
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/67e855bb-5af6-3fbb-954e-14f3fdede1fd.roa
File: 67e855bb-5af6-3fbb-954e-14f3fdede1fd.roa (raw, json)
Hash identifier: LmhS65CcS0z9PHEchzRSgKVFngcL2dwFeqFbMwJds3s=
Subject key identifier: EA:2B:F5:EA:4C:4F:08:A4:2E:30:10:11:48:DF:23:33:D4:0C:5E:33
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24DFE56C9A4688B800195200
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/67e855bb-5af6-3fbb-954e-14f3fdede1fd.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 99.196.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:e5:6c:9a:46:88:b8:00:19:52:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=94897d56-64c2-47cf-a886-649d18c0f831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c5:2d:42:3d:f5:25:85:07:f1:9c:bd:74:87:
60:9e:e0:20:00:61:b3:8e:9c:d8:58:0f:39:d3:0f:
dc:2b:e7:8d:b7:6b:7f:71:8b:7b:fc:a5:09:6e:79:
06:e3:60:52:b1:53:7c:b1:3e:65:65:17:c1:eb:d7:
f4:84:fa:dc:62:db:73:81:21:ac:05:96:bf:50:2e:
a2:e4:12:a9:c8:5b:d0:21:fb:68:63:f6:e1:3b:e9:
6c:1e:de:19:73:e3:5d:82:e0:16:dc:b8:2f:b2:95:
c0:4b:c7:98:ed:36:ca:8f:af:fb:5e:a6:e3:24:03:
39:21:2f:ff:19:fc:ba:cf:2b:6b:e9:41:5b:6f:cd:
9b:fe:2f:56:1e:d5:08:cd:8a:25:71:84:ce:05:ce:
e0:fe:c6:71:3e:25:ee:77:82:c7:d2:d6:6e:19:57:
61:2a:0e:a0:3d:ad:c3:b7:e4:3b:22:20:56:d0:a9:
73:93:90:ab:1b:a3:f0:c8:f4:ee:de:49:19:a7:40:
a9:10:f6:ae:ad:c1:30:f9:29:66:4f:b6:7c:42:73:
62:f1:3a:bb:a0:40:c0:b9:2d:b8:ac:c8:1a:14:f6:
5f:1e:1d:7e:56:a5:0a:f7:88:3b:bf:64:6f:14:27:
e4:bd:c1:de:90:07:79:81:c5:8c:6c:63:ec:70:68:
f2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:2B:F5:EA:4C:4F:08:A4:2E:30:10:11:48:DF:23:33:D4:0C:5E:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/67e855bb-5af6-3fbb-954e-14f3fdede1fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.196.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:bf:c4:a0:3f:f9:f4:26:f1:cb:de:c3:18:dd:8f:c6:4e:79:
90:f8:3d:f5:80:df:96:f3:ca:6f:19:f4:72:75:c0:03:1f:4b:
1f:29:45:bf:c4:2d:a5:24:34:9f:e8:0b:91:46:32:32:e0:1f:
7b:38:fc:0a:0f:8b:9a:d9:6c:a2:75:db:4f:c6:38:80:96:08:
97:0e:53:cf:e3:c8:0c:5d:4c:23:02:c8:1b:56:c7:c0:bd:a7:
76:f3:f6:6a:1e:f7:42:47:33:b0:9d:8f:89:83:19:aa:f4:64:
04:cb:2e:7b:1b:52:b3:1f:54:2a:c8:0a:8c:56:7e:22:ce:c1:
5b:73:2f:f6:43:4c:21:67:d8:ba:83:23:27:22:d0:1b:69:6e:
20:9e:3e:8e:25:12:df:82:6e:21:e3:af:53:fc:20:48:7e:36:
70:46:04:92:c4:b6:c8:2c:05:a8:a5:f7:fd:25:ff:74:bc:7e:
82:e8:80:48:38:ae:cd:4c:6b:dd:af:9a:00:45:d3:74:75:7a:
ec:95:5e:9a:a6:0b:2f:6b:0d:c8:c0:98:7c:a6:82:31:55:01:
53:3b:38:54:89:65:84:61:b7:7c:b6:9c:85:79:9f:ca:54:da:
e7:e9:7a:d5:2b:84:ed:41:65:7c:91:3c:53:18:7d:b8:08:f7:
77:2c:25:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:19:41 2026 by rpki-client