
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4d1a1a62-a85b-3325-abac-e0cbccf213b4.roa
File: 4d1a1a62-a85b-3325-abac-e0cbccf213b4.roa (raw, json)
Hash identifier: j1pciXgVrW+CVKoDqX8khpvrdVqZsJNzXO5DKMkjD6g=
Subject key identifier: 4C:F3:54:44:C6:E8:38:AF:9D:D8:D4:D4:69:2C:3B:F1:3A:78:C0:5E
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E0C8781F9147939A3984D0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4d1a1a62-a85b-3325-abac-e0cbccf213b4.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 184.21.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:c8:78:1f:91:47:93:9a:39:84:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=d9a22d5e-1775-4e08-9374-771e8673765d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a2:31:f7:8f:08:44:28:6f:bf:05:88:0a:a7:
5c:fe:af:08:8c:b7:66:cf:37:e4:57:db:5c:2e:0e:
57:13:ce:3e:37:55:f8:7f:7c:ab:14:75:c3:e4:af:
81:ff:3f:b2:cd:ef:b4:d9:23:5c:0e:18:9d:d1:31:
78:42:7c:16:7d:ec:a7:d7:68:52:77:59:23:fd:76:
68:04:39:94:f5:69:69:4d:7b:12:db:2e:8f:3b:b9:
40:85:b2:26:9e:b6:97:53:7e:6a:50:de:02:73:33:
16:47:80:24:1b:ff:40:f6:09:50:44:af:4b:52:a5:
89:f8:46:de:f3:79:6f:cd:36:41:26:71:a4:8f:d5:
7d:ea:7f:61:c7:d1:5e:7f:22:3c:f0:fd:8f:07:f8:
9d:4d:ed:cb:55:38:b2:ea:cc:f3:ff:4b:37:af:95:
8e:7b:29:ee:5c:e3:75:31:97:a1:46:5a:f4:b1:02:
3f:29:a5:86:68:9c:cb:f6:56:2d:e1:a7:c5:25:3e:
80:4b:e9:02:fb:0d:8e:b6:37:95:2b:51:8a:3b:18:
5b:bc:1b:a3:32:a5:9d:ba:3c:85:05:f4:62:02:cf:
70:7d:96:fe:cf:3c:a3:1a:8a:7f:d6:26:09:0d:fe:
0a:af:7b:c4:c1:aa:cd:c7:70:67:69:b3:d0:30:f3:
cc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F3:54:44:C6:E8:38:AF:9D:D8:D4:D4:69:2C:3B:F1:3A:78:C0:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4d1a1a62-a85b-3325-abac-e0cbccf213b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.21.175.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:33:39:b6:59:52:79:66:f7:ee:9b:d1:7b:61:37:e5:5e:02:
77:e9:3b:6a:50:b8:a5:c4:cc:0e:fa:a5:8d:8c:3a:26:4f:42:
d8:b4:45:ca:04:f7:a1:f1:fc:a5:bb:e9:2e:76:75:c5:8e:9e:
ee:bb:e0:d4:66:c7:6b:fe:9b:7a:7c:b4:f5:6d:e0:0e:51:25:
7b:21:08:45:b4:36:68:65:e7:69:e9:86:c0:91:ce:39:71:6c:
06:a6:83:df:f2:46:2c:33:94:2b:2d:a7:61:94:4d:33:21:5d:
19:c8:f4:f9:23:8e:c2:59:e9:fb:d7:d9:06:1c:cf:c2:61:fe:
e1:7f:d7:93:90:f2:65:55:52:7f:d6:70:2e:99:4a:43:e5:9f:
f4:b1:77:d6:32:7e:aa:5c:9a:02:77:a7:cb:ac:0b:98:6e:eb:
1e:a6:67:7d:06:41:f7:7d:96:9c:04:32:de:e9:9e:ec:9d:24:
22:2b:72:86:3f:3e:d6:89:0d:0b:bb:ea:98:28:52:f4:b3:cc:
b0:b0:67:6e:1f:b3:dd:b6:99:a8:6f:c9:7b:e2:ea:38:e1:ba:
61:53:25:a6:89:1d:13:43:51:88:ca:9a:4e:c4:95:8b:ba:8c:
6d:df:17:c7:b3:1b:ea:cb:c6:53:f4:2d:07:45:d4:ee:8a:b2:
8a:e8:91:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:27:19 2026 by rpki-client