
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ac441189-ce19-3c68-a097-40a704c50d97.roa
File: ac441189-ce19-3c68-a097-40a704c50d97.roa (raw, json)
Hash identifier: r5bsTI472ywObMNaaxZV9KUsaO15/eaY4m3/rJfhE3k=
Subject key identifier: 99:68:03:18:A7:24:B8:ED:BA:44:32:22:8A:3B:BE:D0:4A:69:51:36
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24DFEAD9FE9C5DCCFB35EE20
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ac441189-ce19-3c68-a097-40a704c50d97.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 99.197.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:ea:d9:fe:9c:5d:cc:fb:35:ee:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=e6df9e26-7995-4279-a3f9-2ba9bdc35af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:53:33:ab:56:a0:f6:1a:2b:ee:70:40:dd:96:
f9:6e:ba:cf:d0:1e:54:d7:8d:61:f6:26:6f:16:de:
47:1a:5c:76:ae:c4:28:23:4a:ed:cf:f3:f8:46:5b:
74:50:27:3c:47:90:0e:0d:b7:1e:cf:90:35:0c:e6:
5a:89:f6:a7:3e:ed:51:bb:7a:59:8e:ff:20:8f:86:
41:bb:40:1d:f5:56:ad:1c:e6:cd:a7:f2:b7:c9:bb:
6d:85:94:fb:8b:8d:29:2a:1a:01:cb:95:c7:e7:3d:
52:86:d4:14:12:9c:60:5b:0b:50:69:44:0d:c4:55:
2b:35:65:bf:d5:95:cc:89:10:73:12:92:5f:bf:6a:
bb:ac:df:76:37:a0:13:6b:26:59:b1:0e:d4:ef:56:
18:02:45:07:a0:5d:2a:47:bc:f4:19:06:e5:32:ee:
72:04:26:18:d3:24:5d:fd:65:3b:fe:0e:0c:e1:64:
8d:5a:b2:ea:4f:5b:96:8a:e4:91:13:c3:2d:d4:02:
89:88:6c:b0:4f:4a:66:d5:bd:25:5c:4a:96:12:03:
52:68:80:8c:25:61:0d:5a:13:1f:d2:8a:d5:43:20:
b1:21:98:44:48:02:5a:41:a0:04:ef:e3:0a:9d:13:
07:eb:be:32:3c:e8:ce:1a:70:37:ac:7f:75:a4:62:
af:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:68:03:18:A7:24:B8:ED:BA:44:32:22:8A:3B:BE:D0:4A:69:51:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ac441189-ce19-3c68-a097-40a704c50d97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.197.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:80:d1:a8:c3:e6:11:22:14:c7:a6:49:0c:4f:fb:65:b5:4c:
82:37:54:00:d0:4f:79:d9:0b:96:70:ad:f3:f3:4c:df:03:47:
22:f4:9f:65:68:3b:ac:00:9a:a1:7c:04:c5:7a:b5:f9:cf:f0:
4c:c0:3b:7f:a1:c1:1a:91:34:9c:aa:7c:82:dd:97:89:14:d9:
0f:7d:56:1f:42:38:bb:64:67:f5:fa:6d:9a:d2:4c:17:99:df:
3f:4a:92:b2:c9:84:ba:8c:32:11:c2:39:70:69:8c:1a:0d:de:
43:03:56:90:b7:c2:25:09:09:4c:5b:17:57:43:36:3a:2a:df:
7f:71:03:21:0b:cd:66:26:69:d7:4c:76:57:59:10:f9:90:6e:
d3:58:9c:aa:48:c7:54:19:5e:33:20:5e:d6:81:6b:49:a6:1c:
f1:84:9a:ce:db:c0:60:3a:02:82:a4:0a:f7:b9:17:15:78:38:
4b:1a:17:c1:b9:be:ae:10:e5:e6:92:86:80:54:86:11:54:07:
5a:52:96:c3:a7:98:a2:d6:d4:db:7e:13:01:3b:a3:75:7c:d5:
c8:1c:52:70:2e:fd:6b:3e:b0:4d:01:55:f1:cd:88:e2:55:ac:
93:22:ba:fa:cc:2f:4e:36:27:fd:08:2c:b5:79:36:a2:02:71:
fe:86:4b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:36:40 2026 by rpki-client