
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2fb064c1-79af-33bb-80d1-99a010c5a87c.roa
File: 2fb064c1-79af-33bb-80d1-99a010c5a87c.roa (raw, json)
Hash identifier: 3OiDj/QXgOImwIewbiH/ZYXVb570tnEzzfJk0NVd42Y=
Subject key identifier: 0D:39:53:65:28:82:E1:A4:47:8D:B6:A4:4F:4B:18:5A:31:5F:59:81
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24DFE3CAA893314E106D5680
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2fb064c1-79af-33bb-80d1-99a010c5a87c.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 99.196.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:e3:ca:a8:93:31:4e:10:6d:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=aa409ce1-4919-4d60-9822-c373e79f31d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:46:c3:d4:5f:91:a8:f6:35:13:19:08:f3:62:
9f:75:07:5a:aa:ee:77:9d:48:26:82:a2:08:71:4e:
bd:fd:ca:b4:ae:76:3c:73:58:60:b3:ab:ba:c2:7b:
84:ae:bc:dc:e8:c2:a7:23:3d:fb:50:04:d7:9d:22:
7a:89:c1:8b:f8:28:4b:35:25:b7:80:cf:62:58:12:
79:9b:85:ea:16:c2:13:b6:e0:ab:66:01:5a:24:56:
0d:12:cc:f0:cc:d9:68:52:11:0e:ae:fb:f9:f7:7f:
ce:2d:27:8c:15:17:25:42:d6:a7:9a:f6:09:72:a9:
bd:33:e0:f0:4f:45:e7:cd:56:f2:2f:7b:4e:5d:a6:
41:67:19:c2:30:e0:7d:b4:e2:51:f6:81:83:ea:05:
7d:17:8f:80:f2:6a:90:17:06:e1:5e:d5:4a:3a:0f:
1c:f6:a5:cf:d1:10:dd:71:4d:17:8e:0d:2e:be:6b:
b6:d9:04:b6:4f:ac:69:7d:d1:fe:89:e3:8c:dc:84:
86:30:cc:ab:69:14:7b:97:e2:11:80:c0:b7:96:89:
fd:6f:aa:4e:78:57:4b:b5:2b:c1:dc:67:0f:55:5d:
86:63:77:70:24:e9:47:42:09:09:8a:15:f0:96:6e:
15:e8:f8:ba:90:c7:fa:fb:8f:a4:c6:9b:73:4b:56:
cc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:39:53:65:28:82:E1:A4:47:8D:B6:A4:4F:4B:18:5A:31:5F:59:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2fb064c1-79af-33bb-80d1-99a010c5a87c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.196.142.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:e5:63:41:84:d0:2c:b8:86:87:5a:60:82:fd:09:9e:d2:46:
52:57:7c:54:61:ec:9e:13:4b:9f:d4:f5:e0:5c:c6:3c:90:47:
f3:1e:09:c6:12:ac:da:56:fa:35:d2:98:65:c5:ef:2a:93:7c:
30:2e:b6:58:5c:5a:ab:ca:7b:cf:f5:0f:e8:5f:2c:73:e3:b3:
e9:78:25:b3:47:33:77:da:36:90:93:65:f9:47:0f:29:1c:90:
88:37:c4:2d:af:c9:ab:78:11:79:36:ca:38:34:fa:e1:4a:86:
69:19:22:2c:3d:0a:89:ab:8e:df:2f:0e:2a:1d:d2:f8:fe:4c:
41:f1:8e:f0:c7:42:0b:56:35:39:e8:ab:8d:18:b4:2e:8c:d1:
b4:85:3c:74:b1:0d:b8:24:d6:d9:fe:e4:af:a5:fa:67:fd:c3:
d8:29:6d:24:6e:3a:71:a2:2e:33:5f:5c:94:e5:4c:d3:74:a5:
0e:67:ad:85:8e:a3:cc:42:ba:e2:c5:e5:24:3d:04:bf:6b:93:
ca:db:4d:3a:83:92:fc:0a:2c:8f:68:0e:bf:df:1f:cf:dd:ba:
8b:a8:f4:27:37:d8:89:9a:60:a1:f1:f1:ee:d7:fc:f4:fc:16:
bb:aa:47:f0:f6:1c:75:10:8b:fc:4e:af:59:b3:af:41:d6:97:
81:73:1f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:07:11 2026 by rpki-client