
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8d717a4-4083-320b-8aa8-321b109f0559.roa
File: c8d717a4-4083-320b-8aa8-321b109f0559.roa (raw, json)
Hash identifier: MxyPk7te7FEU0/duAnTkQW6ZZEcYm0Arl4+KNNhmaTw=
Subject key identifier: 26:E4:60:59:E2:E3:52:75:D5:08:96:47:7D:11:39:E6:A4:A4:44:6F
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584E059BAA5ECBBEAA7B221746F0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8d717a4-4083-320b-8aa8-321b109f0559.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 7155
IP address blocks: 184.21.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9b:aa:5e:cb:be:aa:7b:22:17:46:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=fb01ee37-73b7-435b-ada5-4a9c23f80a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5f:69:8a:14:7c:c5:87:dd:dd:1e:67:67:81:
7b:a3:02:b9:2a:f1:c7:9e:4d:42:0a:1c:01:52:21:
b5:8c:01:e4:41:29:b2:f5:f5:41:96:5e:fa:21:6d:
59:de:94:43:20:e6:f6:7f:f6:20:cb:c3:a4:d8:25:
28:07:c6:75:55:3e:7b:64:11:31:ba:9e:68:54:9c:
92:b5:ed:81:08:52:15:3f:d9:a0:3e:a6:f9:c1:70:
86:ea:61:47:df:7a:34:66:3e:f5:d3:21:64:1d:b2:
96:1d:cc:c5:a1:d1:2d:3f:bc:c5:54:6c:0c:c6:5e:
14:b7:ec:47:bb:37:71:3a:22:4b:ff:b6:59:8b:72:
bd:10:b3:9f:76:09:92:49:85:d4:69:01:73:6e:ed:
6e:8d:57:48:97:55:4c:e8:93:89:ea:32:df:cb:21:
4e:6e:6c:53:74:94:37:fb:0e:1c:48:36:29:0c:81:
97:0a:fb:aa:c7:b6:69:54:9e:d5:e0:34:d8:92:16:
03:dd:98:fb:55:ca:a2:1c:a4:0a:f0:62:45:00:7b:
16:1e:14:36:e4:44:6f:c1:76:88:a2:63:cf:7a:82:
49:92:d6:5d:5e:62:ba:21:de:e7:20:fd:5b:d6:66:
d9:06:42:57:16:0a:ca:59:a0:eb:c5:4e:9e:f7:e4:
ac:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E4:60:59:E2:E3:52:75:D5:08:96:47:7D:11:39:E6:A4:A4:44:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8d717a4-4083-320b-8aa8-321b109f0559.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.21.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:64:d0:bf:8f:5e:d2:b2:dc:18:f0:05:e8:d1:07:b0:de:f2:
91:b6:ba:32:14:cd:f5:49:ff:45:93:83:10:9f:74:87:4a:e0:
32:d9:f0:97:f3:43:9f:99:a3:4f:91:4c:68:b3:77:ea:9c:be:
37:9d:87:d0:9d:48:2c:2a:b7:15:f2:41:d2:7d:c9:a4:7f:d1:
aa:c9:1d:56:ef:30:69:40:c2:4f:0c:c6:af:b9:03:f4:b1:e1:
21:93:ac:85:6f:9b:cb:93:ce:b5:20:2d:8f:49:ae:2c:5f:99:
78:13:d6:0b:48:2c:3c:92:90:52:fc:82:5a:60:a5:ab:3f:e9:
c8:61:ab:67:4b:53:02:85:95:b1:a7:82:aa:74:1b:82:b5:b9:
a2:4f:f7:b7:67:ce:b5:51:c0:36:c0:3e:83:b3:15:66:c8:6c:
01:c3:dc:6a:76:16:48:6a:da:12:bf:af:4e:5a:49:08:b3:0f:
94:fb:25:6c:34:7d:23:c3:93:55:c9:4c:d0:75:99:d7:a8:fc:
f9:62:48:3d:50:28:ec:23:ce:d9:81:e2:b2:66:94:33:0c:24:
bf:df:52:86:e0:39:50:fd:0f:cc:e8:d7:fe:bd:87:32:e7:c4:
eb:b2:ce:9c:f8:5d:e2:70:b8:c1:8f:34:88:2e:79:d3:f4:20:
fa:5e:99:13
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm6pey76qeyIXRvAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
ZmIwMWVlMzctNzNiNy00MzViLWFkYTUtNGE5YzIzZjgwYTQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu19pihR8xYfd3R5nZ4F7owK5KvHHnk1CChwB
UiG1jAHkQSmy9fVBll76IW1Z3pRDIOb2f/Ygy8Ok2CUoB8Z1VT57ZBExup5oVJyS
te2BCFIVP9mgPqb5wXCG6mFH33o0Zj710yFkHbKWHczFodEtP7zFVGwMxl4Ut+xH
uzdxOiJL/7ZZi3K9ELOfdgmSSYXUaQFzbu1ujVdIl1VM6JOJ6jLfyyFObmxTdJQ3
+w4cSDYpDIGXCvuqx7ZpVJ7V4DTYkhYD3Zj7VcqiHKQK8GJFAHsWHhQ25ERvwXaI
omPPeoJJktZdXmK6Id7nIP1b1mbZBkJXFgrKWaDrxU6e9+SsNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCbkYFni41J11QiWR30ROeakpERvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzhkNzE3YTQtNDA4My0z
MjBiLThhYTgtMzIxYjEwOWYwNTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBXwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALRk0L+PXtKy3BjwBejRB7De8pG2ujIUzfVJ/0WTgxCfdIdK4DLZ8Jfz
Q5+Zo0+RTGizd+qcvjedh9CdSCwqtxXyQdJ9yaR/0arJHVbvMGlAwk8Mxq+5A/Sx
4SGTrIVvm8uTzrUgLY9JrixfmXgT1gtILDySkFL8glpgpas/6chhq2dLUwKFlbGn
gqp0G4K1uaJP97dnzrVRwDbAPoOzFWbIbAHD3Gp2Fkhq2hK/r05aSQizD5T7JWw0
fSPDk1XJTNB1mdeo/PliSD1QKOwjztmB4rJmlDMMJL/fUobgOVD9D8zo1/69hzLn
xOuyzpz4XeJwuMGPNIguedP0IPpemRM=
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:22:26 2026 by rpki-client