
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/35f4d8cb-6f36-36ab-82dd-3291f5907dc5.roa
File: 35f4d8cb-6f36-36ab-82dd-3291f5907dc5.roa (raw, json)
Hash identifier: 7mNDoWZFekbTOaWXcmMFFn/4qzBm0PH5ls0k/oATOAA=
Subject key identifier: BD:27:10:DA:80:1C:5A:61:00:21:53:95:86:3D:45:68:4B:87:EB:32
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E0C20D95C5DE4D7F94B680
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/35f4d8cb-6f36-36ab-82dd-3291f5907dc5.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 184.20.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:c2:0d:95:c5:de:4d:7f:94:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=7e76dbf4-be5b-4753-896f-5f2aa6b0e0d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8a:52:ed:4d:99:18:f2:11:5d:42:10:74:38:
e5:2e:fd:16:73:85:4c:45:31:6c:92:61:5f:fc:4a:
95:ef:09:d9:25:31:09:60:d5:4b:a5:35:9a:47:e5:
e5:ca:14:5e:1e:97:71:0c:ed:05:48:8b:bc:90:b7:
1d:fa:26:f7:fe:8f:68:bd:0e:23:e6:9b:d2:62:61:
d0:24:bc:f1:59:50:71:b6:be:fe:2c:81:3d:ae:44:
97:f9:6a:c2:d8:6c:24:4b:2b:b6:1f:99:6d:42:ba:
d9:ec:e9:9a:aa:6f:88:00:a1:27:11:ff:50:15:25:
f8:b0:a1:a0:71:2d:b8:03:3a:02:6a:fc:7e:e3:8a:
f0:39:1b:c4:bf:8b:e9:c1:5d:da:02:b9:f0:7f:68:
63:fe:18:56:76:73:a4:4e:d3:04:fc:09:fb:2e:2e:
41:ae:ff:8c:d5:cb:88:e7:38:36:db:78:b0:20:34:
4a:af:6a:4a:8b:ee:42:c7:67:cd:5d:96:88:50:9c:
2f:58:84:53:70:a5:7f:c5:f0:c3:b9:21:2e:28:cc:
96:37:4c:d0:79:3b:81:b2:0c:6b:f0:a1:a4:ba:35:
d4:d4:ab:e2:62:bd:5c:dc:cc:f1:9e:42:eb:3f:cf:
21:7d:07:3c:f8:6e:54:db:c4:c1:05:4f:44:6e:8a:
ea:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:27:10:DA:80:1C:5A:61:00:21:53:95:86:3D:45:68:4B:87:EB:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/35f4d8cb-6f36-36ab-82dd-3291f5907dc5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.20.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:1a:42:1e:54:60:27:b2:45:32:02:b9:22:bd:70:86:e4:ff:
5a:f1:e8:fd:b0:72:fd:2e:96:35:10:06:11:4d:a5:d0:70:b7:
c1:3a:30:51:15:25:b1:13:cf:9e:57:12:52:34:90:a1:84:8b:
b6:ae:64:68:2d:70:87:72:e0:ae:f3:c3:30:3a:5c:6a:bf:35:
4b:ce:97:dc:c5:cf:98:ce:02:59:ce:e3:7d:65:17:15:6f:3b:
c6:29:9e:3d:59:28:52:85:22:73:c1:04:ee:7e:9d:64:1d:1f:
d4:25:95:ca:58:1b:1c:c6:88:85:ce:29:e1:30:5a:77:f4:6e:
be:10:3e:02:86:11:e8:25:4e:b0:c8:d4:ba:90:ce:82:af:49:
0c:92:a4:a5:b0:76:26:a8:84:36:89:f3:2a:8c:7e:79:6c:35:
ca:9f:ba:85:9d:7f:57:89:38:63:63:ac:e8:d0:4a:18:66:e1:
71:25:f7:31:f7:5a:63:32:f7:67:84:5e:f1:c1:be:2a:c4:8b:
28:1d:0e:fa:2c:df:b9:d0:44:50:65:02:c7:e2:1f:46:6c:b5:
6b:37:e1:e5:e8:85:dd:41:cd:11:4d:d3:8d:b4:b1:c4:e9:5b:
57:bb:b0:bf:4c:db:d3:9e:df:73:b9:7c:0a:d8:d9:f3:45:1e:
85:f4:c7:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4MINlcXeTX+UtoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
N2U3NmRiZjQtYmU1Yi00NzUzLTg5NmYtNWYyYWE2YjBlMGQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4pS7U2ZGPIRXUIQdDjlLv0Wc4VMRTFskmFf
/EqV7wnZJTEJYNVLpTWaR+XlyhReHpdxDO0FSIu8kLcd+ib3/o9ovQ4j5pvSYmHQ
JLzxWVBxtr7+LIE9rkSX+WrC2GwkSyu2H5ltQrrZ7Omaqm+IAKEnEf9QFSX4sKGg
cS24AzoCavx+44rwORvEv4vpwV3aArnwf2hj/hhWdnOkTtME/An7Li5Brv+M1cuI
5zg223iwIDRKr2pKi+5Cx2fNXZaIUJwvWIRTcKV/xfDDuSEuKMyWN0zQeTuBsgxr
8KGkujXU1KviYr1c3MzxnkLrP88hfQc8+G5U28TBBU9EborqlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL0nENqAHFphACFTlYY9RWhLh+syMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzVmNGQ4Y2ItNmYzNi0z
NmFiLTgyZGQtMzI5MWY1OTA3ZGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBTNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKwaQh5UYCeyRTICuSK9cIbk/1rx6P2wcv0uljUQBhFNpdBwt8E6MFEV
JbETz55XElI0kKGEi7auZGgtcIdy4K7zwzA6XGq/NUvOl9zFz5jOAlnO431lFxVv
O8Ypnj1ZKFKFInPBBO5+nWQdH9QllcpYGxzGiIXOKeEwWnf0br4QPgKGEeglTrDI
1LqQzoKvSQySpKWwdiaohDaJ8yqMfnlsNcqfuoWdf1eJOGNjrOjQShhm4XEl9zH3
WmMy92eEXvHBvirEiygdDvos37nQRFBlAsfiH0ZstWs34eXohd1BzRFN0420scTp
W1e7sL9M29Oe33O5fArY2fNFHoX0x6Q=
-----END CERTIFICATE-----
Generated at Fri Mar 13 05:52:11 2026 by rpki-client