
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/24afcda2-3eb1-3b8a-98bd-0529bd68a08f.roa
File: 24afcda2-3eb1-3b8a-98bd-0529bd68a08f.roa (raw, json)
Hash identifier: 1+/8G4AX3B/W915MZDc/KP/pKDpWWK63b39usqdQyQ8=
Subject key identifier: EC:64:AA:25:1E:DB:04:E3:EF:CC:F9:31:F5:CE:56:BA:02:E3:27:84
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F497BAFC5ECA3AB0C02A9E760
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/24afcda2-3eb1-3b8a-98bd-0529bd68a08f.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 184.20.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7b:af:c5:ec:a3:ab:0c:02:a9:e7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=8f99ad39-5ea9-447d-9952-da3528b07b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ff:61:9e:fe:8d:cc:af:45:76:c9:c0:3a:27:
ce:51:66:f3:b3:dd:f3:01:eb:87:07:ee:8b:09:83:
ec:f6:e3:0d:a3:50:54:9b:96:6e:2a:7b:92:40:dd:
69:7e:21:92:8c:ba:cc:66:70:72:06:08:59:f6:e1:
81:93:ec:2a:4f:c6:26:dd:b5:ba:0e:ad:8b:4b:a9:
52:65:b7:47:66:9f:f5:04:1c:57:34:6e:07:b3:16:
04:ec:a0:20:4e:f6:d1:9a:70:7a:1a:78:a6:89:00:
d5:64:71:41:6c:53:d7:18:f0:01:7b:f4:3d:98:7f:
6e:33:4e:ac:d0:b5:50:75:ac:8a:0f:ca:39:3b:c5:
53:62:9f:b3:9d:6d:e3:d3:0e:8e:d2:e9:b3:af:6d:
c8:ad:6b:4a:2c:a5:66:2d:83:0b:76:df:d9:c7:e0:
48:5c:59:90:7c:a7:a0:4c:67:67:fb:dd:bb:ed:b1:
0b:ca:33:8c:a3:f3:c9:56:79:80:50:5b:9a:4a:9e:
6b:84:29:b7:1a:3f:a7:0b:44:92:ba:86:23:0e:ef:
d3:c2:d2:39:77:26:57:14:46:4f:39:3c:7c:5c:07:
f3:b3:79:d9:16:36:dc:77:ed:52:da:c6:a4:13:f3:
c4:35:8f:82:50:e2:30:f0:5f:80:b4:7f:fe:56:2c:
61:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:64:AA:25:1E:DB:04:E3:EF:CC:F9:31:F5:CE:56:BA:02:E3:27:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/24afcda2-3eb1-3b8a-98bd-0529bd68a08f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.20.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:18:0d:32:7c:2c:ca:92:4e:ae:80:b4:95:57:8c:d5:74:74:
1a:69:2e:db:f8:29:62:9e:1b:39:53:e7:75:54:35:d7:22:dc:
6c:3e:24:05:84:49:1a:d4:bd:12:c6:e7:7a:6c:fa:3f:85:47:
00:f4:e4:b6:26:40:38:36:17:97:eb:50:b7:49:59:e4:8f:a1:
bb:61:02:bf:5e:0e:94:10:c2:a7:7a:30:f5:0f:90:63:d9:1c:
c0:33:66:75:01:c1:c0:74:fc:d7:f9:7a:66:1b:2e:51:dc:54:
ef:01:7c:40:f9:0a:93:00:f0:e2:dc:b3:ac:a1:a5:f3:9f:f0:
5b:2b:cc:4d:c7:28:44:2b:c1:b5:59:0b:4c:21:a9:e6:dc:fe:
f4:0b:49:90:e3:35:23:bb:e3:ae:1c:6a:44:f4:b5:f7:96:69:
0e:dd:cd:cf:3c:aa:95:73:43:1c:16:93:0a:90:1b:24:ea:62:
d8:55:c0:5f:c1:89:85:ee:3c:5b:b9:6e:51:9a:d0:22:c8:d9:
a3:b5:e6:80:d5:de:b0:b5:52:4d:61:ff:01:5e:55:28:a3:82:
e0:79:b1:aa:17:6c:3c:bb:ff:5e:39:3d:ef:39:00:50:9f:09:
27:04:8e:98:30:5b:ed:ff:c9:b5:8a:8d:ef:26:b5:41:e0:e8:
13:65:0f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:32:59 2026 by rpki-client