
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ef19ef24-8678-338e-89e4-5d335347c4a6.roa
File: ef19ef24-8678-338e-89e4-5d335347c4a6.roa (raw, json)
Hash identifier: bVzwWmj8Bm8Y5JRs/Jseb1NdfdaOSFwCGy3/806QijA=
Subject key identifier: 5A:2C:66:42:03:BC:58:26:6E:24:10:0C:C2:60:9E:92:39:FE:A3:31
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E0999C001A957446859600
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ef19ef24-8678-338e-89e4-5d335347c4a6.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 99.197.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:99:9c:00:1a:95:74:46:85:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=2ad9d37b-72f2-4c28-8673-3f5ce54738c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a6:44:b5:bd:5e:53:cd:cc:01:39:dc:cd:04:
4c:71:3c:02:0e:0d:da:bc:1b:95:f4:20:3d:ab:b1:
da:6d:43:ab:bb:3e:f2:9f:13:64:ae:33:17:93:f0:
b4:75:74:df:bb:12:51:81:75:fb:d8:a8:aa:ac:db:
f9:ce:64:26:29:09:bb:fe:a4:1b:be:2f:1c:21:38:
90:99:2c:a2:9f:6d:85:95:90:33:30:a5:8c:ac:82:
fa:02:c0:31:8d:42:da:db:d9:30:db:33:ef:97:05:
b2:df:dc:a1:31:ba:b0:b2:97:3e:d2:66:be:3c:18:
95:7b:e7:45:79:ab:c4:95:e7:fc:b1:77:8a:f1:ac:
78:8e:35:95:c0:1e:02:d0:17:f2:fc:15:00:95:e7:
51:56:90:8f:e3:28:da:5b:94:1e:c1:ae:33:47:b7:
00:16:28:0c:7a:b5:5d:0c:d7:24:f9:59:0b:63:05:
6d:18:df:3f:13:fb:2e:9d:c4:c0:1f:e8:13:d0:22:
07:35:2d:6d:46:c9:31:bc:f8:c8:ea:96:0a:fb:1f:
55:53:a9:5f:59:19:46:90:6d:ae:7d:5b:6b:2c:29:
74:43:43:3b:53:4d:d8:22:1c:ef:7d:06:45:41:17:
10:23:2a:2d:8e:c1:fc:dc:c7:53:d9:22:8f:7d:d4:
e1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2C:66:42:03:BC:58:26:6E:24:10:0C:C2:60:9E:92:39:FE:A3:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ef19ef24-8678-338e-89e4-5d335347c4a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.197.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:a4:1e:08:43:43:20:5c:63:a6:47:88:96:f3:b1:a0:c2:98:
94:4a:a4:3e:e5:7d:25:2e:1b:d1:ba:17:68:c5:3b:04:38:93:
79:37:71:cc:a6:4a:31:84:0d:60:dc:ec:4c:ef:df:db:70:93:
62:d5:7a:32:b7:f0:69:a7:bf:9b:75:30:11:1a:cd:cc:fe:c1:
2c:20:5a:c3:a6:e5:79:85:15:32:29:9c:74:b1:99:93:82:33:
52:6c:40:10:45:f3:d0:34:39:31:52:d6:a6:15:8e:9f:12:ba:
97:87:a5:ea:48:1f:59:df:7e:17:bc:b6:b8:2f:3f:79:37:6e:
b7:72:4b:5f:24:0c:39:08:c5:00:96:03:d9:9f:c6:f8:cf:9c:
e4:79:2c:41:23:72:ab:48:52:03:b2:73:e5:7b:4d:b4:a6:7e:
2a:27:43:d2:c2:68:5b:f4:08:fd:3d:7d:e6:86:81:e6:95:5a:
78:dd:1d:25:12:1f:45:90:25:ad:b4:68:eb:e3:f0:c4:dc:52:
cf:31:7c:58:34:03:0b:dd:2c:b7:0e:08:9d:25:d3:d4:d7:37:
db:db:d6:76:ce:b1:1d:17:ab:4d:23:ee:7a:24:fe:12:26:1d:
24:52:0b:d0:0f:ed:90:02:f8:12:ee:4e:17:1e:94:b2:94:24:
4f:41:d1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:34:51 2026 by rpki-client