
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f3623923-43d1-3859-aa9c-58474b07061e.roa
File: f3623923-43d1-3859-aa9c-58474b07061e.roa (raw, json)
Hash identifier: PiE1Pd0h0280qD554elxC9I/z+xFJXtAHakF2aZy7+Y=
Subject key identifier: C0:36:A6:3E:A2:F1:F5:52:AC:F1:D1:7A:F0:80:2A:83:0C:7B:88:57
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F497BC25829C76832DA68D280
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f3623923-43d1-3859-aa9c-58474b07061e.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 184.21.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Oct 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7b:c2:58:29:c7:68:32:da:68:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=14065998-a0f3-4884-a066-5a23f9cc1668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f8:46:22:08:f4:46:77:db:c6:bb:bd:49:48:
fb:60:cb:3a:7f:09:fe:8d:32:8d:0b:85:42:a1:41:
b2:30:33:0f:22:cb:7f:1b:e9:81:5b:27:78:05:1e:
1e:7d:8e:64:f8:f2:be:12:b1:1c:88:40:5e:5d:1f:
a5:a3:aa:87:fb:dc:45:a8:04:db:95:ce:f1:0f:91:
59:c4:7f:4d:e7:07:e2:10:dd:46:87:18:a6:0d:3c:
fd:12:05:2e:f9:ac:96:99:e7:24:f2:b7:04:76:87:
33:25:4b:ba:5e:7b:2f:72:cf:11:69:98:17:fa:15:
cc:e3:b3:5c:14:db:df:76:6d:ed:7c:a3:ec:6a:13:
da:0c:ef:96:cd:3a:17:63:ee:0f:08:ab:5e:ad:f6:
30:51:9b:05:cc:2c:13:49:af:bf:a2:a9:c8:74:58:
20:39:3e:99:a1:ee:6d:d1:d9:be:e9:34:24:f8:93:
c4:17:54:84:b9:02:2e:81:03:cc:03:68:b7:be:9d:
b7:05:02:63:b0:25:5a:16:b4:d1:ae:c6:eb:e1:f1:
86:0e:a7:2e:9d:38:bc:31:3d:f8:e3:41:06:ac:58:
13:34:d4:ac:25:25:7e:04:d3:15:e2:13:ee:43:3e:
52:a4:70:09:87:b8:1e:35:7e:87:31:5e:44:34:dd:
0a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:36:A6:3E:A2:F1:F5:52:AC:F1:D1:7A:F0:80:2A:83:0C:7B:88:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f3623923-43d1-3859-aa9c-58474b07061e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.21.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:4f:f0:14:44:5a:22:29:77:c0:f9:f9:a6:25:c8:46:54:e3:
f0:16:49:7f:31:0b:b5:4b:42:e0:0d:ff:4d:51:74:96:d0:07:
e9:d5:b4:41:c4:c0:3f:4f:fd:76:26:85:da:b5:e5:3e:68:14:
38:49:3a:59:fc:27:3e:2d:19:28:52:9d:02:34:56:bf:86:4a:
e2:a7:a5:36:99:5f:b0:44:dc:b6:c8:5e:85:5c:ef:8b:3f:f4:
34:d9:37:62:08:07:e5:56:29:69:a0:9d:a0:f9:d4:5d:d3:7b:
74:90:34:f1:d0:38:04:24:32:77:49:d0:aa:a2:2a:33:d4:4f:
a3:62:e9:89:f2:f3:75:07:3f:54:f8:39:a4:3d:70:60:07:6e:
7c:c7:27:ea:8f:d0:c8:b2:1f:12:2f:56:b0:fb:5e:ef:6f:fe:
02:37:f7:49:06:86:96:56:b3:7f:bc:c0:8b:9d:c4:66:81:bf:
67:01:ad:21:18:94:13:a3:76:09:ca:6c:88:e0:49:83:c2:52:
45:29:ae:5e:7d:0f:08:8d:13:5b:18:fd:e9:56:8f:42:b6:ad:
29:53:4d:28:3b:5d:1f:c8:c7:1b:cd:b2:2c:29:ec:8f:ef:b6:
9f:a3:b2:7d:9f:3a:0d:66:ac:ac:e7:11:a8:36:3b:32:c8:68:
91:8e:1a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:22:43 2026 by rpki-client