
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/28263ee0-b522-3c51-b4b3-62545c7a869c.roa
File: 28263ee0-b522-3c51-b4b3-62545c7a869c.roa (raw, json)
Hash identifier: hYXB9enY+dkDXz59EaBSIa83YUrojkHy6Y4+AdbEEBs=
Subject key identifier: 99:65:46:11:79:16:1B:E1:50:88:06:E3:7C:59:51:51:0C:12:31:09
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E0C0519CEDCD9FCDEAC180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/28263ee0-b522-3c51-b4b3-62545c7a869c.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 184.20.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:c0:51:9c:ed:cd:9f:cd:ea:c1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=64871887-9ec1-4adb-adfe-a383d490c73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a3:e7:5e:1e:34:36:8b:c2:50:6e:ec:1b:ab:
73:37:a9:ce:ac:24:21:ef:c3:91:3d:4d:aa:9e:78:
af:8e:d7:5a:0e:0e:6e:ab:e2:35:8f:91:73:92:39:
c4:fc:f0:d4:98:e5:e4:60:07:bb:9a:f5:35:15:66:
23:dd:9c:e4:19:52:9a:4d:09:6b:83:0e:aa:25:8c:
7e:0b:00:1f:14:6d:83:a9:8c:bf:98:24:6c:74:82:
c4:df:52:e4:2b:39:2d:33:ba:37:28:ce:2e:19:b6:
9e:29:94:54:b8:90:8b:ef:40:76:66:2a:cf:d9:ef:
05:61:d6:a3:fc:f7:ed:b6:d6:c5:da:ef:6f:f3:d4:
3e:98:85:6d:43:0a:9b:52:0b:64:12:ae:c6:0b:19:
68:78:23:cf:a7:c5:6e:0d:f0:27:88:43:1e:8c:21:
d2:d5:d6:b8:f5:a9:4f:dc:2c:f5:ba:2f:17:df:0b:
8e:50:6e:f7:88:a2:94:9c:1e:c4:eb:f2:b2:04:55:
c7:f6:f4:3e:e6:d7:0d:f0:88:5b:88:cb:65:9c:47:
95:90:8b:9f:e2:68:7f:3d:3f:f7:de:a2:c8:3b:c3:
1a:0c:2f:20:a7:fe:78:bc:33:d8:8d:51:6f:28:6e:
86:15:7e:9a:8c:12:52:e8:5b:7d:b8:0e:58:4f:b0:
40:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:65:46:11:79:16:1B:E1:50:88:06:E3:7C:59:51:51:0C:12:31:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/28263ee0-b522-3c51-b4b3-62545c7a869c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.20.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:39:bf:79:e1:60:d7:73:74:37:09:67:b8:f3:c5:62:21:41:
1f:a3:ec:02:38:20:af:35:2c:3e:e9:23:83:a9:f8:4a:20:94:
81:4a:b9:94:04:e2:f5:83:30:28:6f:85:15:e9:2f:56:97:e1:
92:2d:28:75:a7:eb:f0:83:07:79:38:a2:20:2e:ef:b4:79:72:
fe:5a:19:8a:71:05:2c:a6:2c:bb:41:39:2c:94:08:d7:0e:74:
83:ed:4d:e6:03:ef:2e:21:a9:75:8d:a7:aa:22:06:6b:bf:f9:
e6:a7:21:71:54:85:47:62:b3:a2:95:e7:2c:63:f9:ad:69:56:
1d:96:99:fc:47:b3:99:f1:f7:04:e7:70:0c:db:ae:f3:60:0f:
0c:19:ae:b9:8e:f7:f8:27:ad:ff:32:c0:cc:e9:69:75:88:01:
03:12:6f:cc:03:24:99:80:ff:d1:6d:42:ce:9f:9c:c4:ce:cd:
db:3f:3c:e9:84:cd:6d:4d:4b:1d:91:ab:15:3e:8f:db:a4:0d:
4a:c6:ce:19:21:4d:08:9c:1b:73:a8:36:74:d6:49:e3:d0:36:
8b:61:18:25:c6:e0:c4:42:58:b2:e4:c0:44:c9:8d:d8:43:c1:
14:6b:78:9e:71:d4:e7:08:dc:ea:7b:53:0e:ff:2e:fa:c8:91:
3a:f9:23:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:11:36 2026 by rpki-client