
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/73b5439f-730f-3f25-89ea-d764c4bab90c.roa
File: 73b5439f-730f-3f25-89ea-d764c4bab90c.roa (raw, json)
Hash identifier: y43AivVSlYO+pushdjPUFxGt0d+k6NxnJJqBY4RgoCg=
Subject key identifier: BF:07:C4:B4:4A:63:70:63:4A:81:41:A6:39:88:AB:19:24:3B:39:39
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584E059BA8A24A5A08040FECB8C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/73b5439f-730f-3f25-89ea-d764c4bab90c.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 7155
IP address blocks: 184.21.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9b:a8:a2:4a:5a:08:04:0f:ec:b8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=b28f3375-960e-4ef7-bbd1-90227226ef4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:27:bf:a3:96:6e:8c:55:89:9f:ed:ab:a5:ff:
1f:31:e8:4a:de:c1:29:4b:7f:7f:9a:ba:a0:82:c0:
24:3b:b3:c1:66:a3:83:84:67:a0:3b:3a:97:52:75:
46:cb:18:02:37:28:76:16:fd:3f:46:22:37:8e:bb:
c4:bd:df:0a:22:76:de:26:44:5e:8f:62:d0:2c:7e:
9c:fa:a8:31:8b:e9:66:96:6e:97:72:8d:93:32:4a:
13:d9:86:4b:31:36:ca:cc:79:3b:9d:1d:05:cd:ef:
60:ac:d2:88:48:c4:97:c2:c7:79:7d:14:c5:dd:96:
f9:c3:c7:68:9d:83:10:40:79:de:a4:71:d2:21:36:
39:07:d6:1d:66:d0:aa:75:98:6c:35:7b:39:0f:a1:
0e:38:0b:d9:eb:31:b8:90:34:d4:c2:69:6c:fb:c5:
c5:21:85:83:ea:6e:2b:0c:48:75:1b:7b:22:fd:e1:
42:b3:ef:70:a7:a7:07:85:ff:47:c8:b2:d6:e6:9a:
57:5b:64:9e:71:5b:89:07:dc:c5:3a:af:81:ab:41:
58:df:26:44:8b:89:21:1c:6c:4a:b1:d9:08:25:09:
b5:25:ef:3a:e0:44:6e:02:95:81:46:b4:ef:50:3d:
17:01:6c:25:57:cb:00:3f:3d:69:2b:03:5a:45:4c:
ea:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:07:C4:B4:4A:63:70:63:4A:81:41:A6:39:88:AB:19:24:3B:39:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/73b5439f-730f-3f25-89ea-d764c4bab90c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.21.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:ec:6e:9d:6b:31:e1:10:83:25:59:cd:44:43:0c:a7:25:20:
6c:e2:49:d0:0f:3b:8c:1d:d2:e6:85:48:ac:f8:d2:4a:5c:19:
be:9c:78:0c:bf:7e:13:6f:15:46:ba:96:53:2b:24:ae:20:cf:
c5:0d:95:86:a9:9a:78:a2:52:dc:bd:59:e1:42:47:f4:ce:29:
f9:6d:aa:85:66:89:aa:6d:4f:36:5e:0e:4e:09:e3:6b:5b:fb:
f5:bb:8d:04:60:77:72:31:ac:c8:ed:aa:fb:c3:2b:ec:9b:32:
da:36:f3:fe:44:b0:a3:39:dc:80:cc:c2:55:86:0f:02:80:0b:
df:56:58:6a:37:73:76:73:99:ce:5c:9a:97:ed:06:91:13:1b:
b2:0b:f4:05:59:f8:e8:34:34:3f:ed:0c:6a:d0:c0:28:1e:90:
32:5c:49:d6:fa:f0:3a:0e:1d:a6:0c:97:c7:f9:3b:6f:57:d4:
4d:92:e3:13:1a:ac:ee:c2:66:76:ef:05:0a:b0:7a:82:c8:89:
46:92:99:cc:65:07:c8:cc:3a:fd:21:dd:d1:dd:e9:2e:82:19:
9c:03:4b:64:c4:ed:66:ce:b4:5a:aa:84:0d:94:3f:90:c9:64:
af:7d:35:7d:d7:72:f4:59:89:4d:73:0e:d4:19:5f:30:c2:7a:
ba:ce:35:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm6iiSloIBA/suMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
YjI4ZjMzNzUtOTYwZS00ZWY3LWJiZDEtOTAyMjcyMjZlZjRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiie/o5ZujFWJn+2rpf8fMehK3sEpS39/mrqg
gsAkO7PBZqODhGegOzqXUnVGyxgCNyh2Fv0/RiI3jrvEvd8KInbeJkRej2LQLH6c
+qgxi+lmlm6Xco2TMkoT2YZLMTbKzHk7nR0Fze9grNKISMSXwsd5fRTF3Zb5w8do
nYMQQHnepHHSITY5B9YdZtCqdZhsNXs5D6EOOAvZ6zG4kDTUwmls+8XFIYWD6m4r
DEh1G3si/eFCs+9wp6cHhf9HyLLW5ppXW2SecVuJB9zFOq+Bq0FY3yZEi4khHGxK
sdkIJQm1Je864ERuApWBRrTvUD0XAWwlV8sAPz1pKwNaRUzqSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL8HxLRKY3BjSoFBpjmIqxkkOzk5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzNiNTQzOWYtNzMwZi0z
ZjI1LTg5ZWEtZDc2NGM0YmFiOTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBWeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAITsbp1rMeEQgyVZzURDDKclIGziSdAPO4wd0uaFSKz40kpcGb6ceAy/
fhNvFUa6llMrJK4gz8UNlYapmniiUty9WeFCR/TOKfltqoVmiaptTzZeDk4J42tb
+/W7jQRgd3IxrMjtqvvDK+ybMto28/5EsKM53IDMwlWGDwKAC99WWGo3c3Zzmc5c
mpftBpETG7IL9AVZ+Og0ND/tDGrQwCgekDJcSdb68DoOHaYMl8f5O29X1E2S4xMa
rO7CZnbvBQqweoLIiUaSmcxlB8jMOv0h3dHd6S6CGZwDS2TE7WbOtFqqhA2UP5DJ
ZK99NX3XcvRZiU1zDtQZXzDCerrONew=
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:40:53 2026 by rpki-client