
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/933d8bbb-69dc-3ccc-aee9-3fcde5168198.roa
File: 933d8bbb-69dc-3ccc-aee9-3fcde5168198.roa (raw, json)
Hash identifier: YOWJsemy9TEn8gNFL4sGestM9vCvEn8nS0N/O3DCeBc=
Subject key identifier: 8A:9E:EB:8B:F0:9E:F6:A9:AE:4F:FA:34:EC:D7:E0:5F:17:AF:3B:F3
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24DFEF340ADE9A4440BFB300
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/933d8bbb-69dc-3ccc-aee9-3fcde5168198.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 99.198.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:ef:34:0a:de:9a:44:40:bf:b3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=7a5efb77-bc68-4bb6-807f-39892068518f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fd:28:f1:9f:67:e0:c6:a8:ab:1f:20:95:d7:
18:97:87:51:33:2c:b1:79:73:4a:b4:c2:06:d8:4c:
5a:96:a8:33:ed:04:37:69:75:9c:02:e9:54:b7:1c:
ad:5a:5c:f1:a4:76:4a:b1:20:82:6c:97:f1:2e:b8:
c2:9f:4c:04:4f:a1:d7:e2:f1:e8:e0:12:57:34:3f:
a1:7f:89:7c:61:87:b5:a7:19:28:4e:aa:04:da:90:
24:be:f1:fb:d2:23:69:1a:d8:34:2a:ec:a5:95:4e:
9b:cf:de:f0:dd:09:37:3e:1b:87:02:2a:0b:4c:7e:
23:86:56:bb:1b:48:71:b7:cd:31:1b:ab:50:61:50:
91:e3:e3:f5:a0:69:a0:78:74:a2:89:1e:d1:ad:35:
d1:7b:c3:28:94:3e:7b:fd:06:6d:fd:26:05:5e:e8:
81:c2:0b:a5:2e:1e:e2:5d:97:d0:1b:0b:e4:6a:16:
d7:51:52:1f:07:82:39:ac:09:35:aa:65:46:65:a1:
55:1c:a6:e2:ca:ed:aa:c6:87:ac:1d:d6:a3:63:5d:
f8:4b:48:47:37:4b:a4:b3:60:9f:31:5c:af:e4:4a:
d9:55:b1:f0:8f:2b:e6:c1:3c:bb:9f:7f:70:a3:4f:
09:f1:89:7d:40:6d:cb:7e:1d:d8:9c:a7:3b:08:ca:
d6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9E:EB:8B:F0:9E:F6:A9:AE:4F:FA:34:EC:D7:E0:5F:17:AF:3B:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/933d8bbb-69dc-3ccc-aee9-3fcde5168198.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.198.43.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ca:ef:9c:29:17:b3:51:5f:39:55:c1:d6:dc:84:ac:40:5d:2d:
05:0c:87:de:8c:44:e3:5f:1c:ef:cc:ad:14:e5:73:52:59:bf:
0d:07:24:3b:e5:a5:cc:73:28:af:fe:10:a1:e8:f5:71:80:c7:
de:54:85:c1:18:54:ac:5e:35:39:3e:7f:fd:a9:ca:76:5f:fc:
de:10:60:62:49:3c:a5:5b:76:1d:cd:35:b2:04:7c:20:48:6b:
4f:ce:86:52:d3:31:89:bb:61:4d:14:fd:09:8f:c7:e7:5f:1c:
1c:2e:9d:10:fa:10:2b:dc:59:e5:ae:fa:ef:8f:f5:f3:30:71:
e9:e5:3f:c5:7c:b6:fc:4b:6b:0e:6e:ab:d1:09:cc:f6:e8:07:
5b:a7:52:60:28:c4:ca:93:f3:d9:24:a2:e9:cf:ce:d4:4c:66:
3e:48:87:7e:f2:43:be:7a:7b:e3:45:6d:11:9d:9f:ee:28:fc:
20:1e:a9:66:04:9e:39:1f:ee:f7:2f:6e:5d:14:3f:28:bc:df:
9e:92:e1:ee:c1:cc:81:a0:01:cd:19:6a:d1:11:d7:b3:17:fc:
f6:bd:3a:77:ff:38:86:70:9b:09:b2:17:cf:b0:dc:5e:0c:1f:
36:eb:2d:4c:98:d9:56:b0:a8:24:3b:4a:3a:31:f2:92:cd:8f:
f3:bf:9f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:09:05 2026 by rpki-client