
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be3ee4fc-fef0-321a-82ed-cd2ca5249871.roa
File: be3ee4fc-fef0-321a-82ed-cd2ca5249871.roa (raw, json)
Hash identifier: i731a2sqISHIC5wLjjz3Skg4SI+cxdVbisosTbJD0fQ=
Subject key identifier: 64:84:83:3F:69:0B:88:A3:A1:D0:33:C7:03:ED:91:DC:EB:16:35:73
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E016113BDD872C2B2F2600
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be3ee4fc-fef0-321a-82ed-cd2ca5249871.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 184.62.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:16:11:3b:dd:87:2c:2b:2f:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=f3bd651a-71a5-4740-a3c2-34ee6ce44ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a8:9e:8e:36:0e:24:c3:b9:97:35:ab:53:b3:
54:f5:1b:45:7f:0c:87:b5:bd:a2:79:12:92:3d:e3:
bd:de:96:b9:71:95:f7:ff:e5:6b:50:13:2b:4c:2f:
ca:3f:c1:9c:a8:ab:9f:a3:e7:d0:44:86:4f:45:10:
30:99:83:53:94:3c:66:1f:21:0d:d0:30:59:e6:76:
b7:f1:1a:c8:f0:d4:cf:dc:be:63:33:49:9a:03:a0:
5f:c7:18:69:a4:e2:70:90:ac:cf:27:4f:41:34:c0:
92:a8:56:43:2a:e1:29:f0:90:6d:ff:80:f3:65:66:
23:59:c5:c9:a4:97:86:00:06:9e:43:44:59:d2:d4:
0b:0c:5e:39:7a:c1:1d:be:13:61:12:4a:56:35:e0:
1d:09:39:f0:17:9a:eb:8d:89:31:81:f5:08:f2:3c:
03:f9:07:55:9f:d8:02:aa:fd:58:cf:65:a2:be:47:
79:8f:d8:06:46:ae:39:07:d5:61:6b:99:2e:93:5f:
cd:76:ba:8f:76:9a:42:88:f4:37:ce:b2:b7:22:63:
48:db:32:0a:f0:6e:f2:18:cd:ab:1a:46:f6:ff:73:
af:a5:ea:62:0c:bb:c0:e8:ec:2b:3d:07:3d:d1:8e:
79:57:7e:e0:ea:a2:16:b3:58:ce:9c:e6:98:ee:66:
a4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:84:83:3F:69:0B:88:A3:A1:D0:33:C7:03:ED:91:DC:EB:16:35:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be3ee4fc-fef0-321a-82ed-cd2ca5249871.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.62.33.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:36:38:94:cd:5b:ec:44:4d:5e:fe:c0:96:75:8a:59:c1:dd:
32:53:4e:5d:04:cd:fa:e8:ae:2e:d4:f6:bb:58:59:ce:96:0b:
c3:63:05:f5:4d:a2:ed:24:2c:d3:b4:c4:45:8e:b2:b4:cd:7f:
dd:d5:36:02:40:fe:31:58:7c:a2:68:d1:67:7b:39:65:7b:4c:
7c:96:50:72:13:77:12:e3:0e:c2:67:0f:f1:c8:fc:f4:1d:c4:
97:6d:3f:0d:3b:0c:4b:74:51:e7:75:32:eb:20:4a:db:d7:88:
27:59:e0:c2:f4:f5:d4:c1:46:d1:e9:50:85:ce:ae:28:70:a4:
4b:13:17:98:fd:39:56:7d:18:11:73:47:c8:8d:fc:c9:22:85:
77:ef:b2:32:b0:85:ec:ce:e9:aa:d0:3e:ed:07:40:f1:ae:48:
0b:da:ca:19:6f:9f:0a:8f:2a:09:9e:12:f7:0d:9e:15:e4:22:
9f:02:d6:96:33:5e:9c:f8:d7:4e:59:7b:4c:7f:ad:fe:e0:c5:
ee:13:0b:a8:46:f3:31:e1:59:0b:b4:c4:cf:5b:c1:f2:89:16:
53:50:13:6c:04:6f:1d:05:50:7f:4f:00:0c:de:0f:08:0e:b8:
27:39:7d:44:82:81:72:c8:73:76:30:8e:ff:b8:0c:17:08:d7:
b9:e4:f2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:27:05 2026 by rpki-client