
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/25b18877-d0e4-34fc-8b2e-16ec415cf7bd.roa
File: 25b18877-d0e4-34fc-8b2e-16ec415cf7bd.roa (raw, json)
Hash identifier: 0CVdWNh2Nr4qsZlI8XzKswt0fW1/092QDdSN0+2jiz4=
Subject key identifier: F7:FC:60:F4:75:19:98:43:59:43:72:CE:ED:17:29:F6:15:63:B1:E5
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584EA79FE0FE9C84AFAE26F5AEC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/25b18877-d0e4-34fc-8b2e-16ec415cf7bd.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7155
IP address blocks: 184.20.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9f:e0:fe:9c:84:af:ae:26:f5:ae:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=38a271a8-d5b6-4776-a0ff-3d5c4ac0f3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:38:b9:c2:11:9f:7e:a5:63:93:91:81:11:72:
a2:47:c8:4a:61:9f:ed:e5:58:77:f7:e9:ca:ba:a8:
aa:47:fe:47:fc:a8:b5:88:10:a2:f6:7a:0d:45:8e:
34:6b:a5:5c:0c:98:6d:b3:b4:97:b2:8f:5f:e9:4a:
ff:1f:66:24:3c:51:e5:f4:0a:e1:0d:2e:75:70:f4:
df:44:ef:75:fd:ae:42:db:50:59:d6:50:a9:53:61:
61:27:b9:44:fb:54:fd:4b:b3:5b:cb:2e:a9:9a:ea:
91:94:99:cd:8d:60:05:74:b8:30:1b:cb:9f:1c:2e:
6d:cf:20:d2:e7:ef:87:c6:89:c3:34:35:03:58:74:
ba:68:94:d5:84:31:5a:f8:57:de:fa:2d:a6:84:22:
5b:af:09:86:18:bb:f2:d3:0c:59:c8:bd:3f:bd:71:
0f:42:55:98:6d:63:c2:31:c7:0a:ba:76:2d:17:46:
11:d7:05:a6:e7:24:9e:c5:6e:de:a9:c0:f6:46:14:
e0:52:6a:20:a6:b2:05:35:be:16:58:29:03:9b:62:
d2:6f:7e:c7:e2:0c:5a:72:e9:bb:a5:e7:1a:7c:44:
a6:e5:59:8a:61:eb:15:c9:2e:f5:20:38:89:ab:41:
31:a4:5f:ee:45:b6:d4:4c:8f:f9:c6:1b:25:1e:c3:
f4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:FC:60:F4:75:19:98:43:59:43:72:CE:ED:17:29:F6:15:63:B1:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/25b18877-d0e4-34fc-8b2e-16ec415cf7bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.20.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:6b:6e:d2:df:ca:0d:3a:6d:cf:70:9c:a3:f9:e4:1c:32:3c:
73:fd:42:0e:d6:1c:9c:34:fd:53:dd:9d:b3:36:2f:63:f0:21:
96:99:5a:1c:30:ef:18:78:9e:00:14:71:98:fe:2a:14:ef:7c:
42:1a:9c:c4:70:71:1c:19:2a:f7:be:61:1f:2a:fa:24:2a:48:
af:a1:87:f8:5f:8c:46:4f:56:0f:57:2c:ce:80:90:a5:dd:e8:
ae:85:61:4b:7f:4f:44:1b:36:79:37:79:00:00:30:0d:b9:44:
46:2a:78:93:d2:10:c7:f5:83:62:92:53:4c:ed:62:20:01:a5:
9a:70:b1:5d:82:f6:47:14:98:64:77:33:32:bd:e4:b5:08:8e:
6d:e1:37:c3:8c:86:ab:97:45:4e:fb:46:de:6b:c6:8c:22:f9:
ea:f0:12:fd:a1:1b:b9:f7:ca:64:ea:dc:50:7c:6a:41:f2:5b:
91:c5:7a:da:fd:6b:c5:e4:5b:6d:4f:88:27:ed:76:64:b9:fe:
45:e1:ed:91:99:5b:58:43:e8:57:37:bd:a8:53:cb:85:2a:80:
ed:cd:d6:30:e3:47:b9:37:8c:ee:44:ac:45:ae:6c:2f:21:81:
df:ae:ff:76:5a:1c:bb:35:09:c7:29:f9:0d:ec:41:8e:38:e7:
0c:5f:13:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:50:34 2026 by rpki-client