
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0724c8db-38c3-3da7-ab4b-e1c62f775758.roa
File: 0724c8db-38c3-3da7-ab4b-e1c62f775758.roa (raw, json)
Hash identifier: jtkQH+/mWm+Elc9+e3elI/9KaYiahLDYXiA9M8frf3s=
Subject key identifier: 56:AF:91:96:AA:19:54:4C:88:73:C2:4C:2A:CD:15:F3:27:13:B4:B3
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E00C3166C89A7472AD7F80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0724c8db-38c3-3da7-ab4b-e1c62f775758.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 184.20.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:0c:31:66:c8:9a:74:72:ad:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=a31680e7-23a9-4aee-a6ce-4a0765221a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a5:5f:d5:b9:80:2f:e8:27:8a:9e:fc:c0:c1:
d7:34:53:ca:73:9f:d8:d3:f0:1c:44:d4:28:b7:1e:
ac:3a:ba:fc:16:6b:62:a5:2d:1c:1c:36:44:8f:41:
77:38:d7:db:02:fa:cf:61:cc:a6:f2:f7:79:39:6d:
51:41:2f:0d:06:46:42:0b:93:41:85:28:f1:18:bc:
f7:2b:2a:07:7d:4c:a9:df:10:91:cf:35:d4:21:6a:
94:9e:cc:80:4f:2a:32:3c:30:19:52:8c:7d:1f:44:
91:9a:59:1c:e0:65:17:10:05:8b:b7:c8:18:ce:86:
7a:3a:50:20:0f:60:d0:0c:3f:96:75:a4:73:ba:50:
65:3a:24:58:7f:81:38:ba:67:46:e5:32:b0:66:cf:
17:9b:c4:a6:e0:eb:87:fb:38:ad:16:10:e3:41:29:
ce:5c:5b:ba:30:12:07:4c:87:f0:b6:81:45:52:6a:
38:ac:6b:34:05:b2:98:c9:92:f3:61:84:a2:a7:49:
d8:61:b8:37:4f:8c:ef:0b:00:0c:2f:76:f9:08:d1:
e0:28:22:58:e8:75:0a:cb:77:d9:ed:b4:6e:00:de:
c7:0b:da:6c:4d:59:c8:51:6f:1f:6c:88:32:a9:08:
78:86:2f:f0:a8:d0:42:35:83:f3:cc:a3:93:97:94:
73:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AF:91:96:AA:19:54:4C:88:73:C2:4C:2A:CD:15:F3:27:13:B4:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0724c8db-38c3-3da7-ab4b-e1c62f775758.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.20.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:93:da:ac:51:ec:4c:2a:13:0d:d7:f2:0d:4e:8b:bb:81:d6:
3c:75:c5:a1:40:1f:bb:3e:ad:de:d4:ce:f5:70:90:2e:7c:2e:
3a:bd:5f:7b:64:50:bb:d3:98:d9:04:d2:8c:14:de:e3:e7:86:
1c:00:55:9b:88:06:c1:1d:57:0b:ae:6d:3e:a4:2d:89:1d:fd:
6b:a9:7c:9f:82:31:6a:fd:9a:b9:a9:b6:51:1b:a4:61:d3:58:
35:45:e0:84:9d:ce:9b:ab:27:89:54:ef:ec:24:ad:ad:97:e5:
83:38:e9:7d:de:7e:40:50:56:e7:88:cd:84:56:05:c1:a1:19:
6a:72:d6:2a:16:0f:6b:9a:f2:fc:d1:cd:59:11:d1:86:94:7c:
0b:c7:2f:8d:d4:56:06:88:f4:e6:57:63:60:02:a9:f6:57:1d:
c8:b3:cf:ad:9c:74:41:75:a6:37:ec:6b:08:45:7d:b6:b2:6a:
97:be:75:94:42:7c:85:6f:c3:40:8c:cc:29:c4:14:af:f9:23:
d9:45:f4:29:85:1e:a0:ba:62:aa:3a:51:ac:f9:1d:20:8c:86:
dd:c5:9f:92:97:f0:58:7c:47:0f:67:83:81:88:f1:f6:69:7d:
8f:27:37:63:e1:b8:41:93:d2:bd:f9:25:97:97:98:fd:47:cf:
a9:3e:63:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:22:15 2026 by rpki-client