
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8d8c791b-5036-352d-a475-c8369351ccd2.roa
File: 8d8c791b-5036-352d-a475-c8369351ccd2.roa (raw, json)
Hash identifier: WvfQEG1gV7slHOMZH0O2vE/XCP7vFhvPLc1XRHtTCNs=
Subject key identifier: 45:13:5C:4E:F3:E5:9C:DC:5D:43:2F:F6:41:ED:C9:26:3D:76:7A:BF
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E0C9D42EE6627848973900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8d8c791b-5036-352d-a475-c8369351ccd2.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 184.21.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:c9:d4:2e:e6:62:78:48:97:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=bd95e072-facc-40cd-b121-37cf1103a0c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:1c:c9:9f:e5:75:47:b9:28:a0:8d:1f:37:6d:
7a:d7:a3:ae:5d:25:d1:f7:78:43:0c:e7:55:4f:e9:
8c:19:73:6a:7d:67:d8:28:e3:6e:59:fd:95:ec:08:
e2:dc:28:26:c2:c0:f4:8d:1e:ad:3b:43:cd:f6:4b:
47:e6:bb:9b:2c:31:d9:63:41:41:63:c8:2d:64:41:
5f:44:6e:4c:12:ed:f7:f7:b1:39:66:01:d0:6b:98:
22:f5:6f:be:ee:d9:7a:33:38:14:04:ff:10:71:18:
57:ea:98:25:aa:d0:39:7e:b0:c0:fa:3a:8f:bb:85:
3b:3d:ff:9a:1c:3a:01:0b:8b:cf:d5:e7:e0:2e:a4:
06:05:f4:cf:cd:2d:98:0e:96:23:26:18:60:e9:e2:
11:d1:a6:ad:f1:d4:71:96:01:32:4c:95:46:b2:e9:
1b:43:e4:b6:49:8e:97:8f:cf:ba:2f:20:14:ef:9a:
99:64:ff:15:71:a5:98:29:fd:97:ea:c5:3f:32:e2:
c2:7a:eb:b6:9c:f4:61:51:2e:0f:6c:6e:2a:84:4e:
88:e6:dd:4f:d4:e6:17:3b:5c:5f:90:86:96:94:35:
7a:8c:2c:f5:bd:73:5a:84:a2:58:b0:2b:4e:d3:82:
9a:5f:23:b8:1c:3d:49:44:5f:52:fb:81:9d:a2:0a:
39:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:13:5C:4E:F3:E5:9C:DC:5D:43:2F:F6:41:ED:C9:26:3D:76:7A:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8d8c791b-5036-352d-a475-c8369351ccd2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.21.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:b5:55:be:fd:f6:6c:fc:4b:29:d7:03:a9:df:b5:22:50:6b:
a5:48:c7:3b:c4:e2:14:49:58:8d:6d:b9:ce:89:7e:a6:c1:f3:
fb:ed:ac:da:0d:5f:37:ea:74:b4:49:10:55:e6:f2:55:c8:d0:
66:2a:df:96:f6:aa:38:11:24:e4:52:66:79:9f:78:7b:7f:33:
0d:55:23:61:40:e5:96:bb:5f:4a:4b:b2:1b:3a:4c:08:10:59:
61:6c:7c:64:13:23:b5:f7:3d:b5:99:ee:79:4c:cc:c3:a6:db:
11:b0:13:40:e0:7b:7c:d9:8f:6d:30:79:7f:a3:fa:cd:81:bd:
3e:65:fc:47:04:a0:91:f1:ac:b8:e4:85:e6:71:f3:9e:bd:28:
4a:15:be:ee:95:09:1f:e1:56:10:8e:d8:e7:74:f7:91:4b:b4:
97:8d:52:05:72:30:aa:39:4b:1f:dd:b2:ce:1e:45:86:b2:e3:
05:98:40:77:08:4d:d7:84:f2:e8:cc:6e:97:63:8f:3f:48:82:
9a:0f:0f:59:75:6e:8e:32:f4:ed:0f:41:a8:68:9f:4e:af:40:
fc:aa:09:f5:7a:e2:ee:a7:c7:46:cc:ed:fe:7c:97:43:c4:48:
16:f3:e3:f8:95:98:b5:ae:eb:3e:a3:52:72:2e:1d:39:bb:fa:
ea:a5:ce:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4MnULuZieEiXOQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
YmQ5NWUwNzItZmFjYy00MGNkLWIxMjEtMzdjZjExMDNhMGMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRzJn+V1R7kooI0fN21616OuXSXR93hDDOdV
T+mMGXNqfWfYKONuWf2V7Aji3CgmwsD0jR6tO0PN9ktH5rubLDHZY0FBY8gtZEFf
RG5MEu3397E5ZgHQa5gi9W++7tl6MzgUBP8QcRhX6pglqtA5frDA+jqPu4U7Pf+a
HDoBC4vP1efgLqQGBfTPzS2YDpYjJhhg6eIR0aat8dRxlgEyTJVGsukbQ+S2SY6X
j8+6LyAU75qZZP8VcaWYKf2X6sU/MuLCeuu2nPRhUS4PbG4qhE6I5t1P1OYXO1xf
kIaWlDV6jCz1vXNahKJYsCtO04KaXyO4HD1JRF9S+4Gdogo5tQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEUTXE7z5ZzcXUMv9kHtySY9dnq/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGQ4Yzc5MWItNTAzNi0z
NTJkLWE0NzUtYzgzNjkzNTFjY2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBXRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAa1Vb799mz8SynXA6nftSJQa6VIxzvE4hRJWI1tuc6JfqbB8/vtrNoN
XzfqdLRJEFXm8lXI0GYq35b2qjgRJORSZnmfeHt/Mw1VI2FA5Za7X0pLshs6TAgQ
WWFsfGQTI7X3PbWZ7nlMzMOm2xGwE0Dge3zZj20weX+j+s2BvT5l/EcEoJHxrLjk
heZx8569KEoVvu6VCR/hVhCO2Od095FLtJeNUgVyMKo5Sx/dss4eRYay4wWYQHcI
TdeE8ujMbpdjjz9IgpoPD1l1bo4y9O0PQahon06vQPyqCfV64u6nx0bM7f58l0PE
SBbz4/iVmLWu6z6jUnIuHTm7+uqlzo4=
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:45:28 2026 by rpki-client