
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/30e06b9b-a99b-3d12-9758-183db45ddd5c.roa
File: 30e06b9b-a99b-3d12-9758-183db45ddd5c.roa (raw, json)
Hash identifier: lBDJ1y1bsBUOdjxtVHrjSovTdPyavf+biWE6z0hz5Y8=
Subject key identifier: 31:11:71:3A:AD:07:3D:6B:86:A7:7C:6B:79:EE:4A:78:F8:D7:4B:C8
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E0822B776E4145DA27C680
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/30e06b9b-a99b-3d12-9758-183db45ddd5c.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 75.106.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:82:2b:77:6e:41:45:da:27:c6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=19475f36-a345-43ee-bfcd-a23e41c5746c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c7:d8:83:ab:cd:62:05:e7:57:2f:5e:ed:35:
d8:0d:a5:c8:26:52:33:7c:89:66:07:82:75:11:ea:
2e:54:bd:4d:b4:1e:04:ce:a2:d3:07:15:69:bb:90:
a7:da:35:a3:de:be:3d:8a:b8:28:2c:52:46:aa:63:
04:a5:04:2c:d4:00:10:04:91:73:53:ab:2d:71:9d:
9c:9b:83:ec:75:b3:2d:f0:9b:7c:51:37:5f:bb:a9:
af:b7:2e:09:9c:05:2f:17:94:f4:25:f7:0c:9b:73:
98:21:31:f3:8b:79:12:50:1c:81:21:4b:d5:a5:5f:
a9:bc:1b:af:e7:90:79:55:ba:36:14:1c:31:b3:cd:
41:a3:ad:05:dd:5d:c6:db:dd:29:ca:a4:44:5d:c9:
fd:1d:1d:7e:13:e5:92:09:63:c3:8c:5b:56:8e:29:
42:13:04:b6:53:9b:bf:87:25:a0:db:99:f2:db:85:
dc:2a:b3:f4:b6:eb:85:9d:4f:52:76:3e:1c:03:d7:
68:dd:15:56:dc:c2:90:78:77:93:21:58:f9:4b:89:
6d:07:ea:af:9c:5e:12:4e:fb:0d:fb:07:33:7f:32:
c8:a4:1c:7a:fa:36:64:31:41:95:7d:6b:5a:06:26:
92:d4:bb:c4:0e:bc:0b:ca:f0:b2:63:f2:38:a9:cf:
53:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:11:71:3A:AD:07:3D:6B:86:A7:7C:6B:79:EE:4A:78:F8:D7:4B:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/30e06b9b-a99b-3d12-9758-183db45ddd5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
75.106.243.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:f0:06:52:46:43:85:1d:58:50:33:99:89:d1:23:d0:17:36:
04:24:b9:47:4f:3b:d4:e8:5a:b9:b5:9b:75:d5:77:c4:69:5d:
ae:73:87:b1:0b:10:da:b9:1d:91:05:b7:90:7f:d0:1f:02:ea:
88:88:00:8e:a7:06:eb:31:e8:86:e2:ba:fc:61:8c:77:06:db:
32:8a:60:4b:1f:a3:ba:e9:e7:af:ab:0c:63:13:fb:0f:a0:0a:
93:6a:c8:a0:34:c9:a9:6f:ea:4e:70:7d:06:e1:38:79:a9:5a:
4f:0c:f5:45:89:f9:c8:ad:b0:8c:30:5e:af:c5:c0:8f:e3:45:
82:21:a3:ec:51:f7:f3:31:99:2d:e2:2f:d1:aa:24:8d:d8:f3:
8b:1f:c5:ff:1a:ec:19:09:db:b9:2d:23:ec:73:4e:43:ba:ae:
8b:81:12:82:cc:7e:0b:d8:72:a1:9c:5b:fd:11:36:4e:07:d7:
4f:4e:48:c6:9b:1a:f8:4a:5b:78:89:53:e3:90:29:17:24:f7:
d2:2b:97:0c:d9:82:8a:85:db:c8:91:dc:26:22:0d:a4:a1:51:
bb:77:dc:e0:c3:e1:a7:7c:8b:e3:00:85:24:90:36:3a:fa:c0:
f9:be:ee:b2:ed:89:04:f5:9b:3f:64:ac:2c:9a:0e:2c:e9:43:
ee:6b:62:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4IIrd25BRdonxoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
MTk0NzVmMzYtYTM0NS00M2VlLWJmY2QtYTIzZTQxYzU3NDZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucfYg6vNYgXnVy9e7TXYDaXIJlIzfIlmB4J1
EeouVL1NtB4EzqLTBxVpu5Cn2jWj3r49irgoLFJGqmMEpQQs1AAQBJFzU6stcZ2c
m4PsdbMt8Jt8UTdfu6mvty4JnAUvF5T0JfcMm3OYITHzi3kSUByBIUvVpV+pvBuv
55B5Vbo2FBwxs81Bo60F3V3G290pyqREXcn9HR1+E+WSCWPDjFtWjilCEwS2U5u/
hyWg25ny24XcKrP0tuuFnU9Sdj4cA9do3RVW3MKQeHeTIVj5S4ltB+qvnF4STvsN
+wczfzLIpBx6+jZkMUGVfWtaBiaS1LvEDrwLyvCyY/I4qc9TNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDERcTqtBz1rhqd8a3nuSnj410vIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzBlMDZiOWItYTk5Yi0z
ZDEyLTk3NTgtMTgzZGI0NWRkZDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2rzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAILwBlJGQ4UdWFAzmYnRI9AXNgQkuUdPO9ToWrm1m3XVd8RpXa5zh7EL
ENq5HZEFt5B/0B8C6oiIAI6nBusx6IbiuvxhjHcG2zKKYEsfo7rp56+rDGMT+w+g
CpNqyKA0yalv6k5wfQbhOHmpWk8M9UWJ+citsIwwXq/FwI/jRYIho+xR9/MxmS3i
L9GqJI3Y84sfxf8a7BkJ27ktI+xzTkO6rouBEoLMfgvYcqGcW/0RNk4H109OSMab
GvhKW3iJU+OQKRck99IrlwzZgoqF28iR3CYiDaShUbt33ODD4ad8i+MAhSSQNjr6
wPm+7rLtiQT1mz9krCyaDizpQ+5rYgw=
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:21:46 2026 by rpki-client