
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/10c56b3d-2999-3ff6-9aa4-590bdd0c2621.roa
File: 10c56b3d-2999-3ff6-9aa4-590bdd0c2621.roa (raw, json)
Hash identifier: Xalg6wwWJYPSyMiHlaY7DAC2NrdJVhwYwWmpRwpc0hM=
Subject key identifier: 2D:F7:85:16:32:5A:98:F3:8C:68:1A:15:6E:A1:51:F6:48:D0:1C:6B
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E008CE9623A5E934515D00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/10c56b3d-2999-3ff6-9aa4-590bdd0c2621.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 184.20.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:08:ce:96:23:a5:e9:34:51:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=89357e4c-2bb6-4f33-beac-e9d8556a2328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:97:53:90:1c:3f:6e:e8:b8:1a:e9:d6:5b:09:
a0:f3:e8:fd:1c:31:de:8d:cc:92:d8:b2:34:60:89:
20:84:46:d2:76:91:f0:ee:94:d8:e0:cc:97:9e:1d:
8b:38:82:e2:d9:85:3e:cd:be:ba:1a:f3:f0:f5:11:
9b:3d:4c:ad:87:3a:58:cd:e2:e6:01:ab:63:f5:47:
2c:4c:4d:4f:90:82:d2:fe:cb:ff:65:30:8e:1c:df:
2c:36:a7:94:d1:01:b5:4d:05:4b:f1:7f:b7:ec:de:
a3:d7:18:c8:ca:b5:c0:4a:90:2c:80:6f:52:0e:37:
cd:ac:da:92:01:13:73:98:6c:cd:ca:30:56:dc:b2:
03:39:48:e0:84:59:19:b7:9e:72:0b:e5:82:9c:47:
8d:77:a6:12:1f:a7:13:9e:84:94:42:ce:bb:fc:05:
6a:e8:c1:6b:7d:e9:95:20:f1:48:61:e6:77:f8:70:
27:30:52:0d:b3:af:3f:c9:7e:af:ce:ee:4b:f0:e6:
f8:8d:34:f6:19:21:e3:8c:e8:bf:dd:70:32:b5:a3:
47:33:b2:cf:22:10:2f:3c:1d:48:b4:b7:2f:6c:58:
cd:83:14:a4:14:7f:65:9f:00:e3:50:4a:c0:0a:65:
fb:05:6f:cd:4c:67:3b:9a:34:b0:fb:4b:71:97:dd:
30:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F7:85:16:32:5A:98:F3:8C:68:1A:15:6E:A1:51:F6:48:D0:1C:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/10c56b3d-2999-3ff6-9aa4-590bdd0c2621.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.20.74.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:98:84:98:a2:5c:9c:fb:7c:c9:e5:8f:87:d4:03:42:b7:65:
8d:ee:1d:c8:ec:60:e8:b9:44:72:74:d9:ea:77:57:c5:40:86:
6b:20:db:63:27:51:65:b7:9f:cb:c0:48:ca:80:ce:83:3b:0e:
be:68:f1:e9:e1:5d:17:36:21:28:82:b4:56:52:d2:a3:f3:11:
2c:35:c3:66:4e:0f:e5:72:af:7f:21:c8:29:60:7d:0f:9a:75:
b7:16:0a:7e:55:e5:99:9d:fb:1c:e2:6e:75:0d:51:d6:ab:1a:
5e:01:82:27:9e:4b:d9:d1:2b:1d:5a:7c:7c:f0:99:81:83:2c:
30:10:4f:19:a8:48:2e:ba:35:6c:22:f6:28:f3:61:cd:84:0e:
55:fe:88:8b:e0:40:d2:94:43:7e:8f:94:0f:25:98:08:f8:46:
f9:d7:aa:71:d1:a6:41:5c:10:73:ad:20:d7:07:5e:20:86:c1:
74:ed:1b:9e:33:31:f1:c2:61:3d:57:cc:2b:32:b5:14:ef:cd:
0d:c9:99:68:4a:fd:5c:74:c2:da:9a:fc:fc:d1:eb:bc:c9:ee:
89:12:1c:77:1a:d7:dd:b0:64:30:bc:6f:e0:5b:6f:42:b0:25:
20:17:e9:ed:3e:92:f9:c9:0c:5a:f5:31:16:cf:8d:0e:03:8e:
5c:e9:dd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:36:17 2026 by rpki-client