
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04f65ae2-6e6d-3733-9088-496d434ddfa1.roa
File: 04f65ae2-6e6d-3733-9088-496d434ddfa1.roa (raw, json)
Hash identifier: 9LY7+8KebrmNBuyjjhXST3o5DFlZ9Iby454jOIw8bPg=
Subject key identifier: B6:7B:B9:5C:68:1C:0D:76:11:32:98:9A:B0:7F:79:1F:B3:37:70:7F
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F497B6659258BDE0EB3E0EE00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04f65ae2-6e6d-3733-9088-496d434ddfa1.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 99.196.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7b:66:59:25:8b:de:0e:b3:e0:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=2920b051-a215-4151-9eb5-b99625a47e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bd:23:a2:41:1e:15:18:11:57:b7:2e:1a:ec:
26:2c:a7:49:b8:ce:8d:20:b6:29:f0:69:a5:0e:92:
2f:79:7f:5e:24:ef:69:ff:20:ec:20:3e:b4:bf:29:
43:d5:17:97:e9:26:45:3a:e0:25:58:7e:5e:c8:d8:
3d:1e:d6:39:ba:c4:23:cb:f3:85:d3:cb:04:87:a0:
1c:42:36:8f:56:4f:cb:08:c2:b8:1c:13:62:fc:0b:
78:e2:c7:0f:cc:cf:80:d6:2c:27:06:1e:dd:a1:ae:
80:69:58:93:08:a2:41:78:c4:72:d5:23:c7:2a:20:
58:9d:d1:a0:29:50:61:94:a4:dc:92:8c:5e:7b:47:
47:77:ff:48:20:21:84:49:9c:96:e5:e4:15:54:29:
e9:10:3c:77:69:2a:f2:64:9f:7a:3c:3a:85:a4:54:
67:d2:40:8b:69:62:ca:f3:ed:d5:a5:15:f0:85:86:
0e:96:b9:7a:f1:91:65:9c:43:0d:e6:f9:6b:50:30:
41:4c:c7:c8:1b:6a:0a:74:e8:08:6f:49:ed:18:9c:
e1:6a:1d:fd:51:2d:ce:58:09:1c:25:41:f4:19:51:
ea:44:7d:53:e3:cc:17:27:4c:31:56:21:dc:43:c8:
85:61:fa:61:d5:c2:71:49:7c:64:5b:b2:33:45:39:
30:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7B:B9:5C:68:1C:0D:76:11:32:98:9A:B0:7F:79:1F:B3:37:70:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04f65ae2-6e6d-3733-9088-496d434ddfa1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.196.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:8f:88:68:f8:5a:f9:00:5c:0f:80:c3:95:ec:fc:ac:da:56:
a3:3d:e5:e6:05:73:93:fb:d2:0c:fd:7d:cb:37:7e:84:7a:94:
68:b8:3b:0d:9c:7d:05:49:6a:ba:b5:b0:49:46:1b:5f:06:06:
d4:d6:73:89:fd:61:23:1b:c4:7c:1b:0a:c2:8c:b0:4c:41:6c:
34:74:ab:12:a2:b9:55:33:13:44:ed:3a:1b:5f:bf:5d:49:07:
0d:17:4c:98:61:88:1e:70:fb:0a:e4:4d:d2:24:af:fb:27:7d:
46:7d:d0:12:d4:66:bc:4d:11:c8:f8:13:3a:87:22:e5:e7:25:
0d:66:3b:ea:eb:bc:9c:6b:bd:62:38:53:d8:b4:5b:85:ae:09:
fe:ad:fc:2e:d6:55:c9:a0:f0:4f:35:56:88:db:6b:75:67:e8:
17:c2:8e:07:69:6a:66:6f:58:a0:9b:76:1c:f9:83:76:43:be:
c0:ab:59:cc:6e:f8:04:19:88:a4:da:38:66:fc:5c:31:23:56:
e1:fa:76:df:e9:8e:ed:16:b8:f4:bf:25:5f:3c:fd:2a:a7:51:
fc:73:a5:9b:12:88:19:07:a6:28:74:a3:9b:18:67:8b:a8:b5:
d3:28:d1:7a:f7:b3:e2:72:62:9e:50:68:e4:a0:08:c6:4d:42:
6d:ea:a6:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je2ZZJYveDrPg7gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MjkyMGIwNTEtYTIxNS00MTUxLTllYjUtYjk5NjI1YTQ3ZTM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk70jokEeFRgRV7cuGuwmLKdJuM6NILYp8Gml
DpIveX9eJO9p/yDsID60vylD1ReX6SZFOuAlWH5eyNg9HtY5usQjy/OF08sEh6Ac
QjaPVk/LCMK4HBNi/At44scPzM+A1iwnBh7doa6AaViTCKJBeMRy1SPHKiBYndGg
KVBhlKTckoxee0dHd/9IICGESZyW5eQVVCnpEDx3aSryZJ96PDqFpFRn0kCLaWLK
8+3VpRXwhYYOlrl68ZFlnEMN5vlrUDBBTMfIG2oKdOgIb0ntGJzhah39US3OWAkc
JUH0GVHqRH1T48wXJ0wxViHcQ8iFYfph1cJxSXxkW7IzRTkwTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLZ7uVxoHA12ETKYmrB/eR+zN3B/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDRmNjVhZTItNmU2ZC0z
NzMzLTkwODgtNDk2ZDQzNGRkZmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8TwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGGPiGj4WvkAXA+Aw5Xs/KzaVqM95eYFc5P70gz9fcs3foR6lGi4Ow2c
fQVJarq1sElGG18GBtTWc4n9YSMbxHwbCsKMsExBbDR0qxKiuVUzE0TtOhtfv11J
Bw0XTJhhiB5w+wrkTdIkr/snfUZ90BLUZrxNEcj4EzqHIuXnJQ1mO+rrvJxrvWI4
U9i0W4WuCf6t/C7WVcmg8E81Vojba3Vn6BfCjgdpamZvWKCbdhz5g3ZDvsCrWcxu
+AQZiKTaOGb8XDEjVuH6dt/pju0WuPS/JV88/SqnUfxzpZsSiBkHpih0o5sYZ4uo
tdMo0Xr3s+JyYp5QaOSgCMZNQm3qptA=
-----END CERTIFICATE-----
Generated at Mon Sep 28 23:43:37 2026 by rpki-client