
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fbaf6431-76a7-36b9-97f1-693a5b437325.roa
File: fbaf6431-76a7-36b9-97f1-693a5b437325.roa (raw, json)
Hash identifier: sbr0fIORXSRHMS72ih5FHav1gCTf+pZ1I49FGOMnaNA=
Subject key identifier: 4C:7F:46:99:44:99:AE:1D:CE:E1:06:26:ED:48:EC:87:62:C6:81:88
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24DFADC40211330544AE18E0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fbaf6431-76a7-36b9-97f1-693a5b437325.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 67.54.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:ad:c4:02:11:33:05:44:ae:18:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=ae769c98-7bb5-404d-a2ae-8145d5f12e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:82:2b:bf:f4:22:f4:83:24:11:87:0a:f7:12:
76:0b:cb:f6:01:2b:60:08:3a:0f:a0:eb:35:ee:56:
01:2d:05:c0:a1:45:5d:59:7b:26:3f:52:07:7a:f2:
21:cf:40:ec:6a:fe:98:22:7c:dc:5a:b3:39:c4:3b:
c6:f0:d4:e7:21:8b:99:e8:24:b3:f1:a1:27:7a:a6:
c3:27:5f:28:be:3f:d0:54:6f:4b:9c:85:f7:4e:3e:
49:14:ce:64:59:80:c1:9e:9d:95:53:6e:d5:00:92:
06:ea:db:4d:a5:28:e9:a8:ea:30:ac:7c:24:0c:f6:
b6:9e:dc:4b:8c:24:21:0d:e4:e5:b4:1c:76:98:ec:
4b:c4:eb:bd:ef:7c:3c:04:75:18:cf:e2:80:70:e9:
52:74:9b:c7:4e:d5:0d:7f:19:d2:ee:cb:eb:b2:d3:
c5:cc:43:12:3b:dc:6d:f5:0b:ca:74:6f:c8:c6:6b:
11:10:3f:11:0d:26:6d:92:6d:8e:ef:83:dd:f9:92:
02:b3:58:84:ce:a7:dc:0f:27:28:8a:da:de:de:a4:
19:40:fc:ab:39:20:b9:02:4a:4e:b8:cc:97:33:21:
8f:91:fc:1a:a7:b2:22:ec:3b:da:19:db:28:d6:d0:
98:68:b7:69:b1:fc:4f:77:38:6c:a7:04:90:ee:9b:
c5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7F:46:99:44:99:AE:1D:CE:E1:06:26:ED:48:EC:87:62:C6:81:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fbaf6431-76a7-36b9-97f1-693a5b437325.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
67.54.237.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:1b:45:d6:ef:9f:d9:d8:26:43:9a:ab:6f:50:93:4f:d9:28:
4e:87:9f:48:b8:3a:57:0f:21:b3:7d:3b:7c:3e:12:9c:d0:ab:
21:dc:53:30:a9:04:17:c6:29:e5:07:49:6f:47:49:78:2b:cb:
81:5e:22:3b:d1:e9:19:10:ad:e9:af:c2:f8:33:12:71:42:a9:
eb:88:65:5d:86:09:dc:72:88:22:d8:3a:c6:bd:98:c0:32:05:
de:6e:62:4d:44:a3:e0:3e:77:e8:bb:65:29:9c:d8:5b:8c:a8:
a5:40:39:39:57:85:0c:62:18:f1:37:db:6b:0b:d5:11:16:86:
1c:43:c6:c2:4c:14:af:dd:cc:8c:14:d0:f5:a6:e6:38:88:0f:
80:a5:8c:7f:4d:72:cd:60:de:ea:28:ec:14:1e:1c:11:b2:a1:
82:7f:78:63:1b:8d:32:8f:fc:49:44:df:21:1b:d4:d6:9e:6a:
f3:7d:71:af:40:5a:25:4f:cd:b1:77:c5:29:0b:96:f4:a5:6c:
dc:8e:fe:cd:d3:33:a5:39:ec:05:8c:13:c7:fc:f9:73:54:e5:
6f:e4:c3:a0:95:fb:bf:10:db:9c:b8:c0:76:f6:f5:66:f1:c8:
97:e1:e4:33:c0:df:ce:2e:e4:fa:9c:c8:af:8b:5e:b4:1a:89:
41:cf:4b:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k363EAhEzBUSuGOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
YWU3NjljOTgtN2JiNS00MDRkLWEyYWUtODE0NWQ1ZjEyZTRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4Irv/Qi9IMkEYcK9xJ2C8v2AStgCDoPoOs1
7lYBLQXAoUVdWXsmP1IHevIhz0Dsav6YInzcWrM5xDvG8NTnIYuZ6CSz8aEneqbD
J18ovj/QVG9LnIX3Tj5JFM5kWYDBnp2VU27VAJIG6ttNpSjpqOowrHwkDPa2ntxL
jCQhDeTltBx2mOxLxOu973w8BHUYz+KAcOlSdJvHTtUNfxnS7svrstPFzEMSO9xt
9QvKdG/IxmsRED8RDSZtkm2O74Pd+ZICs1iEzqfcDycoitre3qQZQPyrOSC5AkpO
uMyXMyGPkfwap7Ii7DvaGdso1tCYaLdpsfxPdzhspwSQ7pvF+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEx/RplEma4dzuEGJu1I7IdixoGIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmJhZjY0MzEtNzZhNy0z
NmI5LTk3ZjEtNjkzYTViNDM3MzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzbtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIsbRdbvn9nYJkOaq29Qk0/ZKE6Hn0i4OlcPIbN9O3w+EpzQqyHcUzCp
BBfGKeUHSW9HSXgry4FeIjvR6RkQremvwvgzEnFCqeuIZV2GCdxyiCLYOsa9mMAy
Bd5uYk1Eo+A+d+i7ZSmc2FuMqKVAOTlXhQxiGPE322sL1REWhhxDxsJMFK/dzIwU
0PWm5jiID4CljH9Ncs1g3uoo7BQeHBGyoYJ/eGMbjTKP/ElE3yEb1NaeavN9ca9A
WiVPzbF3xSkLlvSlbNyO/s3TM6U57AWME8f8+XNU5W/kw6CV+78Q25y4wHb29Wbx
yJfh5DPA384u5PqcyK+LXrQaiUHPSy4=
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:42:21 2026 by rpki-client