
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c517db0-d348-3245-9e98-70be00d950c7.roa
File: 3c517db0-d348-3245-9e98-70be00d950c7.roa (raw, json)
Hash identifier: SGn3v0+mmfXUSpcRTIpOtl5iBUWif1n72uC7uMJU9ms=
Subject key identifier: 6D:35:8A:FC:71:32:4D:BE:75:77:00:4D:27:87:26:D4:F8:5A:CB:F4
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F4983F9B96063B96CD59CA480
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c517db0-d348-3245-9e98-70be00d950c7.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 184.20.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 29 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:83:f9:b9:60:63:b9:6c:d5:9c:a4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=bb78cfbd-9d40-4d5b-ad0b-b6746d98baba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:92:55:da:7f:7d:f6:2a:61:ae:a3:14:17:1d:
57:5d:46:fe:45:d1:66:25:10:47:4a:33:62:25:e1:
f1:4b:03:a8:ab:04:ea:4f:36:70:7e:19:67:fb:1d:
d6:63:ea:f1:01:6a:c9:37:32:38:3f:80:a8:c8:f1:
75:dd:d4:52:ef:d9:4d:94:17:d0:37:21:fa:36:b5:
94:e1:48:39:9a:31:07:7f:54:49:b0:35:0f:09:04:
9b:af:01:6a:20:f1:7b:12:58:93:1e:6b:af:74:08:
b1:e3:e3:d3:a6:8e:e6:70:76:92:e3:f2:bb:85:a2:
ac:5b:c7:c9:28:15:ec:7a:2a:b6:ca:e6:16:ce:26:
5b:98:cc:6c:2d:e4:e9:70:6c:f6:8d:38:57:fb:ea:
c2:4b:c7:ab:05:ae:66:5f:80:af:7a:fb:14:a2:2d:
04:31:b4:10:9d:fc:43:be:7a:b7:03:c9:4c:60:50:
4a:02:54:39:55:68:6c:92:6f:f0:a6:b2:87:f1:70:
53:4b:7b:0a:39:ee:a1:f4:a3:98:38:e2:f1:fb:7e:
6a:e3:45:a5:65:2d:08:00:d5:54:93:37:9e:6b:2d:
b6:7a:94:20:00:13:b7:88:42:a9:45:90:73:0e:0e:
f3:cf:b9:f8:4f:35:d4:f0:63:ab:ac:d4:67:f1:f6:
c3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:35:8A:FC:71:32:4D:BE:75:77:00:4D:27:87:26:D4:F8:5A:CB:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c517db0-d348-3245-9e98-70be00d950c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.20.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d6:cc:4d:f1:8f:93:79:dc:da:38:65:11:e2:db:ff:d3:68:70:
9f:f8:7f:28:62:bf:26:9a:12:96:b0:12:40:0c:06:11:66:df:
2a:a7:98:6e:7a:df:38:a7:97:2d:4f:74:b8:0a:6e:27:28:d3:
54:5a:90:66:7e:40:a3:ee:5a:7c:ee:be:57:b3:e4:f9:a9:67:
c2:71:c1:29:40:c2:98:90:3d:ef:09:be:87:47:11:d9:31:89:
da:5e:04:e7:23:45:ab:0b:64:5c:70:2a:ca:15:60:7b:94:40:
bc:42:e8:8e:b9:b0:ed:cb:84:e9:2e:35:4d:3a:f1:77:f6:1a:
ba:a5:d3:08:e8:6b:68:74:0f:57:aa:01:79:36:7a:8f:e2:65:
eb:a1:f3:39:5a:87:1f:3b:6a:f4:17:f1:8b:dc:9a:00:8d:80:
39:da:a2:c1:90:d7:48:c7:05:4d:cc:f9:e7:e9:c2:a6:e2:cf:
b2:ec:83:9c:6f:be:96:db:6d:22:cd:72:c2:33:77:a1:40:82:
33:5b:3c:72:25:c0:9a:0b:0a:6e:95:78:c2:c8:4d:6b:04:96:
73:fa:d1:05:09:5a:d2:c1:d0:27:57:c1:ed:c6:cd:6d:0f:90:
52:47:27:78:5e:8f:41:09:25:10:58:5c:e1:02:4d:7b:0d:08:
93:51:70:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:01:18 2026 by rpki-client