
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9be5dca9-6acf-3619-8cd1-321b7fa6283f.roa
File: 9be5dca9-6acf-3619-8cd1-321b7fa6283f.roa (raw, json)
Hash identifier: Rw8TUWegIcifLjW9DidrzV+oafle+dvKZHcy2eMGzNA=
Subject key identifier: 65:A7:6A:7D:A2:EB:22:76:1B:15:37:BC:48:10:30:11:E4:C0:37:98
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E0915F3426BEFBAC45E520
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9be5dca9-6acf-3619-8cd1-321b7fa6283f.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 99.196.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:91:5f:34:26:be:fb:ac:45:e5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=8005daa9-586c-46be-94cd-01c8a6464bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ff:35:c4:65:7b:1b:0c:a2:78:d7:e1:17:0a:
b5:f4:c8:8b:37:60:07:52:e7:70:96:d2:16:60:12:
44:9f:a6:84:ec:c9:3b:a5:96:58:34:cd:46:2c:12:
91:12:90:2c:d0:e5:cc:8c:81:83:e8:75:95:01:f5:
61:e4:bc:8a:f5:4b:a1:5e:b0:41:e3:7c:f1:8c:13:
ce:cc:69:80:b2:0b:8a:6a:5e:02:71:c4:d6:24:4c:
70:aa:e2:7b:c6:ad:70:89:29:9f:c8:6e:8e:2f:fa:
a4:0a:49:5a:7a:fd:f5:ac:89:75:41:db:4b:2a:be:
91:10:e6:98:18:a8:36:55:8e:f9:6d:dc:8c:12:9f:
8e:7d:03:1b:bb:c7:6f:19:ae:cd:c1:01:fc:01:c9:
b8:eb:e0:5f:66:32:52:65:e4:6b:e8:47:87:4e:0f:
02:17:9a:69:85:4c:64:eb:5e:dc:f7:de:a3:65:96:
7d:74:21:ef:d4:9a:1f:1c:38:0f:00:9e:de:b2:cb:
64:25:44:c1:ee:a2:e0:31:5d:37:3e:bf:24:82:a6:
d2:00:84:2d:15:67:7d:d2:e2:d1:3b:5c:f5:cf:64:
8d:63:b1:8a:32:9b:4a:45:01:de:f8:bf:0c:41:15:
10:2d:d8:52:d3:d0:83:c8:86:e3:82:45:98:fc:e8:
f5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A7:6A:7D:A2:EB:22:76:1B:15:37:BC:48:10:30:11:E4:C0:37:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9be5dca9-6acf-3619-8cd1-321b7fa6283f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.196.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:37:8c:5a:2a:02:75:69:dd:2f:37:ad:54:d2:02:ee:6c:46:
2e:eb:70:08:b8:dd:43:dc:a0:bf:b8:1f:d7:6d:6e:b0:41:d1:
23:0c:e3:ce:71:b6:51:a7:36:e3:1b:74:9d:9f:d3:84:7a:bb:
45:9f:97:65:b5:8a:b1:c8:87:11:ac:15:d4:a7:10:45:fd:11:
46:88:b6:51:4f:6c:4e:a5:ac:22:ef:6c:72:7e:94:bc:77:3c:
0d:f5:f7:e2:44:b3:c9:20:1c:fd:35:a0:bd:9c:05:6f:32:4f:
f7:92:25:de:3c:ce:de:2b:7e:8e:87:e6:db:e5:c6:5e:65:07:
18:c6:13:4f:76:0c:8e:23:6d:0f:88:e3:f4:5b:88:a2:d6:43:
8a:84:76:33:a7:e0:58:50:16:ad:2b:2b:44:72:db:b4:98:e1:
cf:84:e9:8c:fe:91:e4:25:f8:a3:61:24:2c:cf:6e:fe:0f:4f:
83:c9:fa:ab:d7:fa:11:37:8a:55:be:df:95:43:df:60:ee:5d:
70:48:44:60:28:8d:94:43:b5:0d:0a:be:28:6d:13:31:07:25:
17:44:f5:01:ea:ca:09:59:40:f5:1d:1d:12:b7:57:7b:5b:aa:
7e:62:69:40:03:1d:9e:79:61:f8:b6:72:b5:aa:94:09:fc:3b:
c2:43:65:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:56:12 2026 by rpki-client