
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8d717a4-4083-320b-8aa8-321b109f0559.roa
File: c8d717a4-4083-320b-8aa8-321b109f0559.roa (raw, json)
Hash identifier: 47CjLUU11radzKDLYxafUfaxeMfg2xYQ9gS2rinUdB4=
Subject key identifier: F3:47:F7:E2:C2:20:DD:13:36:FB:59:63:DB:C2:59:34:2D:C6:08:8C
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F497BCDFD340A644EC0F09680
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8d717a4-4083-320b-8aa8-321b109f0559.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 184.21.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 01 Oct 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7b:cd:fd:34:0a:64:4e:c0:f0:96:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=e2f5bdd8-9cc1-48fc-a834-f6863182b69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:94:fb:b3:e3:63:fd:a4:f4:4b:e4:42:3b:03:
a8:0d:2c:ae:d5:b8:69:e9:7a:4b:46:ce:47:9f:0f:
90:f3:f3:10:43:f4:5e:f8:be:1a:40:16:c5:0c:89:
4e:ad:ca:fb:92:e8:f2:98:ea:bf:cf:af:3a:09:f1:
ec:9d:cd:7e:3e:68:b4:91:ce:ca:a6:7a:3a:60:dd:
1b:72:d6:9d:da:6d:ea:d8:4e:7f:9f:b5:7e:d2:de:
83:0b:3e:bf:2d:72:7a:18:85:f1:9c:0a:a0:24:93:
b4:54:e1:bb:2d:0e:c5:9f:f1:52:af:8e:7f:60:61:
88:05:20:21:b5:ad:e7:44:c9:e8:f1:61:56:aa:ef:
9a:38:45:a5:1b:25:ec:c8:47:4e:32:05:68:15:9b:
54:a5:f3:90:bf:b7:73:b9:9f:c8:96:3d:03:fc:24:
f7:e3:b6:ec:47:59:70:ee:ff:00:d2:e5:e4:c4:37:
bb:e2:ba:00:a1:c2:c5:44:ab:fb:4e:e3:36:1f:6a:
b8:d6:5b:36:b8:66:dc:f2:75:33:f7:33:5d:25:a5:
14:c9:6e:7d:10:e2:ec:ac:54:34:b5:3a:f1:f2:e0:
cc:1e:bb:ae:a9:99:20:fd:1e:3a:df:cb:45:8d:13:
ce:c0:fa:25:d3:91:87:94:33:11:0e:2d:7b:77:73:
d4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:47:F7:E2:C2:20:DD:13:36:FB:59:63:DB:C2:59:34:2D:C6:08:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8d717a4-4083-320b-8aa8-321b109f0559.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.21.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ce:2e:f3:45:7b:b4:79:87:88:25:58:ae:56:40:3e:12:8c:9e:
f3:06:8c:24:54:ee:0f:45:92:b5:77:e9:ec:96:6a:e0:af:25:
2e:60:4e:d4:09:68:14:58:14:97:09:cf:8c:6d:61:88:d5:ef:
e9:bf:02:a0:62:29:7d:0d:30:0c:d4:30:fb:d7:14:ae:17:3e:
20:25:61:c1:3f:dc:67:19:9f:49:51:ad:48:76:9d:b1:85:6c:
2a:f9:2d:6b:bd:96:66:cb:a5:9e:83:ae:5a:83:35:20:c8:6c:
06:e6:c4:ec:a8:34:01:c6:c4:a3:99:66:0f:07:d6:86:b5:da:
3a:ff:c0:82:66:05:26:5e:df:50:f0:cb:71:20:d6:24:d6:a9:
cb:6f:45:2f:cf:5c:ee:65:28:f3:d4:58:86:48:e5:fc:34:37:
4c:a3:c3:73:7f:9a:4b:0b:e8:26:31:6c:26:de:7a:88:0c:80:
97:04:1a:31:fb:e5:58:a8:d4:41:97:bd:12:94:16:d9:af:d6:
fe:55:c5:40:3b:b9:02:af:bc:5d:42:6e:38:d6:bd:db:70:32:
3e:57:81:5c:12:04:59:00:30:db:e7:cf:71:5c:a7:ae:cd:0a:
5e:14:8a:2a:73:ee:5e:7e:a6:30:41:d3:f2:d3:47:a6:41:79:
d7:29:03:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 15:26:34 2026 by rpki-client