
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f8db3ff-881d-3796-bed3-2c661c07f16f.roa
File: 5f8db3ff-881d-3796-bed3-2c661c07f16f.roa (raw, json)
Hash identifier: VomUT4rofFb5MqXTLLYV9b1sOZe8RoTZyrf8YZhKJVQ=
Subject key identifier: 85:DD:93:67:6D:2F:BB:23:35:83:90:47:E3:53:00:41:DA:91:6B:E4
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24DFED814464ED7486C686C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f8db3ff-881d-3796-bed3-2c661c07f16f.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 99.197.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:ed:81:44:64:ed:74:86:c6:86:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=6bff35c1-5084-4ed9-aa07-343fff16f1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:64:9d:89:3c:05:00:1c:ab:a2:ea:f6:9f:a7:
9e:2a:18:3f:a2:9e:31:f8:21:5f:ab:7e:c7:d0:05:
27:be:2d:f8:a6:60:14:dc:96:a8:93:26:94:a5:91:
74:07:d6:6f:3c:b5:e5:b4:26:62:82:3f:c1:e9:61:
84:40:bf:d0:7d:14:10:52:ca:c2:88:1c:50:60:bf:
68:88:22:a7:f2:af:54:34:e6:9b:81:f3:af:e5:8a:
98:29:cd:7a:6f:cb:2c:2a:ec:8c:1f:2e:7e:12:bc:
a1:6f:01:04:03:4e:d1:3a:bd:41:5f:09:e1:4e:62:
a3:01:23:88:8c:42:ac:26:06:c1:0a:dc:0c:f2:96:
22:6c:04:f1:b3:bf:34:2f:7c:0c:10:44:74:37:fb:
4e:eb:67:49:8e:90:ef:84:9b:80:ff:45:a0:47:1d:
b0:cf:22:0b:a3:d3:4a:69:a2:b7:e9:e3:2b:17:01:
41:54:12:09:d9:e1:a2:6e:30:a5:78:f6:a0:7d:1d:
88:36:fb:09:47:c8:ed:9d:0b:1c:20:d8:97:2f:de:
36:08:54:5c:4d:0c:a0:f1:28:7c:96:62:e9:83:4f:
ee:74:25:4e:8f:af:bd:b3:e5:d2:bc:80:3b:4e:0f:
24:e3:35:8c:a7:b7:d1:26:43:23:d8:c9:80:8b:0c:
99:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DD:93:67:6D:2F:BB:23:35:83:90:47:E3:53:00:41:DA:91:6B:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f8db3ff-881d-3796-bed3-2c661c07f16f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.197.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:dd:4b:f8:97:4e:1d:c9:61:00:9d:d9:a5:83:70:e8:f2:b5:
95:a2:05:0c:c2:3e:ea:3d:0c:16:21:6a:d4:1a:5e:3a:08:1c:
f7:7e:93:93:f1:84:07:7d:6d:40:2b:4d:a6:c2:70:5f:9b:26:
4c:44:1f:4a:c0:14:a2:90:fc:58:9f:b0:8c:3f:c8:cf:68:00:
da:14:f0:dc:09:6e:69:c0:35:3d:24:d1:84:d3:f5:bc:e9:ee:
af:2b:b7:00:dc:92:14:7c:a0:b1:b4:83:72:07:2c:e6:2c:08:
04:d2:f9:c6:09:43:c9:63:b4:c3:64:e1:cd:27:e8:93:b4:89:
cc:cb:0b:dc:b4:81:8f:60:d3:ea:4b:6c:74:fa:a5:f1:d7:00:
d9:eb:7d:29:3b:89:ad:1b:4d:db:0f:49:3a:d3:90:fb:6f:41:
74:40:2b:63:ee:7f:36:ab:c2:5c:bf:73:9b:be:55:aa:13:b9:
00:d0:be:11:ee:17:c4:ff:49:5c:50:fa:0d:3b:86:fd:ac:a1:
b7:59:b2:ec:d3:6f:78:41:4c:97:6f:0c:07:54:7f:72:fa:d8:
e2:14:74:f3:76:00:22:f5:41:c4:cc:b7:58:08:ea:bb:8b:e0:
b3:d3:b7:1c:19:59:57:15:8e:ed:d2:98:61:3a:91:2a:33:2c:
a6:34:ac:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:27:14 2026 by rpki-client