
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/36410574-2634-3e8d-bcdb-0f14c6907c72.roa
File: 36410574-2634-3e8d-bcdb-0f14c6907c72.roa (raw, json)
Hash identifier: cqnWiqPontGCOwtPq+DBZi29NgNYYRd/7eh3gFmb+C4=
Subject key identifier: FB:0E:9B:AC:8F:0C:F7:78:3B:DC:6A:FF:95:77:75:BD:B2:3A:B5:36
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F497BB374A7F7291A6D8DB440
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/36410574-2634-3e8d-bcdb-0f14c6907c72.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 184.20.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 07 Oct 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7b:b3:74:a7:f7:29:1a:6d:8d:b4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=8b32435e-0541-4487-9d58-ca10958445c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b5:3e:96:3c:a9:bb:87:10:1e:02:bb:ef:c9:
f3:9f:44:47:73:fb:8a:02:0f:35:c0:46:26:9e:f4:
b8:92:79:13:94:0c:e0:0c:29:b0:0a:b6:db:53:1b:
09:a2:71:99:0b:5f:f2:ce:ee:4d:5f:b3:07:29:74:
a8:b5:35:8c:59:2a:35:46:99:ca:d3:55:41:cd:2c:
18:ae:3f:34:23:7c:67:60:9c:22:7b:d1:a4:dd:40:
43:50:ab:ab:17:59:45:d5:bf:6f:ce:33:09:52:ba:
ef:70:d8:8a:25:ac:ef:5f:bf:7f:79:45:18:5b:8f:
d6:a6:82:7f:a6:1f:2e:57:c2:e5:61:fe:a4:64:e6:
4b:56:9b:b7:62:94:9f:10:18:5e:78:80:fb:7d:de:
8f:6a:2d:ce:50:dc:44:7c:5a:fc:fb:5a:b8:e7:33:
47:bd:29:70:b8:c7:65:f3:f9:09:d0:4b:09:f2:ec:
5a:71:e9:f2:41:53:43:70:b5:4b:25:e0:27:8a:ab:
ca:6f:19:91:03:c5:f9:04:2e:8f:06:30:c2:84:f6:
1e:95:3d:49:a5:60:1e:0d:fc:b4:fe:b2:c1:9d:eb:
0c:af:45:4e:07:9a:96:d0:de:48:c8:10:11:83:db:
fd:62:da:de:02:c7:e4:7d:57:13:ce:86:4e:b8:aa:
5c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0E:9B:AC:8F:0C:F7:78:3B:DC:6A:FF:95:77:75:BD:B2:3A:B5:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/36410574-2634-3e8d-bcdb-0f14c6907c72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.20.59.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:1c:e9:8f:bb:ce:2d:b8:28:26:35:a6:15:a6:86:8f:69:5e:
c9:13:02:7b:b7:b8:41:de:ec:e2:46:77:d4:e9:a9:6a:59:4d:
32:54:d0:4b:ba:2b:15:24:c9:ad:3e:ad:f4:4c:a2:7b:23:cf:
8a:fd:b9:b5:85:1b:73:06:19:9b:24:5e:27:0f:9d:b3:79:51:
40:9b:1b:52:e0:82:a4:6d:ce:f6:91:57:b2:60:8a:28:d4:2c:
79:b1:a1:e2:1f:60:8e:c2:b9:9c:d7:1b:69:22:65:d7:90:2b:
7b:3f:89:fe:ee:29:14:6f:51:04:59:9d:20:8e:9c:b4:62:62:
30:0f:08:a9:ae:8b:df:a6:a2:6b:e2:38:e5:62:76:ca:e8:25:
3b:70:31:af:08:87:3d:05:17:78:26:d1:7a:cd:97:b9:6a:ff:
83:c4:8a:f3:6c:4a:5a:cd:71:86:86:9b:ed:da:8c:37:35:cd:
5f:d1:88:87:5c:e1:ef:a7:a3:7c:bd:6e:8c:9c:b9:6a:69:c0:
ba:d2:7a:cf:6b:5c:a8:a1:75:11:7f:8b:da:ed:80:8e:c1:7d:
23:fd:8c:63:b7:d0:e7:f1:8a:02:6a:e6:cf:aa:6f:78:22:5d:
31:05:dd:dc:96:3a:3d:c1:e5:ce:e8:99:00:79:e9:16:ee:2c:
db:73:44:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:19:28 2026 by rpki-client