
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/22c9aa67-d20c-310e-860d-1d2be861471c.roa
File: 22c9aa67-d20c-310e-860d-1d2be861471c.roa (raw, json)
Hash identifier: b69w0r3EpANIsjSD4R5oO8c5SGxeL4dC+iCx/lqG7Gs=
Subject key identifier: 27:16:92:DF:F4:13:77:F6:BC:56:9B:46:DA:B2:61:93:8D:40:6D:18
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F4983F80DAC92DC3CB4B0B200
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/22c9aa67-d20c-310e-860d-1d2be861471c.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 184.20.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 04 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:83:f8:0d:ac:92:dc:3c:b4:b0:b2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=7289e8af-9c9b-456a-a5a0-264a05864d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6a:61:55:6c:d6:09:2e:4e:b1:3d:ef:b8:9a:
02:9b:16:1c:c6:e8:0e:12:00:e3:2c:31:0c:08:4b:
44:5a:aa:50:2c:71:69:69:d5:7c:4c:fa:a7:b3:7a:
5e:ff:e1:c9:02:fe:71:8c:4f:b1:e5:ac:b2:e2:5d:
28:a1:d4:40:d9:e6:ac:4d:b7:8b:36:cd:52:e8:66:
e7:3e:7e:e6:87:f6:0e:33:bb:89:ec:c2:d7:81:04:
db:ae:c7:25:c3:74:c1:ab:cc:24:28:26:75:8a:21:
59:18:6c:1f:04:07:1e:a2:a5:71:35:a6:a9:8a:cb:
b0:06:1f:cc:a5:57:8e:31:e5:c4:3f:35:49:46:78:
5e:61:e9:15:d6:67:c0:ea:e0:da:4b:fe:60:56:3d:
6a:6c:8d:e1:e3:df:a4:80:eb:00:9b:94:69:69:26:
cf:38:54:e3:95:b5:4e:b1:98:a8:50:b6:c5:47:67:
47:83:88:30:b5:42:85:e9:93:3f:c1:37:fc:5c:76:
75:a8:8f:65:1b:d7:ff:4e:4b:f0:a4:52:f4:64:07:
72:30:b8:83:26:08:ce:4a:13:c4:ab:00:0e:26:86:
cc:d2:fb:af:9b:2f:05:e1:61:0c:19:5a:b5:c2:fc:
b6:53:19:6a:a9:49:08:48:d5:96:d1:bf:49:e8:c8:
b2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:16:92:DF:F4:13:77:F6:BC:56:9B:46:DA:B2:61:93:8D:40:6D:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/22c9aa67-d20c-310e-860d-1d2be861471c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.20.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:b0:de:7d:25:c8:91:ca:a4:fa:a8:6a:bf:21:5b:bd:88:d6:
d7:d8:24:2e:e2:55:b0:08:00:cf:8f:01:cd:4c:5a:c5:bb:e9:
cc:31:ba:11:71:1a:57:bb:cf:77:ea:25:cf:72:36:29:16:3b:
74:d8:6f:23:4c:c9:98:ab:5c:99:cd:a8:f8:1f:f5:d6:45:6d:
7e:d6:30:fe:2b:db:1b:b3:c9:b3:5b:99:cb:3c:4f:42:78:2c:
f4:eb:b0:3d:a1:6b:a9:67:a1:45:16:f3:22:c8:d1:f3:39:6e:
1a:e8:f3:de:b8:1f:4e:7e:ed:6e:5f:16:37:d1:a9:99:dc:09:
ee:a2:85:c0:56:9f:2c:90:7a:99:e0:dd:98:58:80:8e:f0:25:
9c:5d:50:aa:0e:57:c1:7e:d4:88:e5:8a:1e:f2:1e:ae:a2:92:
05:bf:66:89:75:3a:8a:5f:f5:b5:b5:c6:b2:f6:b7:56:b9:f2:
00:1d:88:a4:86:a8:47:69:cb:97:f3:29:27:49:96:63:6d:f0:
ea:11:8d:17:a8:8a:80:15:6d:6a:95:ef:ca:ae:b3:ae:8c:de:
1a:a0:15:b9:04:cf:0c:72:af:ae:8c:01:47:9d:6d:7a:5a:31:
cc:23:14:f3:ba:a4:2f:fc:2d:d2:ef:73:f4:ab:96:2b:1f:62:
3f:78:29:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:14:46 2026 by rpki-client