
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/785099d3-c1d1-383e-be2a-70aaccc93a19.roa
File: 785099d3-c1d1-383e-be2a-70aaccc93a19.roa (raw, json)
Hash identifier: DfMg/2cwaYt/unxR/dFOsv5roxheUYS5iUViOOOg6d4=
Subject key identifier: 71:27:26:D5:15:1C:E7:C8:03:07:90:35:72:AA:C1:38:05:79:4D:63
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F4983A2779468EB2461F84D80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/785099d3-c1d1-383e-be2a-70aaccc93a19.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 99.197.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:83:a2:77:94:68:eb:24:61:f8:4d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=50b4149c-15f4-4972-83d4-caae40241c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:44:04:a1:41:6b:18:bf:23:5d:d6:b2:1a:71:
dc:6b:57:e3:12:bc:b5:de:65:32:81:c9:b4:00:37:
71:1f:97:e2:7b:86:42:b8:fd:76:ef:15:56:1f:c8:
ed:4e:a1:3b:21:aa:e4:92:8a:fb:f5:e8:84:75:33:
c4:92:e6:55:a6:e0:1f:29:92:e4:d7:5b:07:22:14:
88:07:ca:7a:32:ba:f3:07:77:02:7d:58:8a:b4:d2:
03:72:c3:ea:1a:17:be:ed:52:81:ed:98:9a:39:7e:
09:9a:4e:d0:bc:e9:18:d5:65:d5:63:98:53:19:fb:
6f:a3:3a:d0:75:40:88:31:ca:05:7e:5b:34:36:74:
6e:a2:b1:7c:1e:6c:7d:1d:3c:44:de:40:1a:7e:2d:
e5:e9:9b:9f:39:f6:ee:90:da:c0:60:72:ee:ee:78:
6d:32:7c:b3:da:49:fc:c8:5f:21:ba:b2:87:1c:89:
2d:57:3e:9c:85:2b:ec:90:72:fd:c4:1b:59:93:5a:
d5:58:66:22:a4:5a:68:92:81:b6:ae:7b:c0:35:da:
63:33:96:aa:24:cb:a3:44:e5:83:6f:31:d4:f7:d2:
ae:42:44:e5:d0:83:b1:45:7d:92:97:cb:3b:08:3d:
fd:11:fd:0a:a5:c3:b1:56:57:4b:5f:b2:d4:6f:35:
a6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:27:26:D5:15:1C:E7:C8:03:07:90:35:72:AA:C1:38:05:79:4D:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/785099d3-c1d1-383e-be2a-70aaccc93a19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.197.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:f5:40:34:80:37:21:a1:d0:ae:e9:a7:25:e7:32:e6:94:a2:
43:b8:cb:76:8d:53:f4:03:4a:a6:0e:82:00:0e:3a:96:f1:5d:
cd:77:7e:61:13:56:9e:0b:53:28:bf:49:4c:4d:f2:1b:75:2c:
5e:c7:89:c1:4a:f5:d0:95:55:4a:74:f6:d0:9c:28:db:ee:86:
53:a7:bf:73:76:12:81:52:bd:54:60:27:40:cd:9a:f0:fd:8e:
b0:18:d7:85:d9:58:3e:40:38:4b:99:de:68:fd:e8:5e:45:df:
3e:cd:e5:06:06:a5:fa:d3:f4:a3:31:b3:71:c2:78:40:7a:91:
e7:cb:8a:2c:d9:aa:7e:2c:98:b9:92:f0:29:f0:f7:0f:7e:26:
11:fb:a6:d5:43:a1:6b:44:2c:b6:58:74:64:fb:09:dc:72:9e:
81:30:28:3b:65:dc:12:71:65:44:ac:5e:cd:99:b0:8b:53:e7:
44:47:a7:6c:91:b0:c9:e1:74:0f:1f:23:30:fa:93:1b:5b:20:
f7:a6:c6:35:48:20:ea:b0:f9:73:93:e6:e2:58:5a:cc:03:8e:
a3:77:1e:2c:ad:e2:8e:50:a2:f6:cd:13:20:6a:fe:eb:93:68:
f7:63:ab:d5:45:fa:d4:f9:3e:14:d8:bf:c6:b5:d2:19:71:c6:
f3:4b:85:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:52:09 2026 by rpki-client