
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a8cffedf-cac0-3b38-babe-11776ac2a9aa.roa
File: a8cffedf-cac0-3b38-babe-11776ac2a9aa.roa (raw, json)
Hash identifier: 2JImo6nmbu6mSgtyM1JuaNXvnvQEfA09V/Aadz+2erM=
Subject key identifier: AD:EA:6F:7C:19:4F:41:AB:45:F8:EB:A9:EB:AC:45:A9:3B:2E:98:6D
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F4984077682DCC68056500C50
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a8cffedf-cac0-3b38-babe-11776ac2a9aa.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 184.21.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:84:07:76:82:dc:c6:80:56:50:0c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=9ea119e3-5815-4db5-aadd-3d1c814609b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dd:4a:20:28:38:8b:6e:7d:e6:e1:38:b1:75:
8f:f4:3d:bd:78:d3:eb:24:77:7d:5b:33:03:a0:14:
fe:c8:c8:09:98:4b:e6:ae:f7:4b:9d:1d:0d:28:48:
85:33:d4:24:ac:f3:7b:e8:6d:f9:00:0a:10:4e:bb:
4a:84:d1:28:82:ae:30:bd:7e:a7:9f:a8:93:df:1b:
4a:1a:ea:25:43:a8:77:50:99:06:9d:ac:e8:65:e5:
8e:b0:7a:0a:84:a8:13:9a:f0:cb:ef:c5:b7:f7:d4:
d5:3b:ab:d6:0c:9c:16:f2:73:0a:10:29:e8:ef:e2:
1a:4c:e4:40:be:46:d5:18:98:2a:94:9a:8b:a6:54:
73:df:fc:cd:3d:8a:4d:ea:94:c7:65:23:3c:fa:6f:
55:34:fc:a6:5e:fa:8f:44:bc:53:d0:2e:4e:0b:96:
8b:40:db:ef:15:59:ca:5c:74:31:45:4b:fb:8c:83:
5e:76:11:bd:40:5e:b0:76:3a:f9:76:cb:b3:b8:d4:
e2:a6:6e:bd:54:25:db:dc:5a:ea:73:93:5c:31:f9:
97:3d:a0:17:23:2e:ca:1f:1a:8d:cc:1a:22:72:0f:
bc:2c:8b:9a:5c:af:d9:26:21:66:7a:8e:55:1b:f5:
76:67:23:6a:17:52:ff:64:9f:59:dd:31:db:ff:dc:
31:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:EA:6F:7C:19:4F:41:AB:45:F8:EB:A9:EB:AC:45:A9:3B:2E:98:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a8cffedf-cac0-3b38-babe-11776ac2a9aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.21.47.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:ff:fe:fe:cc:67:2f:55:08:57:15:15:92:9d:42:5b:ab:91:
02:ac:9d:e7:d6:08:55:79:df:f0:5f:15:60:8a:89:2f:4e:74:
ca:f8:59:5f:82:38:0e:d4:d0:4a:48:11:29:ef:0a:e5:b1:e3:
41:9c:82:e2:60:68:00:fa:cc:51:55:1c:24:b3:58:5c:b6:e1:
0e:22:1a:a4:01:3b:2e:c1:c7:de:c3:ff:76:8f:04:c2:7c:ee:
10:27:97:1e:66:d2:12:2c:cd:4a:9c:c2:78:50:85:36:9f:1e:
df:d9:1f:42:3a:6b:d8:37:e6:f9:75:e3:02:df:f9:21:1b:b7:
a1:02:56:84:e5:59:02:25:6c:0a:d9:df:f9:b6:f0:f7:fa:41:
d2:a7:f6:05:18:71:64:63:16:3b:b2:f9:86:a1:69:d6:93:ed:
48:92:83:32:9c:0c:78:d7:04:d2:88:45:e3:09:fb:78:7a:16:
d3:6a:f2:5c:ac:32:da:2f:67:3d:cb:9f:56:36:9f:7f:4d:77:
ac:d2:1c:25:b9:1b:8d:d4:c3:f8:4f:f2:3b:1b:73:13:db:fc:
2b:aa:88:aa:29:a2:24:9c:d0:43:66:20:ec:55:07:d8:2a:04:
ff:1b:55:96:ed:ad:45:03:6e:15:50:20:d6:56:fa:eb:28:81:
6d:64:6a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:43:05 2026 by rpki-client