
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fadf67e1-b599-3aeb-94cd-9a009f4048cd.roa
File: fadf67e1-b599-3aeb-94cd-9a009f4048cd.roa (raw, json)
Hash identifier: gniH6CesPttrEw14/eu0NfZZhnzoUeeHPsP4E4D1uu0=
Subject key identifier: 4E:F8:C8:BF:DA:E1:EB:E5:A2:BA:7B:83:85:1A:9D:0D:99:65:6C:1F
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E0248C1900D11B2D364640
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fadf67e1-b599-3aeb-94cd-9a009f4048cd.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 184.63.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:24:8c:19:00:d1:1b:2d:36:46:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=cbbdd95a-4774-4a56-85b7-8cabaca785e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d2:13:e8:5f:5c:58:26:70:ec:46:9f:ca:7b:
37:73:8e:56:d8:5d:98:dd:58:27:61:d2:d2:15:34:
06:76:d2:77:f6:59:e7:c5:48:bf:db:76:e4:6f:6f:
42:d1:b6:6e:64:f9:99:bf:8d:6b:a6:56:d5:c1:fb:
0a:a9:9a:02:35:32:ed:88:3b:50:71:5c:0f:2c:a3:
42:cf:63:a8:c6:0e:87:19:0a:62:6e:a1:93:77:c5:
39:2b:56:06:a8:83:61:3f:87:ed:a6:59:a1:da:4b:
3c:9c:d5:b3:e4:42:0f:7a:9b:a5:b2:7c:30:c0:17:
cb:7b:f2:0d:b2:b1:7f:13:ec:0f:c8:2c:6e:e3:cc:
f4:83:92:3e:be:cb:68:b7:d6:76:64:d3:7e:68:80:
dc:c2:84:36:0d:70:2b:32:c5:0d:a1:8c:93:27:a4:
2e:d0:b9:c8:f4:fb:84:5b:d1:01:dc:9e:74:fb:fd:
ed:81:9a:1f:73:d6:5b:41:28:ba:9b:56:b1:ed:b8:
82:d4:48:c7:47:fa:8e:12:5f:0d:6a:a9:09:e6:00:
ee:7d:ac:15:e2:5a:c0:f8:6a:8a:e4:49:94:27:08:
b8:e3:40:00:2b:c6:34:f8:bc:92:1d:ec:31:4d:84:
1f:87:97:aa:1b:7f:bb:65:c4:f2:f7:04:b8:f8:fa:
87:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F8:C8:BF:DA:E1:EB:E5:A2:BA:7B:83:85:1A:9D:0D:99:65:6C:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fadf67e1-b599-3aeb-94cd-9a009f4048cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.63.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:2f:72:3e:5d:84:a0:77:39:82:be:73:ea:2a:33:a5:1d:2f:
dc:0c:bc:35:66:78:36:b0:7c:55:43:27:12:27:25:26:b3:63:
cb:dd:8c:42:6d:9c:95:67:42:9b:1c:f2:5a:9e:35:bd:ce:4d:
b2:8d:74:be:e3:44:f2:d3:4b:29:75:81:ed:7b:dc:94:b4:2c:
bd:29:bd:e0:b5:ec:ff:35:41:77:ce:de:1e:32:c9:e3:18:e9:
8e:4e:5d:ea:b0:b4:c5:0b:99:5f:2b:ee:6c:7c:40:60:a0:ff:
28:83:12:da:a4:e6:d5:4d:9a:88:c7:c6:4a:1b:80:48:b0:c4:
9a:d1:93:cb:cd:aa:8c:bd:3b:dd:cb:e2:e3:1e:44:34:66:2e:
d6:7d:39:60:b6:35:4e:51:79:37:88:73:81:4f:dd:00:f1:62:
cd:73:c7:d6:ac:fc:bc:f1:e0:b9:3f:08:9f:52:66:17:10:ae:
96:1d:23:ab:f1:04:ea:8f:cd:bc:dd:c5:7d:12:e3:8d:13:8d:
e5:ee:b1:24:a1:2c:13:c1:b6:f7:33:4e:ea:e3:b8:22:78:18:
74:12:d6:37:7c:de:93:47:2e:df:ce:98:8c:ef:a0:a5:56:90:
05:2c:ca:1a:b3:76:42:44:3d:18:29:60:8a:22:c8:4e:7d:8e:
82:23:d6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:19:28 2026 by rpki-client