2b:35:8b:85:a5:76:42:77:
e8:20:45:24:41:f2:24:a9:a1:b3:56:f3:60:a3:82:
9e:1e:4e:d0:a7:04:85:e5:ad:9e:79:6d:a9:2d:a1:
a7:9a:32:7e:e0:11:96:3a:7e:4d:3d:bd:ac:16:e8:
7e:72:86:ef:83:ac:ab:23:d2:55:e5:83:fe:89:74:
30:4a:1c:be:92:fa:4c:25:52:0b:d5:98:89:b1:9c:
82:83:f4:2e:da:ed:28:3e:8a:ae:50:b9:cd:61:58:
2f:ed:87:e9:53:66:7e:b8:93:a7:b8:72:cd:ee:ab:
f4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C5:A4:0D:04:23:8F:E2:08:E4:90:21:2D:C2:E2:B1:74:28:9A:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/27dfa490-0043-389e-905d-b29373777a3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.21.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:2f:d2:ea:ea:f0:db:bd:4d:ac:e5:9a:6a:ae:68:e3:f9:db:
66:c3:f6:df:c5:00:85:b8:d6:c3:0e:a8:0e:e5:39:e5:90:d1:
df:4a:89:34:9b:e2:40:7d:85:6c:5d:dc:26:31:34:91:8a:ba:
30:e0:e4:d6:b0:1b:7f:8c:1f:bf:7c:bf:ae:be:c5:79:57:f0:
e3:08:da:a4:92:37:47:60:9c:36:b7:d4:7c:25:ca:96:5f:57:
20:94:63:81:44:51:f6:20:9a:f3:1d:f6:3a:ab:8b:e0:57:40:
50:fa:7b:9b:38:a6:f3:db:e2:77:ea:a2:56:f8:e4:fa:da:00:
1e:16:9d:8d:b9:a0:9b:a1:54:d8:87:9a:9e:ee:20:27:cc:42:
e0:61:26:61:18:6e:b0:ce:22:29:07:5d:66:87:e0:b5:a1:cd:
88:23:e2:9f:f0:03:a2:eb:80:ea:5d:67:18:50:ab:7a:a4:85:
8f:67:ea:69:d9:36:48:25:68:3d:c2:14:55:e1:9c:8d:63:e1:
1d:f3:54:e5:19:12:1d:a5:e4:ef:ee:68:32:0a:36:6f:db:a3:
a1:24:13:f9:07:2c:3c:f9:5f:1a:6f:ce:c6:e2:10:19:74:6a:
db:1a:ab:cc:e2:19:c7:1a:65:34:69:9d:ae:8e:68:e4:dc:cc:
bf:02:49:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:37:01 2026 by rpki-client