
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc807da-a775-30ad-8a1a-9986a25b4c56.roa
File: 2bc807da-a775-30ad-8a1a-9986a25b4c56.roa (raw, json)
Hash identifier: yHuYKLiPqt0hqkfwl0ZHpHK4aooc//kJNkHAHhCCt/U=
Subject key identifier: 4F:01:DB:C5:C9:B3:00:A3:03:9C:3F:CC:CA:27:57:F8:BA:8C:1E:53
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24DFDCF0F4CC97E9507A3B00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc807da-a775-30ad-8a1a-9986a25b4c56.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 75.107.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:dc:f0:f4:cc:97:e9:50:7a:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=5a1fce4d-9382-46a5-acf2-ecdccbe38c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2c:93:0b:72:f3:96:84:b6:78:b1:f1:05:04:
33:99:f3:69:e3:7d:7b:ac:16:f2:51:74:a0:19:e7:
4e:d4:a6:08:81:de:48:fb:60:b7:25:e8:aa:7c:be:
73:46:86:22:e9:6b:eb:5f:24:46:6d:9b:f8:b5:8f:
e6:9e:58:d3:3b:7f:f8:e6:e9:78:c8:19:20:77:fb:
69:86:57:3a:36:55:f9:7f:f7:60:95:e9:53:8d:ea:
6d:53:02:85:7d:e6:c4:c5:40:d5:3b:f4:c7:c5:f7:
6f:37:ed:12:83:41:6a:e7:ff:e3:48:44:a2:f0:c9:
9d:1d:2a:53:89:13:e5:bf:e8:24:e5:b8:71:1e:66:
71:ad:00:9d:97:57:32:64:65:e3:c3:87:67:e8:10:
6b:8e:b0:6a:c5:cd:fe:09:03:ad:83:48:18:03:db:
b9:c8:ae:1c:da:03:fe:a5:0c:90:2a:66:eb:15:2c:
60:88:a8:fa:c8:1f:00:a5:d1:b2:0d:dd:05:a0:9b:
fe:85:84:99:3c:24:f0:03:cb:f4:a1:d0:3e:44:8f:
46:65:62:a4:63:d3:b0:0e:a4:03:81:bb:28:87:9c:
d5:e9:46:82:b3:77:fb:02:6c:a5:99:1c:a0:ff:95:
f2:cd:77:1e:d5:34:f7:af:d0:be:e0:27:45:3c:b8:
8c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:01:DB:C5:C9:B3:00:A3:03:9C:3F:CC:CA:27:57:F8:BA:8C:1E:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc807da-a775-30ad-8a1a-9986a25b4c56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
75.107.150.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:0b:11:96:af:3f:ec:b8:3e:0e:e9:e2:77:d7:38:a4:71:74:
c7:86:67:28:92:61:f8:ef:44:90:7c:36:30:3e:49:b2:fc:ef:
97:61:8c:9a:c5:0a:ed:ae:f0:7a:ea:04:35:ef:0e:55:e3:35:
83:c3:54:6e:65:07:e2:f5:01:6a:74:61:ea:bb:6d:fe:7e:f6:
01:0e:66:e6:ba:76:f7:ce:1b:d6:d0:65:ac:1a:74:b3:f6:2a:
32:d7:b2:1e:aa:96:fe:48:ba:be:2a:f1:0e:98:cd:d1:61:e1:
9b:92:2e:58:29:c5:d0:c8:93:ae:e9:07:2c:37:0c:db:c5:b1:
43:f9:7c:5b:13:fe:be:c3:2c:27:1c:62:cf:9f:19:0c:c7:a3:
71:bf:0b:87:fb:fa:31:85:7e:0b:1b:de:27:1b:6d:38:da:6d:
43:15:60:ab:66:c0:2a:c0:36:4f:39:3f:af:b8:73:d1:c3:2c:
c4:9a:e1:9a:c6:c5:65:8c:4c:ef:1b:b7:d3:70:5f:fd:bf:27:
63:87:7b:d8:00:1e:36:b5:d5:1c:67:68:37:cd:80:17:f9:b2:
05:e7:25:2b:ab:77:2c:12:64:d8:46:1d:47:3a:e3:ba:ff:97:
34:78:fd:8c:a6:3c:27:4e:9f:ca:bd:e0:34:49:29:59:08:38:
99:a1:28:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:16:21 2026 by rpki-client