
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b288f3ac-b844-3c3f-9d2b-4e7f0d3d9cf1.roa
File: b288f3ac-b844-3c3f-9d2b-4e7f0d3d9cf1.roa (raw, json)
Hash identifier: 9U2JTB24+IN8Wbq+n/QA5MXavj1JS+d49+noKNIEw1Q=
Subject key identifier: 49:20:FD:26:9B:A5:A2:67:8F:37:A3:B0:45:2B:54:0F:BB:D3:2F:19
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24DFE5AC05B6AEA302B14700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b288f3ac-b844-3c3f-9d2b-4e7f0d3d9cf1.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 99.196.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:e5:ac:05:b6:ae:a3:02:b1:47:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=e161722e-3705-4dee-a404-a6d6e9256621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:03:91:4b:c3:8e:38:fa:26:8c:59:72:d3:e8:
5a:d2:6c:8f:9d:04:9d:00:b7:db:d7:e4:84:c8:10:
5d:be:fd:5d:4a:55:4b:23:8f:97:6b:14:0b:d2:e8:
43:51:f9:41:29:70:3e:66:45:b3:74:c9:32:1f:32:
22:04:1a:88:f0:1b:b6:d6:4d:c5:40:26:d9:d8:e9:
b7:1d:fd:8a:44:5e:a7:4e:de:4d:0d:33:6a:d0:8d:
71:a7:bf:d8:dc:7b:cd:39:13:e0:60:1d:bf:7e:81:
08:46:9b:02:ff:9a:1e:83:bb:9f:b5:b0:fd:79:a9:
47:68:0e:f4:35:07:02:0b:40:3c:fd:73:0f:52:4d:
53:93:10:55:71:c6:dc:b9:f9:75:07:25:9d:7d:9a:
a7:28:f3:b3:73:aa:50:56:40:d4:c4:f3:b2:e4:6e:
f3:34:d6:a2:91:90:d8:44:22:a4:fb:87:7a:3e:69:
48:eb:4e:d2:a1:30:91:00:11:6d:b1:3e:6c:7d:eb:
f8:a3:03:7f:40:6f:f3:33:3c:80:c0:56:eb:d8:21:
1b:4d:98:6d:e9:44:a4:9e:68:82:5b:74:9c:06:20:
0c:29:78:f6:8f:71:38:ec:e9:f3:56:d4:36:72:53:
a6:a2:08:0d:0f:9f:cb:ad:d7:89:c3:3f:68:99:31:
fe:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:20:FD:26:9B:A5:A2:67:8F:37:A3:B0:45:2B:54:0F:BB:D3:2F:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b288f3ac-b844-3c3f-9d2b-4e7f0d3d9cf1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.196.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:b5:26:9b:cb:6c:99:02:10:08:e9:c8:ed:96:62:e8:2c:5f:
ce:82:60:25:af:e9:f5:b5:cd:61:4b:09:ba:4b:76:c3:f1:19:
44:6f:20:e1:30:b8:7f:39:c5:97:cb:d8:e8:db:19:05:a5:fc:
1a:83:b6:7b:26:ce:4f:95:e2:15:5c:fa:e4:dc:0d:dc:27:f2:
89:84:8a:bf:52:19:27:76:79:94:d0:ed:bc:ef:0d:d9:3e:13:
68:df:f1:80:c4:25:c9:eb:e9:af:af:ba:fe:cc:f4:95:2d:1c:
2c:dc:5b:21:49:f2:bc:22:75:ac:4c:b5:33:6d:e8:4d:58:83:
77:1b:3e:11:d6:3f:e4:23:45:12:6e:25:a2:8b:9e:d4:80:71:
38:8b:c5:6f:ad:9e:41:db:df:24:ad:3c:9b:a2:03:4c:45:ee:
5a:7f:44:38:6a:a5:96:aa:29:d6:54:a2:ce:0a:31:a6:82:48:
0a:5e:8b:cd:99:0e:9c:57:6e:34:30:b5:2e:ac:af:bf:aa:e6:
d4:b9:6e:9d:61:d6:ef:59:a5:ea:fc:b6:ad:14:d6:be:4b:68:
3e:5e:b4:c8:c6:9d:aa:8c:55:43:e9:77:cc:54:8c:c3:cf:84:
27:6f:97:6b:ce:aa:8c:bf:b1:24:54:d5:41:32:77:26:24:4f:
9d:2a:af:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3+WsBbauowKxRwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
ZTE2MTcyMmUtMzcwNS00ZGVlLWE0MDQtYTZkNmU5MjU2NjIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQORS8OOOPomjFly0+ha0myPnQSdALfb1+SE
yBBdvv1dSlVLI4+XaxQL0uhDUflBKXA+ZkWzdMkyHzIiBBqI8Bu21k3FQCbZ2Om3
Hf2KRF6nTt5NDTNq0I1xp7/Y3HvNORPgYB2/foEIRpsC/5oeg7uftbD9ealHaA70
NQcCC0A8/XMPUk1TkxBVccbcufl1ByWdfZqnKPOzc6pQVkDUxPOy5G7zNNaikZDY
RCKk+4d6PmlI607SoTCRABFtsT5sfev4owN/QG/zMzyAwFbr2CEbTZht6USknmiC
W3ScBiAMKXj2j3E47OnzVtQ2clOmoggND5/LrdeJwz9omTH+CwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEkg/SabpaJnjzejsEUrVA+70y8ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjI4OGYzYWMtYjg0NC0z
YzNmLTlkMmItNGU3ZjBkM2Q5Y2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8TPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALS1JpvLbJkCEAjpyO2WYugsX86CYCWv6fW1zWFLCbpLdsPxGURvIOEw
uH85xZfL2OjbGQWl/BqDtnsmzk+V4hVc+uTcDdwn8omEir9SGSd2eZTQ7bzvDdk+
E2jf8YDEJcnr6a+vuv7M9JUtHCzcWyFJ8rwidaxMtTNt6E1Yg3cbPhHWP+QjRRJu
JaKLntSAcTiLxW+tnkHb3yStPJuiA0xF7lp/RDhqpZaqKdZUos4KMaaCSApei82Z
DpxXbjQwtS6sr7+q5tS5bp1h1u9Zper8tq0U1r5LaD5etMjGnaqMVUPpd8xUjMPP
hCdvl2vOqoy/sSRU1UEydyYkT50qr3Q=
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:49:48 2026 by rpki-client