
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2ff955b-9384-3451-886e-c7bb520594d8.roa
File: a2ff955b-9384-3451-886e-c7bb520594d8.roa (raw, json)
Hash identifier: iBQxoNQJ5avV+rOxUV/zSjIgshLvp0fWUjjsVE2Lqiw=
Subject key identifier: 53:66:D7:54:7A:B8:96:D3:C7:1E:93:96:D0:08:D6:C4:5B:4C:2F:EF
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F497BD8895C7C749635D24150
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2ff955b-9384-3451-886e-c7bb520594d8.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 184.62.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7b:d8:89:5c:7c:74:96:35:d2:41:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=96a5af5a-95ca-4ef9-9906-014e778c990a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ee:5f:20:31:ca:8d:9c:c4:87:8c:be:95:25:
49:23:53:32:0b:a5:1a:44:b2:4e:f0:bd:9e:ec:c1:
35:9f:d6:64:bf:f2:23:f1:fe:1f:f8:3d:1b:ee:b3:
e1:67:ce:99:82:9f:10:98:2e:5d:91:04:8b:64:cb:
9e:83:59:0f:c0:0d:96:54:a3:a6:f5:b0:20:9a:41:
19:ad:23:d8:e1:8d:39:5c:ee:7e:ba:ca:e1:f8:d9:
76:dd:11:0a:5a:32:f1:20:5f:b5:5a:05:3f:b7:44:
6c:6a:6a:a2:c1:1f:4e:c1:8e:3b:25:f3:f6:f0:58:
e3:7c:73:d7:93:1f:6d:f8:97:18:d1:34:4a:49:0b:
e7:be:1a:b0:eb:96:21:6d:32:9d:52:c8:6e:53:30:
ed:14:85:f6:d8:31:49:c4:31:c1:44:bb:2a:df:2c:
db:da:ee:a3:02:51:20:c6:12:68:75:aa:e2:4d:d7:
b3:46:b7:4c:55:b4:99:e0:9e:9c:01:6d:fe:13:db:
3f:46:74:a9:ea:93:8b:7f:fe:84:7b:91:e9:e9:6f:
1c:4f:c9:27:87:50:a7:0a:17:12:33:4a:9e:6a:e5:
1a:2b:2d:60:df:ed:9c:80:79:9d:89:a8:90:7b:58:
57:f6:2a:36:df:23:90:4e:28:00:e4:88:a0:f7:b3:
b7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:66:D7:54:7A:B8:96:D3:C7:1E:93:96:D0:08:D6:C4:5B:4C:2F:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2ff955b-9384-3451-886e-c7bb520594d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.62.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:6e:1a:0d:af:78:fe:ab:4d:fb:3c:50:aa:4b:d5:1f:63:a9:
2b:24:66:26:b4:ed:74:d4:50:08:6a:85:e5:25:1a:bf:82:13:
19:69:e7:37:b7:13:eb:58:80:6d:5f:41:4e:e7:ec:55:91:f7:
06:11:ac:65:24:b4:1d:47:e0:81:02:3b:2b:79:4c:06:ea:47:
09:43:39:5e:94:07:4b:cd:80:ea:d6:69:16:69:c9:54:13:e6:
cf:41:9b:f9:8f:fa:2f:ae:c2:9d:75:5e:d0:a3:80:87:47:48:
ff:8a:89:b0:9e:d6:29:15:cb:28:3b:c3:54:a9:0e:c6:0e:52:
8b:e5:40:65:45:d3:ba:2f:50:fe:18:bb:59:ca:2a:b4:4f:c3:
21:ea:19:1f:43:2e:f2:22:0d:8f:69:8a:cd:76:cb:b5:a9:dd:
b8:9c:1f:1d:38:31:4f:0b:a2:cb:7f:c9:d5:bd:a4:8c:1e:72:
98:6c:22:eb:8d:1f:67:01:4e:1f:1f:5b:13:00:95:74:08:33:
64:40:29:3a:f9:c6:49:42:61:a8:a7:75:cb:e4:02:7b:92:4b:
aa:28:9c:70:5a:87:a7:7a:27:0d:aa:89:2f:fa:23:f6:90:b6:
c3:d8:a0:84:43:02:69:99:c4:34:93:0b:f1:ec:cd:99:e2:f5:
78:ce:42:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:41:20 2026 by rpki-client