
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/2140c9b1-330e-3461-bffa-e180266e388d.roa
File: 2140c9b1-330e-3461-bffa-e180266e388d.roa (raw, json)
Hash identifier: +LJBD1rUiBuW9aabWe/1HDjt+e/Z9JJoetj6o2zhiNc=
Subject key identifier: AA:63:8D:70:D4:D1:B2:DC:3C:56:A4:55:53:C7:93:F8:A8:3E:4A:3E
Certificate issuer: /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
Certificate serial: 010D0C9F4328584D65150AC90A74BB4846126A70
Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/2140c9b1-330e-3461-bffa-e180266e388d.roa
Signing time: Sat 04 Apr 2026 13:00:29 +0000
ROA not before: Sat 04 Apr 2026 13:00:29 +0000
ROA not after: Fri 03 Jul 2026 13:00:29 +0000
asID: 1273
IP address blocks: 206.28.184.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:65:15:0a:c9:0a:74:bb:48:46:12:6a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
Validity
Not Before: Apr 4 13:00:29 2026 GMT
Not After : Jul 3 13:00:29 2026 GMT
Subject: CN=0ef62464-6cc6-463f-9d8e-18ab9bb3d273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2d:1a:a8:aa:c1:b9:ab:99:9a:d3:b6:c9:69:
ef:a3:10:67:ca:0e:bd:fd:d7:99:0f:de:e2:af:05:
9e:56:e6:c3:cd:cd:5a:72:f9:41:76:2f:b0:9d:57:
6d:cc:32:b4:5a:a3:c4:b1:56:be:6b:f3:fe:9e:a5:
c3:f2:1e:c2:5a:2a:47:3e:4c:2b:96:7f:d4:7e:6e:
2d:cd:f8:f3:8a:d7:94:5b:fe:eb:3b:4b:16:bc:7c:
cd:56:09:c2:2b:54:7b:9d:c8:56:da:a0:ad:28:20:
aa:0e:66:3d:61:31:f2:f3:16:23:d6:6a:74:52:cc:
e4:bd:1d:81:72:c9:1b:48:c9:7f:19:55:d5:bf:61:
c2:3f:0c:60:e5:78:f5:9c:51:27:74:05:70:f5:dc:
46:ec:52:f0:38:52:ef:05:aa:b4:31:65:7e:98:6d:
bc:77:2a:22:d1:9d:48:26:9a:bc:39:56:8a:50:65:
74:55:3f:f9:74:44:ec:85:1a:14:1e:c6:e4:e8:10:
39:64:c8:34:d2:95:42:9f:cd:a2:35:34:ac:f0:69:
44:3a:37:e5:72:39:80:a1:a5:82:c2:4b:be:fb:0f:
e0:8a:26:64:55:0e:b4:83:b1:c5:a2:96:5b:26:6f:
61:44:dd:61:33:74:3c:24:d2:ed:08:e2:5e:92:3a:
76:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:63:8D:70:D4:D1:B2:DC:3C:56:A4:55:53:C7:93:F8:A8:3E:4A:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/2140c9b1-330e-3461-bffa-e180266e388d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl
X509v3 Authority Key Identifier:
keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
sbgp-ipAddrBlock: critical
IPv4:
206.28.184.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:e4:a3:b9:c2:a5:59:19:d6:9e:12:3e:fc:65:a4:32:c8:22:
ad:c6:1d:9d:8b:31:c4:00:07:b2:bc:1a:f3:15:2a:81:48:18:
