
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/73bc65a7-da6e-30a7-9dd8-ba6611cac928.roa
File: 73bc65a7-da6e-30a7-9dd8-ba6611cac928.roa (raw, json)
Hash identifier: +VITB4YmSQM474WOOkFJL3SEf+vTbRPrkxF4w/OWck8=
Subject key identifier: BD:FA:4D:D7:C1:0A:6D:30:1F:98:9C:72:B5:29:CF:49:FA:27:81:65
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E09CB8E73D3D8D73908680
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/73bc65a7-da6e-30a7-9dd8-ba6611cac928.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 99.197.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:9c:b8:e7:3d:3d:8d:73:90:86:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=1e36ca8c-c32f-4fca-b5c4-254830fe194e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cd:8d:23:a6:97:5b:ed:28:67:42:fa:30:24:
d7:65:ec:26:05:51:74:ab:b2:20:33:93:ac:8d:9d:
ae:41:d2:2c:e0:2e:17:4d:2c:8a:a6:97:93:85:5a:
f2:56:92:65:28:6e:ff:35:c4:68:a4:aa:0a:2d:8a:
61:85:23:ba:4a:61:92:95:69:d0:bf:76:0c:82:36:
6a:29:37:ac:b8:1d:d7:ec:34:2c:23:ac:82:ca:9f:
0d:4e:84:e7:0f:6a:2d:9c:ef:4c:6b:53:59:9c:e5:
72:ec:47:04:f7:be:cb:99:39:f2:cb:2e:f6:4a:6f:
06:84:a6:7f:86:d2:f9:b3:37:f0:e1:78:bd:0c:e9:
10:e9:74:22:0b:52:6b:1c:81:b7:64:39:35:15:9d:
b9:12:c4:25:81:f9:19:87:8d:7d:06:a9:9f:5d:a1:
56:f7:b9:dc:33:0a:2e:f0:2a:0c:3e:af:7b:e5:8a:
da:f7:31:d8:cc:94:a0:05:ab:eb:cc:04:19:cf:bf:
84:af:31:f7:c6:87:5d:62:80:5c:62:ce:15:e1:5d:
09:0e:e2:33:c7:0f:65:bd:52:b6:54:fd:01:b5:49:
de:17:4d:48:b0:f9:c3:c1:d2:7d:0f:4b:b4:72:09:
ec:9f:96:c5:5b:7c:22:b0:0a:23:b4:8c:90:10:2a:
ad:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FA:4D:D7:C1:0A:6D:30:1F:98:9C:72:B5:29:CF:49:FA:27:81:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/73bc65a7-da6e-30a7-9dd8-ba6611cac928.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.197.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:ff:ec:35:31:ba:5a:f6:d7:fc:55:66:22:b0:6f:87:cd:b0:
a8:92:19:d9:f9:71:59:f9:af:0c:3e:20:9d:e1:fd:04:0a:42:
34:f9:fb:bb:fd:67:73:ce:f4:7c:3f:9c:39:23:59:8e:78:0a:
d4:c6:f2:a4:4b:32:fa:12:2c:33:87:03:fc:e2:03:2c:b1:96:
78:57:e9:ea:85:33:97:fb:d6:1e:ef:db:48:d1:fc:df:ed:b0:
f5:a0:72:08:4f:c9:e5:b7:f2:47:a3:27:f9:a4:b8:cc:82:03:
9c:6e:4a:f6:d0:24:1e:60:bf:32:9f:c9:45:95:fa:e0:43:a8:
a2:31:b8:38:0b:ee:c9:2b:da:54:66:07:ed:41:85:c2:e4:bc:
46:ff:3c:0a:35:8a:2b:1c:ab:29:b1:7f:00:26:52:15:dc:ea:
fd:54:9e:35:c5:bf:65:a9:0c:3b:6e:b6:42:e7:c7:24:d8:19:
7a:02:d3:4b:15:d1:af:6f:60:45:70:b2:a8:a0:6a:be:52:d7:
c0:7b:ca:33:6a:27:1d:29:1b:a9:cf:1b:a6:cb:b8:74:5d:c3:
7d:61:24:10:a2:ec:2e:0f:9f:8a:3c:57:2e:62:c3:eb:1e:9d:
42:d2:1b:91:ff:15:e9:13:5f:83:71:c3:6d:72:35:ca:15:2a:
46:7c:d3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:01:09 2026 by rpki-client