
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e521c442-1af8-37a6-9554-ea40d568ecf8.roa
File: e521c442-1af8-37a6-9554-ea40d568ecf8.roa (raw, json)
Hash identifier: ioEVWcCZvGM9RzrXHj4rsDKKt1VjZeHr/r+npyb4L8E=
Subject key identifier: 8D:09:3B:5B:7E:5C:97:CC:BF:F5:0D:AE:3C:54:38:21:12:8F:B0:E7
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E011ACE0FACBB40104B720
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e521c442-1af8-37a6-9554-ea40d568ecf8.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 184.21.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:11:ac:e0:fa:cb:b4:01:04:b7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=64ce4548-d352-4750-ae88-0ed45ed3c7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7c:62:79:f6:6c:3d:fe:84:b6:7b:28:b2:0d:
e2:e6:11:50:04:df:37:b6:4e:b1:5f:0e:be:57:b2:
71:e2:d0:f2:28:4e:70:6d:07:39:f6:5f:35:10:f5:
49:f0:81:52:cc:29:2c:02:ea:66:f9:84:f0:35:0c:
5e:ec:a8:2a:9e:bd:22:22:ec:e7:f5:2e:6e:19:a9:
44:98:93:ac:74:fb:38:21:15:e5:2a:78:c1:ca:a8:
3f:7a:1c:aa:fd:36:f5:9e:4e:71:d6:fd:3c:36:28:
8f:e4:6c:72:ec:ec:69:13:f2:25:2c:05:5e:df:51:
e0:3a:14:ec:5e:30:06:43:4f:18:02:08:9a:3e:b3:
bd:33:05:43:ce:44:0d:7b:73:32:90:83:49:f6:14:
94:68:2b:f1:35:ae:96:31:93:e8:da:4f:f2:9b:77:
54:b1:75:9c:e2:13:ab:ca:44:e4:eb:47:18:f1:6d:
fa:f2:ab:8f:e8:54:5b:ac:6c:05:63:d4:e5:c9:bc:
9a:6d:dd:a3:50:16:33:c2:88:21:0c:97:a7:8c:10:
7e:5b:9c:04:e4:ee:92:58:a5:dc:e8:35:86:34:65:
77:8f:ed:7f:83:f4:38:8f:94:f6:a4:59:23:bd:48:
09:bd:b6:24:23:71:ba:1f:76:8d:5e:b4:ec:3e:b7:
14:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:09:3B:5B:7E:5C:97:CC:BF:F5:0D:AE:3C:54:38:21:12:8F:B0:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e521c442-1af8-37a6-9554-ea40d568ecf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.21.140.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:a1:be:6a:0d:33:51:b3:a3:93:1a:7b:25:79:3c:f1:67:37:
e7:c4:94:92:7d:e2:ca:b7:b3:d5:8c:1e:b7:8f:84:ab:6e:66:
fd:92:a1:36:92:8d:05:79:75:2a:b7:24:e9:50:8f:d8:3c:74:
a4:80:ac:8f:d9:08:23:9f:42:d7:93:f5:32:7f:7f:f6:43:8d:
4e:c5:74:64:67:8b:6f:8b:fd:14:54:42:57:2f:09:ba:54:28:
a9:0e:ff:92:72:80:75:e6:51:bf:72:83:01:8a:d9:69:26:08:
4d:da:eb:d3:a4:9f:dc:48:ed:85:c0:73:25:a0:c8:29:3c:b2:
59:2c:19:fc:19:84:68:65:88:da:b1:93:b1:47:fa:22:e4:1f:
0c:e6:1f:d6:0a:83:ee:f5:61:e8:9c:39:d2:5a:1c:fd:01:0e:
b2:0d:65:39:6e:c7:7c:59:f6:ea:d9:9c:a6:4c:2a:76:ac:61:
51:0a:72:c1:fb:17:78:33:98:d4:bd:82:d2:46:fe:4f:83:b4:
82:af:ba:0d:3b:43:7a:56:d8:9e:73:ed:47:3e:a1:97:52:ef:
74:55:7c:13:1a:57:f0:63:bd:7a:39:bf:b0:c7:ea:21:7f:91:
ed:5f:ab:60:36:80:59:f7:cc:a1:95:bd:9a:0a:6f:58:e8:82:
48:e9:71:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4BGs4PrLtAEEtyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
NjRjZTQ1NDgtZDM1Mi00NzUwLWFlODgtMGVkNDVlZDNjN2E4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3xiefZsPf6Etnsosg3i5hFQBN83tk6xXw6+
V7Jx4tDyKE5wbQc59l81EPVJ8IFSzCksAupm+YTwNQxe7Kgqnr0iIuzn9S5uGalE
mJOsdPs4IRXlKnjByqg/ehyq/Tb1nk5x1v08NiiP5Gxy7OxpE/IlLAVe31HgOhTs
XjAGQ08YAgiaPrO9MwVDzkQNe3MykINJ9hSUaCvxNa6WMZPo2k/ym3dUsXWc4hOr
ykTk60cY8W368quP6FRbrGwFY9Tlybyabd2jUBYzwoghDJenjBB+W5wE5O6SWKXc
6DWGNGV3j+1/g/Q4j5T2pFkjvUgJvbYkI3G6H3aNXrTsPrcUEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI0JO1t+XJfMv/UNrjxUOCESj7DnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTUyMWM0NDItMWFmOC0z
N2E2LTk1NTQtZWE0MGQ1NjhlY2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBWMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACOhvmoNM1Gzo5MaeyV5PPFnN+fElJJ94sq3s9WMHrePhKtuZv2SoTaS
jQV5dSq3JOlQj9g8dKSArI/ZCCOfQteT9TJ/f/ZDjU7FdGRni2+L/RRUQlcvCbpU
KKkO/5JygHXmUb9ygwGK2WkmCE3a69Okn9xI7YXAcyWgyCk8slksGfwZhGhliNqx
k7FH+iLkHwzmH9YKg+71YeicOdJaHP0BDrINZTlux3xZ9urZnKZMKnasYVEKcsH7
F3gzmNS9gtJG/k+DtIKvug07Q3pW2J5z7Uc+oZdS73RVfBMaV/BjvXo5v7DH6iF/
ke1fq2A2gFn3zKGVvZoKb1jogkjpcfg=
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:11:17 2026 by rpki-client