
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d99727c7-9b34-308c-bbb4-cd0e6e5874c9.roa
File: d99727c7-9b34-308c-bbb4-cd0e6e5874c9.roa (raw, json)
Hash identifier: xglqo6z1jkPRTtemSA2KhpEEL6g1CLzwDhNuCdw+B6g=
Subject key identifier: 78:9B:A2:6A:DF:BF:FD:1B:F2:1D:17:FA:FB:45:9C:BE:1A:FB:0E:59
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F4983F858759E1C48C23763A0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d99727c7-9b34-308c-bbb4-cd0e6e5874c9.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 184.20.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 06 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:83:f8:58:75:9e:1c:48:c2:37:63:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=38fb8601-5a34-48f3-952b-a2ae34b851d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ca:08:59:16:40:13:75:d0:3a:6e:ae:f4:db:
04:a2:ae:bd:f5:32:cc:5e:0d:57:d0:5a:61:d1:63:
ea:15:6b:e6:6e:02:ff:ea:08:0c:49:71:47:9c:91:
e0:38:26:28:c8:e0:b0:4a:46:e7:22:a6:83:be:ee:
de:02:68:0d:c4:06:58:d8:c7:74:0b:e0:39:5c:ca:
7f:db:e9:8c:95:db:3f:aa:68:42:08:44:95:7c:88:
7a:08:37:e2:0a:3b:4f:9c:f9:7a:a9:d1:51:b7:c4:
bd:6e:12:e4:df:22:3a:95:4d:7e:76:db:f6:fa:96:
28:e3:a4:bb:7b:c9:62:93:5d:52:0f:c2:70:48:11:
e3:50:85:3b:aa:e7:1f:d6:89:5c:47:76:90:c2:c0:
8f:ba:d2:66:4b:f3:30:4a:ea:53:d1:31:bd:29:81:
b6:e2:41:62:dc:b2:7a:69:43:ed:d2:45:2d:9d:f1:
07:dd:28:1d:9a:8a:11:1e:86:fb:f6:3a:b4:b3:b1:
53:eb:55:24:cc:73:34:97:e3:07:90:47:ae:57:1f:
99:81:70:76:92:34:98:7e:6f:51:a9:f9:d5:9f:6c:
0c:22:f7:bc:40:7d:4f:0a:a6:93:6c:a8:f0:99:13:
8d:ed:37:e8:a9:77:4a:ba:5a:3e:d1:f8:d1:bf:2d:
fb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9B:A2:6A:DF:BF:FD:1B:F2:1D:17:FA:FB:45:9C:BE:1A:FB:0E:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d99727c7-9b34-308c-bbb4-cd0e6e5874c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.20.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:05:07:b5:11:cb:ca:20:7b:52:e4:23:1a:92:92:b2:dc:47:
71:75:75:cd:35:a7:f2:ba:5c:57:12:a6:f8:0a:d3:9d:f4:fd:
10:04:46:04:36:2f:d5:6f:34:50:fe:b9:27:46:7d:62:ae:cb:
da:85:c7:36:8f:1c:88:09:87:ac:c3:42:06:46:8f:2c:1e:54:
fc:34:7d:00:c6:ff:bf:7d:51:69:0f:30:98:d9:97:05:f6:43:
5e:bd:3e:45:18:eb:78:0c:da:e3:cc:29:2a:fa:a9:f9:97:db:
6e:db:26:b6:d1:28:75:71:fc:19:f1:90:9a:b1:fc:23:b1:78:
e9:74:22:b1:f2:62:b1:49:a4:32:96:a4:42:dd:46:8c:ca:56:
79:16:69:41:03:04:16:89:cc:ff:27:58:45:e3:ea:8b:45:33:
32:c2:17:43:00:1c:97:79:da:1c:34:1c:7e:44:93:49:95:4f:
ba:cc:c2:3e:58:b9:fd:da:e0:cb:3d:49:bd:d2:15:05:cc:f1:
f1:2f:1f:9e:d7:aa:45:da:60:c3:7c:c6:21:39:98:b5:c9:94:
d7:5d:78:1b:fd:8a:29:24:da:a9:c8:79:11:17:37:40:9f:83:
e0:f9:7d:69:1b:0b:58:f4:53:de:90:bf:80:f9:91:e9:38:de:
c7:51:5c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:18:54 2026 by rpki-client