
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bfb1447f-fcd2-3a38-8239-151dd80283b9.roa
File: bfb1447f-fcd2-3a38-8239-151dd80283b9.roa (raw, json)
Hash identifier: eV/FjfwloggNMO8G9cAlPbAMMcujMuhCNiJlr50oXVQ=
Subject key identifier: B6:37:96:14:7A:9C:09:58:A9:53:77:DA:4C:A5:AE:BB:42:53:F5:65
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E073700DB39F761229BBF0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bfb1447f-fcd2-3a38-8239-151dd80283b9.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 75.104.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:73:70:0d:b3:9f:76:12:29:bb:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=f67d9ea9-388e-473b-a442-2f940c0a0891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f2:a6:05:fc:8e:1f:44:ff:e7:6d:97:9d:04:
19:10:0c:07:3f:13:32:36:84:bd:cc:f7:f7:23:1d:
30:8a:c5:d4:12:45:65:55:52:3c:c6:d1:e0:86:f3:
a3:3c:d1:b7:5a:6f:17:16:8f:f9:4c:1b:a4:86:3b:
b5:2b:b9:14:bc:23:77:e1:2f:21:f7:4b:cf:78:46:
99:45:ad:60:8d:8b:bd:35:e0:d1:51:e6:ff:d1:68:
4d:6f:42:39:0a:20:4d:26:b9:88:96:47:f0:fd:ba:
5d:9e:5e:26:2f:e7:90:1c:76:2a:02:06:42:88:11:
c1:43:19:3f:72:88:30:2d:19:f4:f6:1d:d5:9a:fc:
e7:01:6a:86:50:ac:7a:b5:35:4c:c3:97:f7:72:93:
85:7c:28:92:83:51:45:e1:82:c1:a4:02:51:ec:00:
11:ce:49:34:20:2b:4c:2f:ed:0b:df:59:63:c5:1f:
22:4a:06:98:2d:c3:50:4b:9d:8a:26:3c:27:cb:ca:
cd:a7:12:7d:ac:14:25:92:35:71:74:9c:00:0c:3d:
67:ac:59:fd:9d:f4:93:45:07:6a:a7:c2:5f:37:09:
9a:09:67:98:c0:c3:9a:12:d6:ef:0b:59:56:e6:2c:
60:30:ae:f1:24:df:75:13:2d:a7:bf:07:b6:d7:c6:
14:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:37:96:14:7A:9C:09:58:A9:53:77:DA:4C:A5:AE:BB:42:53:F5:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bfb1447f-fcd2-3a38-8239-151dd80283b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
75.104.206.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:84:b6:a9:55:21:e2:a5:10:a2:44:10:93:d0:3d:19:a8:86:
ab:f9:f9:8e:24:d8:dc:ce:45:1f:89:ed:dd:06:f4:e1:dd:7b:
64:52:75:8b:06:06:dc:3c:37:bf:3f:d3:66:89:a0:20:a9:a6:
1e:79:11:18:47:84:be:cf:67:1b:70:5c:40:5c:3f:74:d1:49:
67:3c:26:9d:0f:21:7b:e2:87:dd:2b:ed:95:51:cf:c3:96:b3:
9b:ce:bb:f7:65:07:48:f5:b4:dd:b6:c8:9a:7a:f5:00:db:df:
15:04:b8:ce:b8:23:2b:d4:0c:b2:39:b8:0c:27:f9:5e:89:dc:
cb:b7:e5:08:1e:60:51:8a:fb:06:50:80:21:65:b6:55:43:35:
f4:64:3b:b0:2d:e7:81:c1:5f:74:3c:5a:f3:01:0d:44:bd:17:
a5:ec:59:1f:60:59:20:78:f8:1a:17:0a:96:74:56:3d:83:65:
d6:af:24:27:46:25:f6:2d:76:5b:b9:2c:e9:99:11:f8:36:73:
94:c7:cc:89:a7:fc:5f:ae:87:87:5e:36:34:f4:bd:20:a3:d2:
ab:cb:a7:22:f5:97:5f:ed:c5:ce:b6:ca:40:83:03:db:c4:90:
f3:0f:c4:06:df:e4:b8:d0:4d:57:3b:4a:50:bd:22:19:d8:09:
ec:31:75:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:08:40 2026 by rpki-client