
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f4db2647-0872-314d-bbb9-efb990f0ee39.roa
File: f4db2647-0872-314d-bbb9-efb990f0ee39.roa (raw, json)
Hash identifier: ca8jAaNMpaD1SqXS0PCb7wjX4mdSsuSfEOvV39UIfHg=
Subject key identifier: FD:5B:95:CA:04:A3:87:2C:F7:3D:28:A5:CC:E7:05:87:E3:7B:8E:BC
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F49838D4F6931618CCB8B0340
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f4db2647-0872-314d-bbb9-efb990f0ee39.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 99.196.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:83:8d:4f:69:31:61:8c:cb:8b:03:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=42847c9e-34fa-42ec-a85d-b17d9188a20b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:88:5f:60:fd:ec:3b:71:68:32:a5:3f:2a:52:
16:37:95:7f:7b:04:fa:58:57:57:05:cc:12:b9:d5:
41:16:c8:df:b4:e5:04:60:e4:7b:fd:50:56:cf:a8:
67:6e:17:2e:d6:35:87:c5:8a:45:ed:c2:49:10:0b:
6e:4e:cc:a4:b6:fa:6b:13:10:8e:46:6a:e8:c7:9f:
9f:87:dd:d5:89:10:03:01:dd:32:bd:58:60:9a:06:
f3:33:dc:aa:f2:42:f6:d9:fa:f1:c5:a1:f2:e7:58:
fd:11:22:35:05:86:fe:62:8f:d9:16:97:05:04:3d:
da:59:5d:77:66:76:88:50:8b:71:7b:38:97:ef:72:
57:8c:3c:18:bb:1b:49:1e:3d:17:d9:bc:fd:a7:24:
ed:c1:e7:28:b7:4a:c4:2a:64:39:72:61:2d:1a:88:
5d:16:56:ca:f3:57:90:f7:77:77:7c:f0:0b:ab:a8:
20:6a:4d:db:ab:22:d9:02:03:d0:b6:1d:f6:b4:a0:
12:7f:f6:89:36:9d:70:d4:5c:44:7a:87:81:f2:fe:
32:6d:da:fa:db:4d:81:68:ae:d4:a9:7f:ba:1c:28:
6e:78:b0:3e:80:83:13:c1:ba:59:a3:ca:24:8a:b8:
b0:81:3f:72:6c:be:c5:0c:90:50:8b:0c:de:60:e1:
42:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5B:95:CA:04:A3:87:2C:F7:3D:28:A5:CC:E7:05:87:E3:7B:8E:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f4db2647-0872-314d-bbb9-efb990f0ee39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.196.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c8:47:aa:3a:a5:d4:fc:69:d5:55:9c:a0:40:16:a2:ce:a6:71:
b7:6d:0f:45:8c:e8:c6:fa:9e:09:80:f4:3a:22:19:0f:de:ef:
a7:90:7e:21:25:aa:ff:61:64:a8:96:46:c0:73:28:86:11:99:
1b:d2:dd:c0:00:b8:b9:bb:16:fb:4c:1f:f5:74:86:eb:12:b0:
e7:b5:2c:c9:67:ae:8c:0c:3b:57:36:35:2e:32:35:e4:33:3f:
c3:b8:28:74:b1:6f:19:a6:bb:d2:b3:14:70:d7:99:f3:fa:63:
14:3d:bf:8e:eb:56:94:32:48:5e:27:e7:83:04:5c:90:25:89:
c4:ea:2a:da:4f:a7:05:49:39:ea:43:ba:1a:d0:ef:ea:08:d4:
16:c2:42:6f:fe:45:b7:ec:27:c1:1a:89:b1:74:c5:bb:c0:eb:
69:cd:37:4f:16:a3:e0:7a:8d:c2:df:a2:a7:96:e8:3f:21:57:
66:e3:f7:eb:a4:e1:e6:9b:cd:82:5e:8f:e9:35:59:e8:06:97:
9e:cd:8f:a3:62:d7:85:30:b9:da:bc:64:98:0e:54:e2:86:6a:
fa:bb:69:f6:6d:0c:b2:6b:3c:50:20:bf:89:1f:62:cd:de:10:
d5:6c:04:5d:04:3d:76:12:76:50:9f:77:90:1e:bc:0f:bc:c9:
0c:fc:07:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:06:36 2026 by rpki-client