
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be0637d6-6621-370a-a12f-553e30da1e89.roa
File: be0637d6-6621-370a-a12f-553e30da1e89.roa (raw, json)
Hash identifier: zovE+BUKg2TvN3I8f/49gWZfqm9sXItrfBG2fa0Oe6c=
Subject key identifier: E2:0C:70:09:AE:F4:F2:F1:79:F0:CA:D7:55:7A:8C:E4:83:0B:9D:99
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E0CED04DB7B3BA17EF1980
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be0637d6-6621-370a-a12f-553e30da1e89.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 184.62.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:ce:d0:4d:b7:b3:ba:17:ef:19:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=fc8adaf9-e073-4f13-9797-6ebb9e315ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:53:97:61:a3:5b:76:30:c5:c3:41:c1:f7:cf:
54:f3:db:e2:a3:0d:ce:b1:b0:99:4f:3c:72:7a:a2:
c4:43:c6:14:1b:96:a9:d0:e2:c7:b3:b4:cd:8d:24:
aa:8e:18:28:d4:7d:7a:9a:81:86:72:80:1e:0f:a7:
21:81:ef:6e:86:59:f5:5b:80:b2:a1:d7:8e:c8:bb:
85:47:e7:77:03:7a:fa:c5:37:15:05:a9:34:65:d8:
92:37:a2:de:3b:cb:91:dc:e1:5e:28:54:94:6e:63:
74:79:9c:d4:59:b2:d1:95:2c:cc:83:0c:a0:5e:ab:
b5:3c:1e:69:7a:20:22:b6:a3:38:23:8a:ea:c4:93:
9f:25:2e:43:4d:79:39:9f:31:a6:67:42:fd:ae:6c:
46:2e:ad:a2:4c:08:a1:1e:1f:83:64:06:ab:05:7f:
c4:b2:81:c3:23:cb:29:1e:da:a3:0e:97:37:7f:2b:
be:df:b4:f7:d9:26:80:f2:89:b6:44:e3:3f:66:62:
50:5e:47:50:f5:9b:37:49:3b:3e:59:4e:5b:8e:e4:
08:aa:2b:a6:ce:a8:08:31:6a:9c:e4:f1:66:af:6a:
5b:05:5c:f8:ad:c3:ee:31:69:5c:1a:14:6b:ac:bb:
5e:0e:e1:e7:48:76:29:e9:7a:c2:9f:60:29:77:81:
ce:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0C:70:09:AE:F4:F2:F1:79:F0:CA:D7:55:7A:8C:E4:83:0B:9D:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be0637d6-6621-370a-a12f-553e30da1e89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.62.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:a2:cb:a7:8c:2b:b6:b4:ba:30:75:70:a5:e4:30:57:08:7c:
aa:66:48:b0:f0:e2:9f:3a:68:39:ab:05:d8:2b:03:73:41:21:
7e:5d:63:40:77:bb:4a:cd:90:69:38:1d:e6:df:db:28:ca:37:
2e:78:eb:3f:81:86:dc:e2:e7:8d:84:ea:b2:64:6b:60:18:8c:
b0:b3:34:51:57:2e:b6:e5:96:00:45:19:5d:aa:b1:65:9c:03:
7f:5b:cb:e7:92:c0:f2:6d:9c:b1:bd:e2:89:08:be:e2:46:04:
f6:96:79:04:0e:ab:e8:29:f0:39:46:70:21:69:23:61:18:b6:
c2:7d:f0:70:7d:47:72:a7:52:ad:c1:16:ca:71:f8:50:c8:c7:
b1:16:a2:88:6e:11:85:9f:fc:de:3d:ca:63:f9:9b:ea:1a:3b:
1e:e3:70:d1:63:0a:95:27:fe:d9:59:3d:4e:97:b3:d5:92:5f:
47:e6:81:0a:ca:aa:a2:cc:23:aa:ee:3d:cc:ca:3f:dc:cb:f4:
48:84:6b:5c:9d:be:c7:54:c3:cf:c1:5e:32:cb:70:3e:af:51:
61:43:eb:9f:61:d5:79:af:c2:84:1f:eb:b7:18:9e:a5:e6:ea:
4a:98:e7:aa:08:88:f0:0b:e2:00:f8:b7:06:bd:41:30:81:56:
00:b3:e0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:24:25 2026 by rpki-client