
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/efeee425-db4c-3497-aa9e-c12fe1cec673.roa
File: efeee425-db4c-3497-aa9e-c12fe1cec673.roa (raw, json)
Hash identifier: Ku8gW4AXuf6dPft2Th5gFNSekv/DwPmu9tbud4FoEZo=
Subject key identifier: 15:F4:1B:C9:27:03:2F:0E:85:C3:B9:8A:62:00:3A:66:94:01:16:90
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E0C7FD17C4E09F0CBAB180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/efeee425-db4c-3497-aa9e-c12fe1cec673.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 184.21.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:c7:fd:17:c4:e0:9f:0c:ba:b1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=ba5e742e-508c-41b4-80e0-a54456bc9aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a3:1b:6f:b9:e8:95:b0:91:6a:02:71:13:b3:
78:dc:57:5d:69:30:2f:e0:23:0d:e7:10:6f:a7:84:
5f:bf:7b:2b:38:68:2d:b5:bd:51:e9:f5:46:1a:f8:
42:a9:ca:86:ab:7e:e1:e9:32:43:46:c0:ba:a2:07:
ef:18:cc:e8:63:3e:ee:82:ee:31:b5:d3:c7:63:75:
69:0e:46:bd:42:15:5b:be:35:df:c0:5e:f6:1a:44:
27:11:bb:91:28:6c:41:a3:94:ca:55:b5:e0:2b:7c:
fa:c8:95:ab:e1:c9:7c:e0:71:2a:00:3b:0a:e7:b3:
30:e3:16:50:40:23:42:eb:ea:cf:5e:70:4b:f5:cb:
5a:c0:c4:24:71:49:5f:3f:54:7e:5d:36:66:ad:6b:
f2:c0:4d:15:fc:df:47:b7:e2:1a:64:42:f1:fd:ab:
da:35:58:7d:bb:0b:31:e1:d3:a6:60:80:18:0e:b7:
eb:96:dc:37:84:f3:57:5f:01:00:77:f6:43:01:d4:
92:40:37:ed:c7:76:65:66:29:08:dc:83:1d:9d:e9:
7e:3c:f0:6d:37:61:d5:f0:6a:ad:b7:23:c9:4a:8c:
58:62:ef:9f:63:8a:2b:75:b4:71:f6:af:3f:34:8b:
97:71:5c:5b:c3:2d:db:8f:39:32:90:90:a6:cc:99:
41:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F4:1B:C9:27:03:2F:0E:85:C3:B9:8A:62:00:3A:66:94:01:16:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/efeee425-db4c-3497-aa9e-c12fe1cec673.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.21.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:d3:e3:e6:a7:c0:9f:d5:2d:c2:42:45:fd:9f:be:a1:c8:c8:
35:a6:f1:f0:92:e8:17:fa:05:89:d6:90:ab:be:0c:a1:02:7e:
2c:8b:68:c5:83:70:b1:96:78:1b:88:94:30:6b:b7:04:09:b1:
6a:cd:d5:83:ad:7b:9a:5e:2d:e3:8b:45:c8:3f:23:22:24:36:
fa:60:30:4d:ca:6b:be:08:3e:31:3c:a9:74:5e:40:7e:8b:1c:
9b:5a:b6:69:fd:d1:5f:9d:1a:a7:bd:09:52:2d:63:bc:34:32:
a5:62:09:b7:1c:ce:75:6a:f0:37:db:48:90:d2:dd:09:06:36:
5a:29:c5:6a:50:ec:8b:52:70:c5:c8:38:0d:58:0b:95:9b:9d:
b7:34:07:59:f5:01:db:0d:ce:16:78:b2:4b:9e:32:36:4b:03:
d0:6f:07:b2:b9:7f:c7:76:b2:83:e2:da:48:6c:f1:b7:03:17:
b4:f1:ba:43:1b:c1:12:ee:4c:d9:8b:91:e4:52:9f:0c:29:7b:
ac:05:30:62:5e:85:cc:fe:40:e9:a3:5d:9a:cd:57:1b:78:f4:
9e:9f:e0:15:15:08:f9:51:84:ad:cb:b3:20:80:81:da:b1:d5:
d5:51:10:c2:1d:6d:0b:fe:6c:6d:d6:89:c5:f0:75:ce:cd:b7:
c9:dd:18:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:09:53 2026 by rpki-client