
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/396acead-b429-301e-b7bb-7850cf3d7619.roa
File: 396acead-b429-301e-b7bb-7850cf3d7619.roa (raw, json)
Hash identifier: bD2XE2xaRGFxBk81SJne+bTqAee1VodhWuZN+LGERG8=
Subject key identifier: 25:82:76:B8:47:B1:D1:F4:52:3B:98:7F:65:30:89:A4:20:50:F2:94
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F497BB07DB812B08CB7535900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/396acead-b429-301e-b7bb-7850cf3d7619.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 184.20.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7b:b0:7d:b8:12:b0:8c:b7:53:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=69fbc0cd-92a3-4f1d-8406-e62033222c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f5:b7:e9:d2:df:d7:eb:c3:3e:b2:90:c8:1e:
79:a9:7d:c4:93:db:8c:cf:cb:ba:30:fc:21:95:33:
11:0f:6e:89:b1:c8:d4:4f:3a:39:53:97:58:68:95:
ac:b8:7e:73:5f:df:7f:f3:28:70:9d:32:40:f8:10:
b1:f8:a0:53:61:fc:77:18:21:58:ca:db:12:11:36:
30:3b:a5:9d:c1:0c:f3:5b:18:b6:a9:1f:cf:8e:3d:
56:74:3b:55:41:87:fd:80:42:17:48:2a:2f:ae:2d:
82:a9:e9:cd:ba:85:e3:88:8a:60:f6:1f:41:2c:9a:
66:18:85:83:b5:88:2a:71:95:6b:9e:59:8c:aa:01:
d6:64:a6:c8:3a:cc:9d:e2:ca:01:b0:de:de:39:38:
38:32:64:4a:cd:b1:32:26:e3:dc:76:a1:09:8f:f0:
0f:51:c8:78:52:86:60:07:de:03:91:46:e1:bd:5a:
3c:1d:33:77:21:46:d8:66:0a:e1:28:73:e3:4a:26:
ef:f5:a1:67:7f:6c:d1:d1:ff:52:8f:4c:02:24:9f:
81:39:f2:e1:5c:89:ac:cd:cc:35:8a:12:eb:c2:e0:
32:51:49:88:04:41:1b:25:2a:89:37:da:84:b7:83:
22:a3:3b:78:be:b9:3b:3c:14:0f:ef:4b:97:64:25:
60:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:82:76:B8:47:B1:D1:F4:52:3B:98:7F:65:30:89:A4:20:50:F2:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/396acead-b429-301e-b7bb-7850cf3d7619.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.20.36.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:d5:95:92:9f:bd:f7:4d:c7:6d:36:dc:f0:ed:04:0c:a6:35:
24:e3:85:99:75:84:2c:ec:53:4f:b6:0a:9e:67:17:d8:5e:81:
93:b6:ee:b9:e1:a0:6d:b5:23:21:63:29:b3:b1:f3:68:be:ed:
c6:1f:5a:c9:dc:fa:6b:39:3a:68:5b:d4:f4:50:a3:f7:40:2b:
a1:10:61:a0:dd:5c:11:1a:e5:e6:80:44:53:b7:bb:e9:88:b0:
56:72:89:e9:5f:4a:af:bc:4e:81:2d:59:9f:b7:ce:e5:73:f9:
3b:0f:b8:40:68:02:95:ac:7d:82:47:da:b5:cc:f5:41:08:ad:
4c:89:be:e4:cd:28:cb:91:82:20:5d:4f:00:3b:42:70:37:d4:
23:33:23:2a:2a:bd:c1:6d:e2:e7:3b:be:bc:25:7d:ec:51:8c:
34:ed:0f:2c:d5:4e:e8:cc:43:26:87:c0:84:76:6a:e1:2b:69:
a4:8c:68:cb:95:08:1e:21:94:56:77:ee:69:69:30:a6:fc:8c:
25:c4:70:11:a5:e1:b7:ee:95:a6:e9:a2:21:00:b7:47:1a:d6:
2b:f1:f3:55:14:ed:9e:39:a0:98:05:0d:da:70:2b:b7:fe:a6:
75:ec:71:04:ce:f2:60:dd:5d:15:ac:d9:d3:27:ca:2d:8f:10:
c5:27:02:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:52:10 2026 by rpki-client