
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dcf41ccd-39d4-3d66-a43d-f7951671efc3.roa
File: dcf41ccd-39d4-3d66-a43d-f7951671efc3.roa (raw, json)
Hash identifier: 7VPvHkdMwfKKmxzVJOgoHfscWW9XhzNaOV3eE2MLTzo=
Subject key identifier: 20:25:21:2B:A3:A0:30:9D:68:C4:CD:52:D3:0D:C6:D4:01:38:30:06
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24DFE0E3FA0CAF5EFA389980
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dcf41ccd-39d4-3d66-a43d-f7951671efc3.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 99.196.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:e0:e3:fa:0c:af:5e:fa:38:99:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=81c11d1e-96e9-499c-9833-f3ffbd74077f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b1:71:5d:a7:5e:98:2c:7d:02:df:15:42:9e:
24:e0:11:c4:31:74:c1:1c:07:b3:8f:0a:e2:1b:ab:
ee:f4:d7:b4:d0:ec:db:15:25:cb:a8:e2:ec:c4:fb:
ea:7d:60:2c:a7:8b:b6:7c:94:19:ce:3f:bd:e9:42:
65:98:33:24:1c:7d:48:47:68:87:b4:51:77:4b:7b:
f9:80:09:16:d1:6b:67:bd:fd:1c:df:32:7a:3a:08:
9a:6e:a5:1a:21:80:d3:31:50:02:c9:5b:d8:52:cf:
4a:1b:81:62:f2:bd:12:c5:df:c1:57:2d:b4:58:9d:
37:19:80:56:75:3f:ca:e2:27:a5:b2:12:12:65:7f:
02:24:3a:da:06:bc:c0:a4:ea:af:9f:29:11:9c:78:
4e:5e:cc:05:c9:59:ef:73:76:fd:78:e2:65:a9:97:
18:87:36:7f:08:41:dc:a2:2b:94:3d:f0:29:3a:f1:
57:db:49:6b:00:46:c7:99:a6:9c:5c:08:9f:8b:e1:
a4:74:9c:32:ad:ca:77:e5:08:0f:ae:e3:ac:e8:9d:
7c:61:83:65:0b:5b:09:fc:26:a0:93:44:27:c2:8d:
d8:ab:8c:57:1b:00:25:31:27:b3:04:dc:06:92:a0:
10:46:ab:d7:df:b5:9b:77:98:f8:b5:cb:33:ec:7f:
36:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:25:21:2B:A3:A0:30:9D:68:C4:CD:52:D3:0D:C6:D4:01:38:30:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dcf41ccd-39d4-3d66-a43d-f7951671efc3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.196.50.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:33:17:6e:56:a7:d1:ce:76:82:68:84:b7:1c:c6:fe:96:eb:
89:d4:b8:65:18:66:62:6f:75:f4:87:73:c0:3c:14:fd:04:35:
02:8f:5c:ca:80:1c:b8:3c:18:30:95:38:de:58:ad:27:3c:3e:
b7:e7:58:0a:f3:04:b2:ea:c3:cc:dc:6b:b7:8b:39:e8:99:9e:
66:bd:7f:6e:75:ff:93:09:09:99:05:ee:8f:15:ca:d3:dc:75:
a8:7e:23:b1:84:61:64:f4:52:5f:b1:9f:fe:7a:7d:15:4e:16:
48:8f:d7:6c:0e:a1:95:e0:93:87:90:32:75:16:3e:49:0b:be:
4b:cd:0b:fd:52:0f:6a:14:d6:83:0a:89:96:46:61:d6:da:e1:
37:18:0e:86:0c:ec:06:d3:21:7e:01:72:67:12:bf:46:66:f1:
2d:1a:8b:57:be:35:91:d9:8b:2d:40:c7:6a:b6:d5:04:9f:23:
b9:00:39:ae:b4:fc:9c:1f:f7:31:81:cd:3d:de:a6:23:8f:f7:
f0:54:f9:14:35:11:bb:6c:c3:8d:c2:6c:32:9d:26:c9:0e:d0:
b8:d0:32:f8:fa:3a:c8:5c:b4:25:c2:08:6a:69:e9:77:76:0f:
4a:de:fb:99:2c:71:eb:2b:2f:e2:be:03:a4:da:ff:ef:67:ec:
2c:b6:81:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:44:12 2026 by rpki-client