
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c49baf38-987f-31eb-9c02-e0c174f96a89.roa
File: c49baf38-987f-31eb-9c02-e0c174f96a89.roa (raw, json)
Hash identifier: l6JKvtKl0aybcRpzUfzB3dIQsZwdEt3ju4AzZGinIt4=
Subject key identifier: B3:16:63:99:BA:2B:19:82:33:FA:86:69:C0:E2:04:99:97:7C:4F:7D
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E0139C618A522101319F00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c49baf38-987f-31eb-9c02-e0c174f96a89.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 184.21.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:13:9c:61:8a:52:21:01:31:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=341376bd-5759-4ae8-9f34-aa5f5ed55ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:90:c2:00:1d:35:6d:22:7f:8b:2e:7f:bf:3e:
cd:97:96:7b:94:08:24:d7:b9:f6:23:ef:f8:e8:59:
05:84:be:7d:18:69:66:b8:85:86:bf:09:a7:49:f8:
8e:81:b9:2b:e7:1c:cd:f1:b1:7d:fd:7e:73:a6:c9:
63:dc:e5:d5:29:bd:95:1c:55:53:da:b0:f9:18:f7:
36:fb:52:67:c1:22:95:ff:31:a8:83:8f:85:1b:ed:
f0:9f:e6:5b:c8:4b:47:e2:b8:6a:5a:a1:98:b5:6e:
49:55:c8:a2:a1:72:5a:ff:43:f9:89:35:6f:fe:a7:
b1:98:31:81:9c:3c:05:ec:05:7a:6e:b1:40:17:95:
ec:70:ed:5e:d0:3a:84:69:e3:b7:3d:52:ac:c1:a1:
11:ef:ce:46:85:a3:10:1c:a7:98:92:c7:76:e7:78:
62:a8:ff:a3:df:38:4b:71:b4:86:2a:7f:11:72:3a:
2e:46:d1:c7:f1:7a:c3:72:3e:42:0f:37:f0:5a:c2:
b9:bf:43:a1:14:15:83:e3:30:2f:9d:8b:9a:c5:41:
35:16:e0:a4:2d:61:ce:41:76:c8:7e:5b:85:d3:2c:
f3:80:8c:7e:00:c3:8c:e1:65:b4:3e:49:f6:f7:d1:
26:74:57:9d:a5:f7:3d:5b:f3:36:2c:b4:75:b1:3a:
94:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:16:63:99:BA:2B:19:82:33:FA:86:69:C0:E2:04:99:97:7C:4F:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c49baf38-987f-31eb-9c02-e0c174f96a89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.21.197.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:6e:6b:4a:49:cd:e2:c8:5d:18:c4:6a:5a:c0:7a:53:73:09:
21:e0:4f:0b:1d:09:79:1c:a0:92:5f:a4:ac:5d:8b:4b:c8:4a:
b3:44:ee:93:0e:95:21:87:72:80:cf:b3:72:c3:30:92:69:d6:
b9:de:23:09:63:22:6f:61:50:05:07:19:f7:ee:d0:9e:4b:7f:
20:09:fc:97:2a:68:0c:43:ac:4d:73:6d:a5:7c:7d:69:49:b6:
20:28:fa:80:75:fd:8b:5d:60:56:31:e8:d0:b1:4f:7c:dd:2e:
27:64:de:d0:fd:70:da:a7:51:bb:cb:2a:7f:2e:7c:5b:f9:90:
30:c5:f5:b2:c9:e5:3a:ff:76:dc:86:e4:2f:74:eb:51:d8:c8:
d8:86:91:6d:9a:5a:ae:53:1f:c5:ec:a7:f1:c6:dc:46:0a:01:
96:80:c9:3c:b4:71:3c:b8:c7:be:5d:86:a1:6d:7c:bb:8c:16:
24:6b:22:ce:2e:02:0d:27:af:de:53:af:5d:db:f7:3f:b1:89:
df:da:a1:da:88:b5:2e:10:0c:70:a4:88:6a:fe:fe:03:7e:31:
5f:b3:2b:d6:af:4f:67:51:4a:cd:ee:c5:8a:7b:e8:ac:34:96:
51:f2:ed:18:85:96:2e:1b:92:f2:40:8e:06:c1:aa:66:94:49:
e0:5a:38:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:20:35 2026 by rpki-client