96:7c:4e:3d:c3:14:57:72:e4:92:b3:13:95:e7:42:03:ac:2c:
1a:d1:78:df:8a:12:ef:ed:e5:7c:65:01:00:f4:02:a9:c4:ca:
9a:fc:5e:79:b0:80:b9:bb:68:2f:b5:4f:44:21:e5:be:b5:be:
47:53:9d:3a:c6:33:6f:fc:ac:d3:eb:b9:9d:95:a4:73:09:23:
97:6f:e1:0d:98:78:a1:5f:2d:1e:d3:c0:28:6e:fd:f0:74:2c:
62:d1:83:6a:eb:95:b9:7c:c1:47:15:8b:dd:19:a0:50:ad:0d:
ef:16:28:93:eb:04:66:95:ba:6e:31:aa:4d:46:1c:6c:f8:2f:
71:43:4e:7c:2f:cb:79:cd:61:13:a0:26:cd:11:00:b4:98:38:
09:95:5e:41:c9:43:f0:03:60:ea:3b:9d:54:43:0c:15:ae:61:
6d:ad:2c:30:ba:c1:d7:b3:56:1a:7e:7c:f8:9b:db:48:00:08:
87:c9:39:76:bb:cd:07:66:44:d7:d6:09:0b:70:74:3b:f7:14:
03:0d:bd:01:41:c5:6a:fb:12:9b:6d:e4:34:35:ce:0c:b7:19:
2c:f5:77:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFQrJCnS7SEYSanAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWMyZDM4NzYtMjllNi00MmY1LWI3NmYtMjNiYjQ4YmE4
NTgyMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk
MGVmNjI0NjQtNmNjNi00NjNmLTlkOGUtMThhYjliYjNkMjczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6C0aqKrBuauZmtO2yWnvoxBnyg69/deZD97i
rwWeVubDzc1acvlBdi+wnVdtzDK0WqPEsVa+a/P+nqXD8h7CWipHPkwrln/Ufm4t
zfjziteUW/7rO0sWvHzNVgnCK1R7nchW2qCtKCCqDmY9YTHy8xYj1mp0UszkvR2B
cskbSMl/GVXVv2HCPwxg5Xj1nFEndAVw9dxG7FLwOFLvBaq0MWV+mG28dyoi0Z1I
Jpq8OVaKUGV0VT/5dETshRoUHsbk6BA5ZMg00pVCn82iNTSs8GlEOjflcjmAoaWC
wku++w/giiZkVQ60g7HFopZbJm9hRN1hM3Q8JNLtCOJekjp25wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKpjjXDU0bLcPFakVVPHk/ioPko+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzJk
Mzg3Ni0yOWU2LTQyZjUtYjc2Zi0yM2JiNDhiYTg1ODIvMjE0MGM5YjEtMzMwZS0z
NDYxLWJmZmEtZTE4MDI2NmUzODhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWMyZDM4NzYtMjllNi00MmY1LWI3
NmYtMjNiYjQ4YmE4NTgyL2FjMmQzODc2LTI5ZTYtNDJmNS1iNzZmLTIzYmI0OGJh
ODU4Mi5jcmwwHwYDVR0jBBgwFoAUDEkkReUZkCywPx/BY7zBtY7YpJ4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzJkMzg3Ni0yOWU2LTQyZjUtYjc2Zi0yM2Ji
NDhiYTg1ODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzhy4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHDko7nCpVkZ1p4SPvxlpDLIIq3GHZ2LMcQAB7K8GvMVKoFIGJZ8Tj3D
FFdy5JKzE5XnQgOsLBrReN+KEu/t5XxlAQD0AqnEypr8XnmwgLm7aC+1T0Qh5b61
vkdTnTrGM2/8rNPruZ2VpHMJI5dv4Q2YeKFfLR7TwChu/fB0LGLRg2rrlbl8wUcV
i90ZoFCtDe8WKJPrBGaVum4xqk1GHGz4L3FDTnwvy3nNYROgJs0RALSYOAmVXkHJ
Q/ADYOo7nVRDDBWuYW2tLDC6wdezVhp+fPib20gACIfJOXa7zQdmRNfWCQtwdDv3
FAMNvQFBxWr7Eptt5DQ1zgy3GSz1d9A=
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:23:48 2026 by rpki-client