
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f73f6be-cbc3-3833-b4a1-533442804977.roa
File: 3f73f6be-cbc3-3833-b4a1-533442804977.roa (raw, json)
Hash identifier: VU3MvV5XuSzBQeE0IjcyHZbNRKmxT7jndQ7IeE0zl3w=
Subject key identifier: 7F:32:37:69:18:DF:56:31:58:9F:52:C6:E4:34:5D:EB:05:B3:8D:F0
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E08FD2EB4E5BD85CD15920
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f73f6be-cbc3-3833-b4a1-533442804977.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 99.196.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:8f:d2:eb:4e:5b:d8:5c:d1:59:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=fdaf1884-43f8-4a63-b026-95617ab2a5e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6b:dc:ac:68:3e:db:ca:e9:5c:6a:12:1a:c7:
7e:18:94:9a:f6:d2:a3:71:68:bb:c8:ff:2d:ef:32:
d6:ac:28:00:46:0c:f4:7a:6f:28:c6:71:96:25:52:
0c:7f:f6:a9:17:e7:f2:0c:2a:3f:08:70:89:2f:92:
b1:aa:6b:51:09:df:e9:e4:07:45:e1:23:d3:75:6b:
98:e6:cb:56:2b:11:b3:98:bd:85:3b:4f:94:c2:fc:
d8:c0:74:d0:9c:1e:b9:e5:56:5a:a9:c4:08:60:11:
f5:81:51:70:a9:06:a9:6e:b2:2b:43:f7:e9:a6:8f:
ec:d4:3b:9c:44:55:1d:0d:02:70:86:57:ca:f5:38:
0b:30:2d:08:67:58:8e:68:ca:c1:79:30:8a:43:ed:
2a:23:0d:b8:ae:b6:a1:24:4e:65:0c:ba:12:97:db:
55:d8:3f:28:7a:c8:de:9a:7a:83:a0:92:5c:28:cc:
6f:c8:64:fa:de:c9:e6:ae:e8:c6:89:ad:c1:97:6b:
b0:c7:81:a0:26:32:63:10:13:16:ee:3f:a2:44:58:
ff:91:79:4c:f4:1b:f5:55:93:22:89:27:3c:3b:cc:
bf:75:d2:0c:46:2a:40:ca:77:6a:52:38:0e:35:5e:
f8:a7:be:f2:cb:64:8f:c1:8d:46:ea:5e:78:37:cd:
15:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:32:37:69:18:DF:56:31:58:9F:52:C6:E4:34:5D:EB:05:B3:8D:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f73f6be-cbc3-3833-b4a1-533442804977.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.196.78.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:d2:b5:45:ea:a7:07:66:2b:38:bb:76:34:d3:61:95:fe:c1:
a8:ab:ec:2d:6e:01:f0:7f:c1:98:fa:73:b8:13:37:34:40:95:
00:a7:17:d5:1a:30:82:fc:08:e7:13:5e:24:04:0d:4a:5a:8f:
8f:75:86:8c:cc:da:e4:eb:c4:92:f1:d5:2e:1a:4e:7e:c6:00:
0f:34:6b:b8:6c:91:f5:af:33:c7:31:96:fa:e9:4c:e0:1e:d3:
20:7b:1c:36:09:e4:78:8b:96:76:cc:1d:bd:2b:77:b0:9b:da:
24:c4:ec:30:6c:9c:6d:15:93:1b:cd:5f:74:35:f8:18:0b:5f:
21:70:10:c7:76:6c:12:51:eb:b5:b0:4b:d7:2b:f7:f3:19:1d:
73:70:4a:82:1d:50:77:df:eb:c5:71:2c:1a:49:92:ff:9b:bd:
e1:0a:dd:cd:38:17:4b:37:82:73:cc:b1:95:ca:d3:92:e8:cb:
b0:9c:e9:21:ea:8c:09:a9:47:d7:8f:3c:96:a8:73:c0:a4:fd:
1c:6b:46:c0:59:78:3f:7f:fb:a6:07:ba:04:a4:86:ce:6f:13:
88:7e:0a:14:6f:00:0a:6f:57:57:15:43:20:0c:21:91:b1:ab:
09:ba:bc:b7:02:22:cc:0c:b4:76:28:b4:f0:7d:b5:5a:56:01:
17:8e:36:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:00:21 2026 by rpki-client