
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/61bd2c38-2806-35cb-8cd1-665001e45703.roa
File: 61bd2c38-2806-35cb-8cd1-665001e45703.roa (raw, json)
Hash identifier: 4CD+qx8pwUNJsUCSrsxqF1uecdnl0zzuruKVYZJ3EVo=
Subject key identifier: 49:1A:C0:0E:0B:A5:35:46:13:BE:66:64:DA:36:FE:DC:9B:CD:AF:DB
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E0CABF781B856743D32B00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/61bd2c38-2806-35cb-8cd1-665001e45703.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 184.21.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:ca:bf:78:1b:85:67:43:d3:2b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=b652f7b0-7ecd-4db1-a984-60631eafa597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b0:1f:3e:40:67:a7:c7:79:b1:fc:f1:33:3f:
ee:07:3e:37:50:12:fd:f7:c2:87:53:80:19:d8:d8:
ae:a0:82:75:1c:bc:4b:48:b2:56:26:8e:68:d9:e7:
fe:df:db:c2:18:d8:6e:86:d5:d1:69:ac:cc:d5:be:
07:00:7e:b6:23:62:ac:93:41:01:ea:03:c3:d6:39:
a4:16:ea:45:9e:7f:9b:8b:02:13:d7:d4:52:eb:e9:
c5:ed:19:a6:a3:ac:6b:c7:0a:84:73:06:aa:8d:a3:
f9:5e:3d:47:f0:2d:e2:b1:11:b7:9a:b9:23:da:da:
4e:e2:dc:d6:52:6f:54:f2:c3:27:e2:18:95:c8:b6:
84:99:29:30:dd:d4:ef:10:24:12:ff:03:28:91:d3:
97:39:99:6f:d0:25:db:3f:6a:9d:c0:eb:05:bb:2a:
61:8a:b9:c8:a9:90:e4:13:1a:ab:0b:a8:9e:80:aa:
45:ea:34:02:50:36:b9:9a:b8:21:ca:ef:eb:72:2c:
da:e9:bf:84:7b:31:d5:75:0a:ee:6e:9b:10:18:61:
93:49:ce:61:97:bf:b0:02:10:83:07:40:be:6a:55:
ca:d5:60:16:74:41:d9:c2:93:13:c8:ce:9e:91:63:
22:8f:82:0f:0d:be:4c:bb:16:a8:bd:a1:0f:8e:9a:
40:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1A:C0:0E:0B:A5:35:46:13:BE:66:64:DA:36:FE:DC:9B:CD:AF:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/61bd2c38-2806-35cb-8cd1-665001e45703.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.21.241.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:c1:d1:69:c3:67:6f:57:b4:1a:68:e2:68:3d:e6:27:31:7e:
87:98:cb:29:fa:54:6f:1b:a7:1c:6c:9d:e4:47:ee:85:15:be:
23:de:21:e6:33:31:63:42:7a:ab:ee:ec:61:bf:0c:b5:ee:2b:
fb:69:7f:e1:b8:ac:39:25:8b:5e:e1:5a:83:dc:a8:1d:4b:0f:
fc:70:39:e2:20:69:c1:1e:4c:38:f3:84:c4:03:ea:df:f4:86:
2e:ce:fc:b1:14:49:ba:fc:08:3a:9c:68:dd:00:d9:f4:19:7f:
ff:71:55:fa:be:48:cb:2a:79:8c:f3:76:c8:77:92:1c:4b:ae:
6e:c9:e6:95:20:37:94:04:97:52:d7:2b:ed:2c:16:ec:5a:55:
b0:b6:82:c2:9a:2f:1b:2f:9f:f3:ec:e0:44:af:04:72:b2:76:
9a:09:a2:01:17:36:f2:e5:b5:d0:61:31:34:9a:b6:f8:58:c0:
e7:6b:34:6f:7a:47:a3:b2:ba:c3:26:f1:8c:c2:d1:a0:fe:eb:
b0:16:b6:3e:9a:ec:25:78:ef:38:48:b2:4c:72:70:ba:2c:22:
45:92:f3:4e:79:68:a8:d2:f3:f2:e8:9a:d0:dd:41:fa:64:6a:
cd:bf:6d:3d:d5:32:95:ab:7c:70:80:7a:ee:75:10:5f:9f:68:
6b:ac:2e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:07:34 2026 by rpki-client