
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7d2fe078-9898-3b13-962d-540303df484c.roa
File: 7d2fe078-9898-3b13-962d-540303df484c.roa (raw, json)
Hash identifier: Q5QvpG407MmbmxRDW2Uz79kh6tGfq+OmdpCCJRXwoiw=
Subject key identifier: E4:7A:D0:7E:FF:53:C6:C6:EB:7F:77:04:6D:0E:E7:5B:0D:B1:23:FF
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E00BC4F52EEBC2FE589080
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7d2fe078-9898-3b13-962d-540303df484c.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 184.20.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:0b:c4:f5:2e:eb:c2:fe:58:90:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=7a8e7826-cbbe-45c7-a519-5d87f80558e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6e:65:98:b3:76:eb:33:72:4f:70:65:e1:31:
3e:d7:0d:8c:f3:e7:85:2f:79:ba:a0:a3:a5:ab:a3:
ef:82:2b:fa:9f:13:19:34:31:4f:f0:78:bc:fa:dd:
fd:15:41:6d:5a:e0:7f:ca:43:9a:3a:cc:ef:e1:47:
d3:5f:04:d4:5d:cc:93:b1:26:9a:ee:2b:cc:cb:5a:
41:8d:ed:d3:7c:3b:1c:99:8e:29:d6:7f:31:df:53:
fe:e9:52:76:8d:dc:b8:f0:b4:82:a8:8e:88:58:9a:
4f:81:15:94:70:fc:17:14:23:33:a2:fa:aa:60:74:
db:a6:59:fd:0f:b7:34:3d:f5:49:03:47:df:0f:ce:
ca:dc:7c:c1:67:c0:7d:a6:32:95:d8:95:e7:36:e0:
56:3f:e8:21:54:55:0a:eb:76:c9:e3:9e:f1:64:dd:
39:45:f7:dc:b6:51:f9:88:e8:bd:bb:21:10:c9:63:
95:f4:26:eb:e3:14:79:e5:62:06:b8:91:85:3f:01:
d6:f4:77:09:c0:e2:8e:17:d3:08:c8:65:dc:8b:11:
a4:b1:5a:87:68:1c:b2:5d:a8:ef:cd:be:ca:89:13:
8d:85:44:00:cb:db:03:74:3f:b0:95:8a:61:64:12:
68:99:a3:84:08:a0:66:1c:2d:95:09:8b:a3:51:ee:
a0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7A:D0:7E:FF:53:C6:C6:EB:7F:77:04:6D:0E:E7:5B:0D:B1:23:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7d2fe078-9898-3b13-962d-540303df484c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.20.213.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:30:fe:c4:fe:93:e4:1a:93:2f:ff:2b:cf:36:c5:4d:d6:ab:
e5:07:35:58:aa:b3:78:d7:03:b2:de:a7:ba:68:ef:16:4c:8a:
85:f6:8a:a3:1a:e2:b6:48:2b:db:96:44:f3:a5:88:05:18:b2:
a1:4c:60:44:0d:33:5a:ab:82:33:0f:43:e9:da:69:fb:46:26:
9d:d8:02:54:b5:2a:9b:3b:bc:ae:17:8c:85:4a:8e:32:aa:0a:
e9:62:3f:ac:03:66:ff:ba:44:42:7e:bd:3d:43:32:85:16:7f:
40:c6:df:99:82:6e:90:d2:5f:28:61:98:32:ca:0d:98:14:93:
3f:77:36:df:6d:ac:d4:75:0a:15:c8:ce:a1:78:4a:db:51:96:
15:ed:8b:48:9a:c9:69:2f:09:c9:d6:ac:f5:be:55:5f:6e:74:
6c:b3:11:b0:ac:a1:be:0b:4f:1a:bc:ae:e8:00:ec:5a:f1:83:
93:34:ec:53:5f:24:50:ff:14:7f:d8:99:db:ca:49:a5:76:bd:
9f:86:da:44:5f:c3:2a:2e:1b:ba:f9:01:d7:a3:a9:7d:71:c1:
87:7f:1c:c6:9c:db:37:0f:58:98:64:18:2e:4e:6c:26:d7:89:
ac:5f:d0:ec:dc:92:73:46:a4:fb:73:38:22:f4:9e:57:34:a6:
66:d2:b8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:05:57 2026 by rpki-client