
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bc9c982f-def7-37f8-af8f-0f828e0b62e5.roa
File: bc9c982f-def7-37f8-af8f-0f828e0b62e5.roa (raw, json)
Hash identifier: b7OC9/nuJwB1zz/WPiBAW5Kfl5x2nJMsO05tDE7XoyI=
Subject key identifier: 3F:AB:2C:25:30:ED:0D:2D:CA:63:4D:EA:AF:83:C8:BD:6C:3C:71:06
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24DFAB49C9C530F34E6F0E80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bc9c982f-def7-37f8-af8f-0f828e0b62e5.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 67.54.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:ab:49:c9:c5:30:f3:4e:6f:0e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=b3835242-c29f-47f2-bbb1-f7f31fa9cf5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4e:30:ae:65:ec:22:38:bd:41:84:69:aa:dc:
bb:9d:c6:7f:8b:cb:21:5c:6b:22:bb:95:7e:77:7d:
68:6b:a2:aa:bd:83:41:ef:85:8e:16:3b:8b:24:c5:
8d:15:bb:e1:aa:06:4b:64:5c:bd:d9:c1:d0:cb:26:
24:26:65:d8:45:07:ec:0f:66:09:88:69:31:8e:86:
41:02:6c:c9:a4:3d:4e:4c:90:09:ee:11:eb:00:a2:
fd:5d:0f:b5:a4:b1:42:23:65:65:02:76:bd:f7:27:
54:ac:b3:2a:d0:ce:0e:d5:b4:40:ef:2f:75:a1:b8:
e0:a4:c4:60:75:9a:93:12:51:8f:3f:80:4a:8d:48:
f6:e7:87:8e:36:ec:0c:c1:04:7a:f4:51:c9:28:f6:
dd:2c:30:56:bd:0d:c9:33:07:b2:03:8b:8d:ec:66:
96:2a:0e:d6:28:74:42:df:38:aa:46:77:06:58:61:
93:d3:2e:92:53:1b:cd:25:e4:77:76:f2:e1:75:d2:
ad:4c:ee:87:d9:e0:71:57:9d:76:c9:fa:dd:f6:b1:
81:01:ef:9e:65:15:3a:5c:89:04:e8:5c:f6:d4:ff:
d9:8d:6f:9e:6d:b9:1e:68:ef:40:c7:58:21:76:e5:
c2:b0:10:ac:d2:4f:3e:d7:b4:17:cc:6d:38:58:59:
6d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AB:2C:25:30:ED:0D:2D:CA:63:4D:EA:AF:83:C8:BD:6C:3C:71:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bc9c982f-def7-37f8-af8f-0f828e0b62e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
67.54.164.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:d8:7d:93:78:6b:33:56:8b:74:e3:fa:08:92:df:24:2e:43:
14:12:8a:ec:79:a0:ce:08:11:09:c7:cc:c4:2f:f6:7e:36:72:
c8:e0:b2:1a:41:60:0b:05:70:fe:9e:af:a5:9e:8f:94:2e:30:
21:68:4d:68:9f:a7:5c:95:87:3a:95:d0:55:95:7b:23:42:cb:
88:be:68:4b:4f:46:53:fc:4a:87:23:3b:63:87:95:7f:75:41:
31:d2:2e:1c:c7:00:7b:f9:4d:31:13:c0:b3:ce:b8:05:12:91:
9a:3b:61:01:f4:c1:66:84:81:f5:7b:16:fc:0c:58:32:cc:ce:
3c:55:df:07:9c:71:46:d4:db:d6:26:9d:04:00:84:b3:eb:77:
b5:c6:ab:f9:14:0c:0b:1a:37:0d:27:c1:8b:5f:89:c0:87:21:
d6:3b:5e:b3:83:cf:b8:2f:fd:0c:06:e7:d2:75:87:06:42:21:
f7:81:3e:da:70:a5:f1:40:7f:14:b2:95:a2:8e:1a:d8:a7:66:
ff:91:51:a4:6b:1e:cd:0c:30:f2:7b:03:c7:e5:1f:cf:a1:d3:
ff:52:4b:ba:de:2f:d6:aa:e0:e5:8a:8a:be:0c:2c:b9:08:0b:
e4:0d:11:b8:c2:f8:51:66:5e:4b:86:e3:79:1b:84:0f:90:8c:
fd:c3:b8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:08:36 2026 by rpki-client