
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5d7deac7-140e-384f-899b-bbdd3a16fe07.roa
File: 5d7deac7-140e-384f-899b-bbdd3a16fe07.roa (raw, json)
Hash identifier: mAb15oqMRXPeVC8voMvFyCKe1UEqqGrMG46gNBV8BQw=
Subject key identifier: 95:99:C5:EB:06:8E:32:F8:9F:59:43:8F:68:A5:88:3B:73:0D:2E:FA
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E098AABC42C680AE1F8ED0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5d7deac7-140e-384f-899b-bbdd3a16fe07.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 99.197.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:98:aa:bc:42:c6:80:ae:1f:8e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=899e6df0-e5ba-4fdb-b1f3-7f57623d2031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ce:40:3d:9a:4c:36:08:71:4e:73:b3:3e:97:
da:5c:ff:8b:86:83:4d:77:e4:3f:09:74:8f:d3:fb:
43:3e:e6:1a:2d:ca:40:1a:1b:5e:82:4f:1a:d5:af:
8e:e3:45:df:b9:8d:38:dc:39:61:13:96:f0:9d:6d:
78:ac:c4:89:49:3f:25:34:04:b7:7c:1b:6d:ed:4c:
cd:76:eb:dc:0c:20:19:0b:26:63:9a:52:f5:ff:bd:
3f:89:07:41:f3:9f:0b:db:46:8a:3f:f1:9d:0d:fd:
08:2c:39:89:eb:66:55:ca:f3:b8:2a:49:83:57:7e:
a3:03:ba:90:0c:bc:e3:48:b5:fe:32:38:c9:b8:09:
50:dd:ef:c2:2c:42:74:17:48:e5:df:d1:f5:f3:b7:
13:37:7a:b1:e0:37:97:df:2a:e2:76:12:f3:7f:26:
09:fa:84:51:67:68:24:d8:ca:df:ce:f5:76:35:9d:
54:13:43:5d:01:09:c9:d4:09:42:27:c7:1c:bc:b6:
02:0e:5b:35:6e:ea:95:02:b9:8c:8f:06:38:f7:cb:
dc:02:bb:06:14:21:26:c2:8a:b3:33:7a:e2:46:75:
9a:c0:77:d4:31:cd:ae:33:b8:d5:f9:a7:62:45:50:
6a:d0:92:ec:38:98:50:c6:82:93:64:15:9c:cc:e9:
bf:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:99:C5:EB:06:8E:32:F8:9F:59:43:8F:68:A5:88:3B:73:0D:2E:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5d7deac7-140e-384f-899b-bbdd3a16fe07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.197.77.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:56:4b:6e:b8:90:8a:5f:78:3b:41:55:82:bb:01:b2:77:5b:
e0:93:43:8b:43:c5:ff:5c:50:a4:a0:e0:90:05:6b:2f:23:f2:
ab:68:78:56:7b:fa:72:4f:7b:1b:2e:30:0f:c3:5f:d0:a2:7d:
9d:79:44:ef:ff:ab:19:38:1a:2c:6e:3f:8e:72:ab:ad:11:7e:
83:a1:20:aa:cf:49:ba:a5:d7:7c:57:83:01:4a:37:0d:7f:fb:
a2:82:cc:56:0a:99:9e:2c:34:24:23:f4:d4:86:ba:ea:3e:ac:
1e:2f:2d:71:47:83:5e:00:66:44:53:3a:bd:68:24:01:a9:84:
92:f7:d4:58:4e:c7:25:c9:11:20:fb:8c:8f:cd:5f:de:14:0b:
7e:3e:cd:6e:53:1d:a2:85:cc:ac:ce:40:53:86:57:e7:fa:42:
23:bf:36:a5:97:c9:69:a7:0b:69:c6:48:56:b5:82:75:3c:19:
a6:b0:13:64:ef:07:d0:33:1e:9f:b7:66:3b:b0:0b:36:e9:f7:
a6:91:94:d1:67:c4:4c:e9:4f:ad:4b:d4:f7:f3:6f:d7:05:f1:
0f:9d:15:72:d9:05:e0:3a:e6:82:f3:00:20:87:c4:07:8e:e0:
2b:75:4f:7c:e5:de:4a:30:9e:a1:4d:48:0f:96:cd:e0:02:10:
d4:cb:f4:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4JiqvELGgK4fjtAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
ODk5ZTZkZjAtZTViYS00ZmRiLWIxZjMtN2Y1NzYyM2QyMDMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhs5APZpMNghxTnOzPpfaXP+LhoNNd+Q/CXSP
0/tDPuYaLcpAGhtegk8a1a+O40XfuY043DlhE5bwnW14rMSJST8lNAS3fBtt7UzN
duvcDCAZCyZjmlL1/70/iQdB858L20aKP/GdDf0ILDmJ62ZVyvO4KkmDV36jA7qQ
DLzjSLX+MjjJuAlQ3e/CLEJ0F0jl39H187cTN3qx4DeX3yridhLzfyYJ+oRRZ2gk
2MrfzvV2NZ1UE0NdAQnJ1AlCJ8ccvLYCDls1buqVArmMjwY498vcArsGFCEmwoqz
M3riRnWawHfUMc2uM7jV+adiRVBq0JLsOJhQxoKTZBWczOm/aQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJWZxesGjjL4n1lDj2iliDtzDS76MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWQ3ZGVhYzctMTQwZS0z
ODRmLTg5OWItYmJkZDNhMTZmZTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8VNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIFWS264kIpfeDtBVYK7AbJ3W+CTQ4tDxf9cUKSg4JAFay8j8qtoeFZ7
+nJPexsuMA/DX9CifZ15RO//qxk4GixuP45yq60RfoOhIKrPSbql13xXgwFKNw1/
+6KCzFYKmZ4sNCQj9NSGuuo+rB4vLXFHg14AZkRTOr1oJAGphJL31FhOxyXJESD7
jI/NX94UC34+zW5THaKFzKzOQFOGV+f6QiO/NqWXyWmnC2nGSFa1gnU8GaawE2Tv
B9AzHp+3ZjuwCzbp96aRlNFnxEzpT61L1Pfzb9cF8Q+dFXLZBeA65oLzACCHxAeO
4Ct1T3zl3kownqFNSA+WzeACENTL9Go=
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:03:03 2026 by rpki-client