
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/41d9a0dd-95d2-36cd-b790-3af92f9ef866.roa
File: 41d9a0dd-95d2-36cd-b790-3af92f9ef866.roa (raw, json)
Hash identifier: 5bNd3HbuKhORUPPmUiW/a+q3oYsRHzirasCVTU8yxI0=
Subject key identifier: F8:4B:82:5B:36:2F:03:61:B3:06:A6:7E:73:8C:C2:14:EF:37:49:1D
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E09271829C72E2D4B6D740
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/41d9a0dd-95d2-36cd-b790-3af92f9ef866.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 99.196.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:92:71:82:9c:72:e2:d4:b6:d7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=19aac6ae-763f-4f5f-b3a0-866f52ce93fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cc:8d:3a:02:3e:fc:c4:15:91:bd:17:81:da:
c1:8f:d4:1e:42:90:0b:14:53:b3:1b:64:54:00:f4:
2a:c1:4a:10:19:33:64:72:f9:0b:a8:fb:c7:90:c9:
b6:2d:d0:47:a3:b8:18:a1:8c:f9:e1:54:58:24:46:
af:b9:0d:0b:8d:f4:78:16:35:ef:f4:fc:44:f8:4b:
87:30:77:26:79:8d:90:5f:d7:57:57:71:c9:59:d5:
4c:6e:7f:f0:02:0d:96:d6:79:5d:6d:f2:02:cf:09:
44:17:b1:b8:59:fb:9c:a7:ea:95:a1:1d:f7:dc:2a:
d8:9a:c0:f2:df:2a:23:fd:e1:70:89:82:01:b7:79:
89:ac:d9:ad:1a:4c:a6:49:48:13:9a:0b:82:9d:2b:
f3:73:dd:bb:c1:88:5b:d8:9e:00:d7:5b:9d:59:6f:
e9:4d:1d:98:20:37:f8:e9:14:e7:c8:53:d9:b9:2a:
2f:d4:1e:59:90:98:09:78:3a:6d:06:b9:05:0b:8c:
c7:0f:54:02:6b:84:11:f5:f1:d0:6e:77:9e:5c:e2:
fb:4f:84:d9:5b:8e:a4:62:36:b5:71:71:32:f9:f1:
e9:93:a2:db:ea:45:67:5f:04:99:73:41:fd:f7:a0:
4c:ee:32:65:3e:ab:44:49:3b:ff:17:75:fc:55:56:
70:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:4B:82:5B:36:2F:03:61:B3:06:A6:7E:73:8C:C2:14:EF:37:49:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/41d9a0dd-95d2-36cd-b790-3af92f9ef866.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.196.160.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c3:d4:b2:3e:0b:87:67:8f:71:18:23:91:06:1c:44:e1:8a:c1:
fb:cb:16:d8:f2:5c:60:90:70:34:17:bd:cd:d3:0a:73:9f:eb:
58:7c:f6:5c:a9:0e:58:39:2b:52:23:6a:92:c1:5b:76:47:f0:
d9:bc:6b:46:a3:ba:a2:c0:82:f5:c0:20:4c:e6:b0:28:93:db:
46:e3:af:99:c4:02:9e:66:00:8d:88:1d:f3:c7:46:81:83:ea:
d0:c3:4d:1f:22:8e:9c:fd:f1:0c:29:65:bc:9f:ef:c6:db:b1:
d5:9a:aa:d1:98:66:ee:c6:f0:98:3a:8d:34:37:60:f8:32:00:
4f:53:d6:c0:dd:04:22:19:39:46:e0:e8:14:20:70:47:a3:d1:
5a:de:7f:64:28:38:b5:7e:7e:ab:87:1f:b7:7e:2b:90:56:9f:
c0:61:86:52:88:6e:b2:07:d9:79:fd:20:56:84:50:5a:57:4f:
5e:ed:0c:cd:c6:cb:64:2d:d4:d7:33:a2:a4:92:64:84:18:7d:
7c:cf:75:a7:1b:87:2f:9f:14:1b:0e:59:02:1f:e7:bb:ae:96:
a3:ac:9c:a8:42:90:cb:7c:49:00:5b:5e:fc:bb:c6:ba:04:08:
3a:ef:4f:cd:b9:7b:bb:bd:c6:e5:c6:c0:c9:71:46:87:ca:7a:
c4:31:57:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:06:19 2026 by rpki-client