
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/754c5319-ed33-3bd3-a348-93e843ccf23d.roa
File: 754c5319-ed33-3bd3-a348-93e843ccf23d.roa (raw, json)
Hash identifier: KaY/aJQJGAwTO75NK4gEhUOhXMjG4DKlbPWO2LES4Ow=
Subject key identifier: 93:01:E2:0C:84:F8:FB:95:8C:2F:97:31:C3:B0:9A:28:22:14:C4:89
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E0DD2904E9A1FE0C0FC000
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/754c5319-ed33-3bd3-a348-93e843ccf23d.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 198.45.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:dd:29:04:e9:a1:fe:0c:0f:c0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=2eec7117-ec9b-4949-b178-149ff310615e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:21:2d:dd:fc:a5:e1:eb:fd:fb:74:94:a3:35:
6e:0d:6b:a7:7d:7b:7f:1a:0a:c1:83:81:83:0a:d1:
15:dd:2f:9d:72:04:be:03:81:43:fb:68:c7:a5:77:
91:ea:14:f8:ce:c5:87:43:37:01:4d:b9:77:87:66:
8f:05:32:50:67:4f:67:cd:b9:4e:6b:24:5e:61:53:
44:74:5d:14:cd:ac:8f:98:4c:92:76:fc:a9:3a:48:
41:19:ee:a5:5d:d9:cf:94:6e:7f:9c:b6:fe:37:6c:
13:d5:fc:04:4a:10:8d:cf:55:f4:5a:fb:4a:09:da:
b2:7f:bf:07:e5:09:bb:3c:cd:a2:36:c4:ff:15:39:
5f:fe:2c:06:c6:2d:55:f5:65:e4:e1:20:c1:78:38:
3b:06:3c:da:55:cb:3e:8e:80:60:e5:32:20:d2:3d:
ee:52:a0:9a:82:a0:e6:db:1d:19:43:a6:1d:67:b4:
72:73:43:74:b1:83:8b:ec:62:39:6b:48:a6:07:a6:
a6:82:53:43:57:68:0d:6d:20:e9:3a:61:e4:4b:bb:
71:c6:70:8d:55:b7:29:f9:22:56:a2:8a:4b:7e:25:
f6:02:4e:0a:1f:2d:41:b9:33:83:c8:89:a7:1f:71:
50:ea:c8:f2:bc:20:cf:cf:b0:3e:c2:f1:23:b9:1e:
41:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:01:E2:0C:84:F8:FB:95:8C:2F:97:31:C3:B0:9A:28:22:14:C4:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/754c5319-ed33-3bd3-a348-93e843ccf23d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
198.45.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:7d:73:c9:06:a1:e3:13:77:fe:f1:a2:fd:d1:1e:b5:a9:62:
a7:f4:8d:c0:f1:cf:fe:77:30:b6:c9:97:6c:b2:0c:67:50:1b:
6d:61:c7:9a:12:a6:32:48:74:f2:29:38:3d:4f:91:19:85:7c:
e5:92:03:fe:89:be:8f:56:95:68:18:92:d3:c4:a1:01:31:6f:
cd:16:06:8e:5b:22:c8:ce:eb:ce:f8:c2:6e:e4:ab:32:86:85:
d7:d1:22:3c:f2:85:7d:67:b6:b7:2e:3e:da:b6:4c:f0:45:b4:
fc:6c:8d:c2:00:1f:cf:2a:56:0b:43:9e:ed:cf:cb:af:5d:d7:
83:28:ed:a8:6f:90:44:cf:dd:41:33:80:27:19:86:3e:ef:3c:
58:d9:14:fb:14:6e:12:f0:50:fe:9f:ad:64:93:d6:2f:ce:4c:
ba:b5:37:87:c8:4b:49:9b:44:f8:e0:20:39:80:eb:37:47:c1:
f1:6c:31:f8:59:3c:84:78:29:3f:93:00:1e:6e:b4:70:42:e4:
cd:df:a7:a4:7a:a6:74:e5:b0:38:1c:4f:d0:cf:ef:3c:78:0e:
01:0c:0b:39:a9:2f:a3:36:fc:0a:c7:72:56:33:b6:28:65:7a:
17:de:6a:8e:7e:88:b3:29:fb:4b:02:9f:57:9c:3c:9e:67:a9:
8f:93:e5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:25:19 2026 by rpki-client