
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c4bdc700-e25c-3a44-81d4-5a29aa475417.roa
File: c4bdc700-e25c-3a44-81d4-5a29aa475417.roa (raw, json)
Hash identifier: AqGy35xlIP3xWCIhEVXEUtInc5Nj4pfZI1eYH2iecMU=
Subject key identifier: 05:FD:16:77:E7:68:0D:04:A4:F8:F6:EB:9A:4E:D3:91:C5:D8:D2:94
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F498403AA0535C447758C2F00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c4bdc700-e25c-3a44-81d4-5a29aa475417.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 184.21.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 29 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:84:03:aa:05:35:c4:47:75:8c:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=da7c3fbe-3bf8-49f0-a09e-4be31d6fbd52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0e:5a:a6:e9:16:a7:cc:c5:99:ba:56:60:42:
d5:3f:00:0f:ad:da:bf:56:0f:4b:45:33:a5:52:74:
f7:b8:32:5d:63:17:67:d0:03:a7:71:24:a9:95:34:
23:fb:1b:9d:c2:0b:35:ec:51:c0:9d:93:e5:75:fe:
f5:51:1b:7d:f6:57:1c:d2:5e:69:c8:3d:3f:98:a7:
7f:e9:de:2a:6d:e7:8a:5a:f9:15:61:71:83:b1:17:
ae:be:1d:31:7d:91:67:a9:3b:dd:33:96:c4:3d:a0:
3b:b3:b6:9f:94:6b:57:fc:13:64:96:75:8e:fd:96:
2f:2a:3a:09:34:e5:50:3b:6d:88:c2:65:b3:9c:a0:
85:94:21:34:a0:09:f7:52:16:fd:4e:56:7d:42:e5:
5c:97:f4:9e:a6:16:be:f1:26:9b:41:2f:66:13:b9:
74:df:11:90:77:f2:eb:8f:68:72:5c:0c:22:4f:25:
d8:4d:9c:79:e3:48:10:1b:30:1e:83:d3:c5:8d:38:
07:c0:fa:0c:5a:16:86:4c:5e:a7:14:16:59:e8:c0:
67:e7:2a:aa:c6:5a:16:17:ec:83:db:4b:a5:ef:16:
32:e3:e9:69:db:18:67:05:bc:20:95:2f:fd:0f:5a:
1f:e7:80:66:0f:df:c3:ef:f8:f5:50:d2:ab:2c:35:
79:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FD:16:77:E7:68:0D:04:A4:F8:F6:EB:9A:4E:D3:91:C5:D8:D2:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c4bdc700-e25c-3a44-81d4-5a29aa475417.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.21.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:8c:af:e5:61:46:b6:0b:de:fa:54:4a:14:65:09:c2:bc:63:
e4:ba:e6:38:c8:ce:21:5f:38:69:7c:c7:33:76:b3:f0:4f:30:
52:42:48:a3:0b:c1:4a:f2:c9:cf:d8:d1:7f:46:b2:df:c5:9a:
e1:ed:5a:19:12:71:b9:c6:58:dd:d0:c0:a9:4d:e3:00:3e:e9:
46:60:2b:77:2e:ae:6d:af:ad:39:1c:ce:b5:b8:a3:d8:0d:eb:
9b:1b:c8:45:4b:d9:94:45:a4:cf:8a:9e:da:bb:ae:e9:f0:d4:
e8:38:cb:b2:29:8b:50:c0:ed:d5:06:2f:ac:38:a6:22:92:bc:
6b:92:52:bb:ce:c0:73:e0:7d:a3:14:5f:73:8a:4c:c5:4b:79:
17:c6:a6:fb:c1:4b:39:8b:fd:bb:9d:57:4b:ae:9e:0b:89:da:
ca:de:1b:b2:ec:98:6b:73:c9:cc:8a:8a:d5:6a:fb:fe:5a:7c:
be:b2:bc:ce:16:52:25:e8:12:58:a7:26:61:a0:6f:bc:47:f3:
2c:e0:98:f5:04:f5:40:b5:b7:a6:86:5c:d0:80:2e:a4:00:16:
34:af:c2:fb:65:8a:ab:8f:98:42:37:96:ed:5c:0d:f3:d0:cd:
3d:59:62:c9:83:ab:56:c4:40:39:67:76:bb:0b:99:99:36:2e:
da:d4:d1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:11:25 2026 by rpki-client