
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bb90c997-b5d6-3385-ba3a-2e034fbacef1.roa
File: bb90c997-b5d6-3385-ba3a-2e034fbacef1.roa (raw, json)
Hash identifier: s1Gz8AeMhsX4y+KetTb9dny/2EEFybIKfkBhAHyu8Mg=
Subject key identifier: 46:8E:87:FF:55:58:54:2A:34:87:B4:88:4C:29:BF:58:0F:AE:12:91
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24DFE3DAE8477A13A0BE0BC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bb90c997-b5d6-3385-ba3a-2e034fbacef1.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 99.196.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:e3:da:e8:47:7a:13:a0:be:0b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=02018ff3-264d-45e3-96b4-d64f8577aa1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:63:b4:39:cf:37:4c:5f:0a:ef:f9:38:14:e6:
9d:27:bc:69:72:d7:26:b0:13:bb:e6:38:8f:7d:01:
4c:23:41:03:75:ac:f6:03:a8:f4:d0:00:73:22:10:
0b:b0:90:35:69:ba:f6:58:6d:a9:f8:fa:b5:aa:0b:
d2:58:f8:3f:20:55:d5:bd:45:33:e7:7c:47:c9:b5:
b6:3e:4b:22:69:49:c8:c4:6b:54:0c:cf:d6:6a:3c:
8d:a7:4a:58:9d:a8:31:e8:30:ed:ff:57:44:55:26:
07:c6:70:3b:35:e1:cc:7d:09:16:1d:fe:e0:bb:bb:
1a:c9:0f:30:24:37:03:a6:01:2e:da:24:4e:20:e4:
bd:a6:08:44:c9:fd:d7:da:9e:70:73:73:2b:30:87:
ea:49:fb:af:0a:29:b9:0b:a5:50:14:f9:96:27:9d:
91:e9:51:de:4f:78:ff:4f:e8:65:47:60:02:28:64:
6d:2f:d8:13:0e:ae:79:27:73:9f:99:67:b1:1d:10:
21:cd:85:59:92:60:46:fe:f2:35:4f:61:dd:4f:0d:
58:d6:34:4a:23:bd:36:08:ed:ac:b5:98:f8:44:88:
38:31:90:f9:9c:f3:c2:eb:21:6e:22:b6:84:1f:6a:
41:5b:7a:7a:05:f2:20:ae:14:8c:75:fd:03:ed:c0:
57:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8E:87:FF:55:58:54:2A:34:87:B4:88:4C:29:BF:58:0F:AE:12:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bb90c997-b5d6-3385-ba3a-2e034fbacef1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.196.144.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:74:f1:0c:f9:a3:b1:f5:95:4c:93:2a:56:44:38:bc:a3:e1:
51:fa:75:24:f1:1b:f8:44:6e:52:ad:e5:6f:8c:88:82:da:82:
61:d6:a7:bc:7a:92:68:cb:de:ca:e1:66:8e:64:41:35:74:e7:
cc:bd:75:c2:95:45:39:48:97:13:f3:75:21:89:8d:63:4b:92:
2c:8b:98:26:93:61:18:02:57:1e:de:98:d0:89:ea:be:19:24:
04:76:5f:c9:1e:3f:5a:d1:c0:96:f3:7d:15:88:4c:b0:fb:6c:
cc:be:a4:35:3d:2a:8f:8e:e1:fb:c4:31:6e:31:c5:91:ab:9f:
98:ab:93:ed:47:92:23:29:38:0a:f9:94:10:b5:f5:f6:72:34:
43:04:f5:b2:27:e4:92:bd:70:0c:85:a8:49:15:53:a9:d7:52:
27:4e:5b:45:c7:ba:38:07:6f:07:22:c3:aa:9c:3e:97:17:ef:
65:1c:c0:d9:23:e0:3b:00:8a:65:5c:e2:31:5f:66:f0:7a:76:
70:04:7e:d0:c3:fd:5c:47:f0:ab:cf:bc:86:94:f3:d5:89:78:
55:1b:31:fd:66:bf:93:aa:c1:1e:0b:f8:82:7d:22:7e:bb:7b:
1a:b0:c4:42:e1:14:3b:3d:e5:81:ad:47:c3:77:08:fb:9d:02:
ab:0d:da:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:05:11 2026 by rpki-client