
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bcc6c87b-176e-3f65-a491-41380a670849.roa
File: bcc6c87b-176e-3f65-a491-41380a670849.roa (raw, json)
Hash identifier: xex3SPle/FlGudq0VdVQGhMCeq7OcPkSwdSB5+uRAzU=
Subject key identifier: FD:24:ED:88:1A:00:3F:1E:A5:4C:BC:CC:C9:CF:14:C4:99:28:15:F7
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E005F230FA2CC987504980
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bcc6c87b-176e-3f65-a491-41380a670849.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 184.20.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:05:f2:30:fa:2c:c9:87:50:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=e5fa0508-2b5b-408b-bad4-af80415c70bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5b:f4:9d:96:32:fb:36:09:5f:a4:a7:7c:15:
12:41:25:25:6b:fd:cc:cd:c0:89:8d:db:4f:ee:30:
c6:ad:a6:82:18:a6:ec:4d:42:c3:e1:e6:2d:c8:24:
cc:ea:45:68:da:5a:aa:38:6f:d6:76:3a:98:92:a3:
1e:07:9d:67:3f:e8:68:28:b2:be:f9:2c:d4:30:25:
ee:15:24:36:88:1d:83:a2:57:b2:38:54:1e:55:2a:
ff:2e:91:29:89:34:58:35:9e:ad:f5:39:aa:5b:f9:
31:12:d2:82:40:fb:50:c0:5a:26:23:a7:df:dd:d3:
47:bd:7a:05:e0:d2:98:66:eb:4c:be:39:9b:9e:50:
dc:f5:97:2f:f3:16:12:33:8e:1d:af:34:c5:08:71:
9e:3a:b7:fe:e4:12:48:78:6e:33:e5:f5:e2:3c:4d:
91:a1:8e:f9:cf:6c:3f:f7:93:b8:80:10:de:e3:b7:
88:44:20:14:9b:b5:db:b2:c4:b4:66:1c:9b:c8:f2:
19:5c:ce:65:2f:02:71:08:66:60:f9:05:a6:3e:ab:
dd:cf:42:c5:32:b5:0d:a4:66:33:a6:dc:b3:58:bd:
9f:66:a2:74:40:6d:ae:09:52:dd:a0:28:b0:26:fe:
63:62:ec:6d:ac:c2:54:c1:04:ab:29:f3:4f:5a:d4:
5a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:24:ED:88:1A:00:3F:1E:A5:4C:BC:CC:C9:CF:14:C4:99:28:15:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bcc6c87b-176e-3f65-a491-41380a670849.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.20.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d1:9b:e3:93:94:2a:f6:3a:eb:72:6d:48:43:d8:2f:05:73:71:
c0:01:10:b1:2a:77:fe:d4:4e:24:b7:92:f7:71:1d:b2:b5:1c:
fb:a0:2e:88:3a:62:1e:44:a4:ca:57:fc:d5:19:4d:ec:1a:06:
e6:d7:a2:48:3a:bc:97:c9:84:dd:e3:f9:68:39:75:92:7d:89:
b4:c4:52:d0:c3:5d:cc:31:45:03:40:56:99:ad:c9:5a:4d:f0:
ef:f7:d3:e2:82:18:a1:bb:4d:4b:fd:b5:5c:ac:64:c5:68:f5:
ab:e3:f5:00:b2:f7:7c:42:1b:02:8f:5f:e1:9c:72:65:91:a2:
44:a6:a0:4b:4c:69:48:f1:77:f0:44:5d:36:29:63:22:2d:44:
7c:c5:36:b2:8f:b0:b9:99:9f:a6:4d:af:f2:43:32:11:6c:32:
48:8c:bf:71:97:1a:9b:f8:5c:dd:55:59:5e:8d:40:eb:ad:dc:
8f:a9:e8:b9:3a:94:92:3c:4e:ec:ee:c5:09:27:83:e7:4b:f6:
d7:2b:28:74:a9:39:bc:7c:da:40:6c:47:60:3b:87:70:25:fa:
1c:00:ef:bf:84:d9:c9:17:98:97:07:b6:d8:d6:4a:37:e0:ac:
94:58:33:56:7d:be:28:55:53:2f:ed:99:d2:1c:52:a4:59:74:
5f:75:83:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:28:49 2026 by rpki-client