
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/35f798bd-53c7-3c15-a100-166a588e3897.roa
File: 35f798bd-53c7-3c15-a100-166a588e3897.roa (raw, json)
Hash identifier: Yv8ZQZXuH9jI/yCMahIqjR5E96Ci7Y4rYTMcs7g48S4=
Subject key identifier: 2B:56:8F:62:F8:DC:EC:05:F6:C7:C7:EE:D0:8A:A6:89:3C:A6:A8:FA
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E0BBE4A140DE27CE077C80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/35f798bd-53c7-3c15-a100-166a588e3897.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 184.20.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:bb:e4:a1:40:de:27:ce:07:7c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=4d0e641e-fe6a-479d-8e6f-8171634ae42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:74:01:68:30:8f:ff:bd:ad:50:82:86:3f:97:
9e:d8:2f:a7:46:4c:12:93:5f:54:a2:6a:8e:32:ca:
23:53:3d:27:06:92:c6:01:00:47:f6:05:d9:b5:7d:
a2:71:46:33:38:5b:48:2a:31:c1:2a:ec:a3:e8:e4:
83:b1:d9:14:52:c3:74:37:a5:bb:81:64:9c:9d:b1:
fd:94:bd:2f:eb:10:df:18:b2:bf:7b:e0:4c:ea:ad:
2c:2b:19:8a:b4:b1:55:e4:4f:eb:64:9c:00:72:4c:
90:b2:66:02:20:eb:61:b4:93:c5:b7:31:58:aa:0e:
99:2d:6f:5c:ee:b0:51:76:01:fc:f6:39:28:3d:57:
c6:a5:db:8b:ef:97:8c:7c:c5:12:d8:cd:e9:a5:0b:
cc:c2:33:39:ec:1d:72:80:f9:82:73:a5:f8:15:f9:
1b:91:98:a7:9f:34:40:34:f8:6a:81:d8:17:5a:e6:
7f:24:41:8c:c2:d0:7a:24:a9:c3:95:43:8c:14:4b:
20:f2:4e:51:b8:1e:c3:5d:8d:76:ca:1e:7b:c4:d4:
01:ed:cc:d8:29:31:d9:22:14:c0:04:d3:34:41:8b:
3d:33:52:65:76:97:c1:48:29:ab:2f:c6:ac:a2:ab:
92:52:d5:b8:af:a0:c3:b9:58:19:23:3b:73:8e:1c:
65:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:56:8F:62:F8:DC:EC:05:F6:C7:C7:EE:D0:8A:A6:89:3C:A6:A8:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/35f798bd-53c7-3c15-a100-166a588e3897.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.20.12.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cd:5b:63:dd:09:fc:de:f2:3c:83:9a:72:fd:69:ec:06:73:06:
8f:f1:83:2c:d8:8a:5d:db:ef:b6:d1:8b:1a:13:93:1a:84:40:
08:fd:86:73:7b:92:81:41:5e:b6:07:cd:3d:da:d9:18:ea:3d:
95:e0:5e:bc:b3:bf:3a:aa:ef:65:77:73:88:33:f4:90:1d:9a:
10:ee:bd:b6:ab:27:f3:21:70:fe:a6:f3:0e:8a:88:eb:91:03:
fc:9a:53:5e:3f:8d:e7:84:ed:81:ac:5b:17:8f:62:a9:a6:c9:
26:b0:7f:40:c9:aa:57:44:27:e1:78:13:04:f0:4a:f5:1a:8d:
43:3b:72:af:15:0b:45:e2:c0:58:39:6d:54:5d:07:7c:64:ec:
07:d0:b6:de:59:c3:10:96:74:1f:31:43:03:5f:4b:9f:da:77:
2c:85:10:b1:4d:b1:9d:94:ba:cb:59:22:ec:1d:0a:4d:b8:3a:
60:7b:0e:d7:eb:4f:1d:ff:17:19:bc:88:ac:f3:18:cb:32:9f:
11:e5:24:7e:7a:5b:a5:8f:4a:c2:36:fc:98:bc:a4:76:91:63:
10:46:43:ba:4a:4a:f8:90:86:d7:bc:76:e8:13:15:92:8c:97:
6e:f0:3c:28:7c:aa:a4:42:f5:c0:e8:fc:bd:8d:3f:a7:0f:c2:
95:fb:0b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:56:14 2026 by rpki-client