
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d99727c7-9b34-308c-bbb4-cd0e6e5874c9.roa
File: d99727c7-9b34-308c-bbb4-cd0e6e5874c9.roa (raw, json)
Hash identifier: wwFukpJ+FXOytFDI65ewLL+8TUAsTQvjBtQNPlqSxB4=
Subject key identifier: 32:4F:10:6D:1B:E3:CF:97:BD:54:B3:6D:F9:19:DC:09:60:1E:5B:36
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584E059C2153E785EDC994137480
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d99727c7-9b34-308c-bbb4-cd0e6e5874c9.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 7155
IP address blocks: 184.20.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 13 Jun 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9c:21:53:e7:85:ed:c9:94:13:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=b8619429-ff21-41f4-a5ee-8ae88d097305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:af:c8:d8:23:ac:44:98:1d:91:b1:19:c2:30:
e1:af:88:a6:9e:87:04:4d:a9:8e:81:a5:d0:35:0c:
e4:b7:39:37:7a:45:ae:d6:fc:4a:79:66:c8:c7:f9:
1c:fa:da:e8:bc:02:d0:96:a8:7b:3b:2f:af:05:6c:
c1:8d:eb:19:64:4a:22:a5:c9:44:01:9f:f8:71:7c:
05:46:64:77:eb:9b:ec:73:99:0b:48:68:20:cd:65:
f7:51:5b:d2:80:45:66:d1:13:95:4e:03:31:e3:33:
5c:a5:94:12:49:62:57:7f:b2:5c:21:8e:b1:10:27:
87:07:53:93:4f:af:ee:c9:fd:cc:26:44:f6:82:44:
31:b9:8a:4a:43:b0:42:f8:d4:91:08:2b:7f:18:01:
f5:d3:33:b6:be:d3:79:70:89:c1:7e:31:1d:0b:29:
7e:bd:f2:9b:39:5f:bc:88:21:26:ee:54:1a:6d:b5:
66:d8:1f:71:5c:2a:23:44:e3:3c:8a:3f:41:62:02:
88:60:66:22:47:7c:05:7a:58:09:74:58:fe:45:eb:
e8:c3:07:1c:81:6f:5f:9a:fc:50:76:cf:78:bb:6c:
52:c4:cf:18:43:a2:f8:f4:76:e2:47:96:52:00:94:
a9:63:22:24:22:ad:ba:fa:c7:d4:15:70:ce:6c:59:
01:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4F:10:6D:1B:E3:CF:97:BD:54:B3:6D:F9:19:DC:09:60:1E:5B:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d99727c7-9b34-308c-bbb4-cd0e6e5874c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.20.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:9d:df:34:91:25:3c:00:9d:e1:45:62:ff:95:60:55:3f:6d:
13:01:1a:79:b6:53:04:0a:a4:1b:0a:18:87:b6:b7:78:ba:c6:
96:5a:5a:2b:13:59:d4:11:ec:b0:6e:66:43:74:8d:87:bf:3e:
83:f0:fa:a3:7b:83:d2:cf:50:e4:c3:39:45:c3:ab:70:3b:d0:
b2:93:b4:71:9d:47:a9:34:d2:de:2b:60:7b:64:1f:c5:c3:e1:
aa:1c:60:b8:0f:0c:0f:f9:34:af:8b:74:72:93:cf:07:62:45:
d3:2c:cb:cc:9f:a7:a9:90:d3:b8:78:11:5e:cc:5f:3a:b6:cb:
8f:1d:ce:4d:d9:cf:b2:0c:58:9a:c4:23:95:5a:18:4c:0a:cc:
96:c3:dd:ad:92:42:dd:10:39:2b:45:26:8a:a6:84:84:88:ab:
0f:38:f7:a9:c6:f5:13:f9:7c:57:ad:f6:af:f0:88:e7:51:ec:
0c:f6:c9:38:d1:73:c2:32:4a:55:90:82:b1:f3:cf:76:e7:0a:
e8:3f:8f:cc:51:b3:83:1c:28:d1:49:e2:67:35:4c:6a:2a:02:
c3:d0:d4:30:ad:43:c0:f1:c1:42:00:09:22:92:eb:49:61:a6:
dd:f0:4a:e5:67:fa:fc:20:0a:52:d3:24:94:40:fb:e9:3c:c7:
ef:f3:5c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:23:43 2026 by rpki-client