
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f996186-08c9-30f8-8f9d-644e0acea188.roa
File: 5f996186-08c9-30f8-8f9d-644e0acea188.roa (raw, json)
Hash identifier: Ece1yyT/LT7xCabSSjAhHEfyPDhkE9u3qmMdS6zuMVw=
Subject key identifier: 86:B1:4E:F8:63:22:36:88:E3:9B:9E:D3:50:C8:E3:C4:C2:D8:AE:E0
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F4983B1C91C2B24695E62F400
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f996186-08c9-30f8-8f9d-644e0acea188.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 99.198.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Oct 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:83:b1:c9:1c:2b:24:69:5e:62:f4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=28df4e91-c558-48c7-9ee3-7c9a41f8244d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1c:24:f1:57:13:10:69:5a:6c:65:70:26:d0:
39:e7:93:40:bb:f7:56:cd:b5:c6:ab:6f:ac:a7:f4:
1e:c8:3e:e0:bd:18:37:8b:03:29:13:d8:8d:8a:c2:
50:2c:79:08:ff:81:54:b3:5e:d0:62:e7:d4:39:a8:
52:b7:94:79:23:ed:b6:92:a0:6f:2f:f7:cc:59:c2:
43:44:12:c6:c0:9b:1e:d1:43:29:76:db:a2:66:f4:
4f:9e:57:9b:d6:86:57:79:e7:91:59:f2:d0:34:61:
eb:7a:e5:7b:33:a9:47:5d:24:62:3d:01:43:90:64:
2c:83:c6:7c:a4:d9:e5:89:06:d5:b7:1b:cd:8f:20:
5e:1d:2b:7a:c1:2a:c1:1f:25:2d:a6:9f:41:de:ea:
6c:a0:f5:32:f3:cb:7b:db:d6:a2:57:74:80:21:53:
86:a2:a2:46:2a:81:f3:80:4f:ee:9d:0b:b4:b0:4b:
92:98:63:13:9c:60:a1:f7:ec:e2:db:52:25:19:70:
91:8f:12:bd:c2:00:f9:d8:37:b2:2e:79:63:ca:ff:
69:d8:68:fa:d3:72:46:d0:a9:77:21:ce:4a:b3:ff:
dd:1b:77:c0:a9:27:e1:d2:d0:4b:e0:cb:a8:11:be:
9e:ff:25:fd:97:39:74:38:f0:2c:a1:c7:c7:15:9b:
61:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B1:4E:F8:63:22:36:88:E3:9B:9E:D3:50:C8:E3:C4:C2:D8:AE:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f996186-08c9-30f8-8f9d-644e0acea188.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.198.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:fd:9c:3c:a7:90:f1:ed:76:dc:0f:6f:4b:7e:8e:00:80:1b:
44:d8:b8:68:83:79:18:77:c1:d2:20:a2:be:d5:07:49:4b:90:
3f:2a:72:33:15:15:d3:21:a5:e6:38:a8:a1:5f:88:70:75:30:
66:44:e4:f4:89:d5:db:1a:7a:44:03:73:ad:e6:c4:1c:a4:c0:
f8:5a:1f:28:40:0c:1c:5d:f7:e9:10:df:9d:b3:39:d5:56:d3:
52:e4:b1:7b:5f:5c:1d:5c:27:fd:b2:d5:15:ad:c8:21:83:3e:
5b:c6:9c:62:0c:ba:56:0f:56:db:7b:be:1f:04:e2:2f:d3:35:
1d:89:b5:ee:05:dc:a3:54:b7:b5:3a:17:90:7b:e8:0e:94:2c:
78:20:da:7e:6c:67:17:9e:fa:7b:b0:ff:77:be:23:26:6f:4a:
e4:c3:62:09:a0:45:42:dc:a9:89:e2:93:e8:09:01:e8:73:2c:
98:e5:75:7d:28:c6:01:7d:f0:9b:c5:23:55:dc:89:f3:cf:f6:
d6:c1:16:3d:37:77:dd:5f:19:2b:a5:56:7a:56:4a:a9:b3:9b:
2c:6f:55:79:b7:e7:4a:77:61:92:4b:fe:53:f5:f4:f3:43:dd:
0d:ef:d1:be:99:1a:7d:69:e6:4d:3a:e9:50:fa:04:2d:00:85:
bf:66:0e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:57:58 2026 by rpki-client