
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d088cf82-1e93-3d9c-8d4b-eb4785f42458.roa
File: d088cf82-1e93-3d9c-8d4b-eb4785f42458.roa (raw, json)
Hash identifier: QmEcOJUdt6jvpFGbIt0YDkaq/6JghLpggwJ25WzSS80=
Subject key identifier: BF:F4:8D:9B:49:93:2A:94:04:32:76:B7:5E:63:38:4C:88:98:09:1C
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F497B692AA8F755BD2429E740
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d088cf82-1e93-3d9c-8d4b-eb4785f42458.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 99.197.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7b:69:2a:a8:f7:55:bd:24:29:e7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=5c5f8d26-12c2-49ab-ad74-673cbd7bd80b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bd:85:d5:34:37:31:9c:5f:5a:6c:81:ad:d2:
b9:77:9f:e6:3f:a1:7a:92:dc:9b:69:e8:67:67:a5:
f0:8c:ca:e3:18:59:67:d8:5f:f5:fd:b6:ff:6f:7f:
f2:ca:41:b1:b5:d8:08:7c:a9:34:85:44:2c:dc:16:
06:20:c1:2a:f1:c7:3d:cc:a5:4a:ba:81:32:4b:7e:
6b:66:dd:ac:11:b3:a5:d9:2d:bc:12:c5:f1:ec:51:
9a:05:e0:48:c6:e4:af:4f:b6:b6:ec:6d:42:63:d9:
a4:b8:c0:5b:66:0a:64:e4:22:58:c9:9e:4f:c8:54:
e8:91:05:cd:6d:b4:66:f7:1f:67:a9:50:24:bf:bd:
f9:a4:b9:f7:c0:ed:f1:45:c9:9c:34:45:a1:d2:37:
ea:9b:92:50:3a:c4:df:e0:15:42:0d:bc:bc:a0:33:
61:0e:7b:83:c0:08:2e:73:5d:33:b8:5a:4d:e5:0c:
f1:93:70:18:d6:c9:f9:e6:fe:35:00:72:c6:ab:a0:
53:4b:88:ba:36:ce:35:05:4a:66:5d:ff:92:6a:f7:
da:35:f4:87:8a:24:ce:6d:bb:67:47:7f:92:c6:e4:
7b:cd:df:c2:b4:64:63:69:d4:7e:96:73:79:ca:d2:
a8:31:c7:3b:f2:e2:8e:39:1c:06:ec:77:d5:c2:e0:
79:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F4:8D:9B:49:93:2A:94:04:32:76:B7:5E:63:38:4C:88:98:09:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d088cf82-1e93-3d9c-8d4b-eb4785f42458.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.197.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:f5:3f:4e:d3:b1:b6:9a:f1:b0:94:d9:99:b0:f4:1d:48:d8:
06:12:c9:c1:7f:5c:1c:e4:d9:e8:4d:f3:dc:10:53:e5:ca:13:
02:d8:ec:7e:61:e0:97:d4:b3:d4:7b:20:8e:0f:8c:22:5c:cf:
57:d4:79:4b:2f:cc:2f:6d:36:53:5b:57:b5:f0:cc:51:7c:62:
45:a1:bf:b0:f3:1b:d3:9b:e5:c2:00:34:38:a3:f2:9f:ca:50:
09:7c:30:b0:4a:49:15:c0:11:cc:f6:9b:64:e1:cb:5d:41:84:
7a:d0:09:bc:0c:dc:b1:38:c0:9c:86:1d:d2:ba:88:e0:55:4e:
e1:ba:dc:4f:a0:06:16:74:b5:c9:78:61:58:8b:43:ae:26:06:
b6:23:0a:a3:ab:67:bc:05:28:82:22:6a:55:51:81:42:9a:1c:
a4:2d:eb:1d:b9:76:6f:3d:cd:14:7a:ed:5c:2e:d3:0c:79:04:
c8:23:89:1a:94:d7:2d:0f:de:52:67:dc:55:1a:15:7a:65:37:
21:26:27:57:ec:69:45:1e:a9:4a:55:ba:10:c2:9e:0b:d0:fe:
de:cb:ab:ca:11:01:a3:46:69:83:1a:c6:29:d6:d5:48:38:06:
90:38:24:74:83:62:9f:c2:07:5a:f7:fc:f1:b8:64:41:c7:7a:
43:76:f5:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je2kqqPdVvSQp50AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NWM1ZjhkMjYtMTJjMi00OWFiLWFkNzQtNjczY2JkN2JkODBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmb2F1TQ3MZxfWmyBrdK5d5/mP6F6ktybaehn
Z6XwjMrjGFln2F/1/bb/b3/yykGxtdgIfKk0hUQs3BYGIMEq8cc9zKVKuoEyS35r
Zt2sEbOl2S28EsXx7FGaBeBIxuSvT7a27G1CY9mkuMBbZgpk5CJYyZ5PyFTokQXN
bbRm9x9nqVAkv735pLn3wO3xRcmcNEWh0jfqm5JQOsTf4BVCDby8oDNhDnuDwAgu
c10zuFpN5Qzxk3AY1sn55v41AHLGq6BTS4i6Ns41BUpmXf+SavfaNfSHiiTObbtn
R3+SxuR7zd/CtGRjadR+lnN5ytKoMcc78uKOORwG7HfVwuB5zQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL/0jZtJkyqUBDJ2t15jOEyImAkcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDA4OGNmODItMWU5My0z
ZDljLThkNGItZWI0Nzg1ZjQyNDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8UOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEj1P07Tsbaa8bCU2Zmw9B1I2AYSycF/XBzk2ehN89wQU+XKEwLY7H5h
4JfUs9R7II4PjCJcz1fUeUsvzC9tNlNbV7XwzFF8YkWhv7DzG9Ob5cIANDij8p/K
UAl8MLBKSRXAEcz2m2Thy11BhHrQCbwM3LE4wJyGHdK6iOBVTuG63E+gBhZ0tcl4
YViLQ64mBrYjCqOrZ7wFKIIialVRgUKaHKQt6x25dm89zRR67Vwu0wx5BMgjiRqU
1y0P3lJn3FUaFXplNyEmJ1fsaUUeqUpVuhDCngvQ/t7Lq8oRAaNGaYMaxinW1Ug4
BpA4JHSDYp/CB1r3/PG4ZEHHekN29YU=
-----END CERTIFICATE-----
Generated at Sun Sep 27 14:50:24 2026 by rpki-client