
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ff309459-c434-3e8e-881b-083ef3c22705.roa
File: ff309459-c434-3e8e-881b-083ef3c22705.roa (raw, json)
Hash identifier: CL+4YJZ24D/aRiyKuRPDv3WZid0hO6LXE19jEaF6+IU=
Subject key identifier: F1:67:69:C5:E6:F4:FA:1A:30:F8:61:11:4B:E1:EB:C5:86:39:80:1E
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24DFE6E5E90CCC81C9B8AA80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ff309459-c434-3e8e-881b-083ef3c22705.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 99.196.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:e6:e5:e9:0c:cc:81:c9:b8:aa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=6cee2d61-057f-4ea8-ba62-5f97e361750b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:af:3e:2d:c9:ba:75:07:9c:e3:dd:61:66:ed:
99:6a:d8:93:9f:a4:05:d2:15:59:4e:1e:19:15:a5:
f6:c1:d1:4b:ea:d4:e6:3d:43:fa:ec:52:07:a1:c6:
ff:0a:07:52:40:d0:63:0a:f5:d5:8f:bd:08:c5:7a:
a9:f0:de:cd:bf:10:9a:c3:ce:5a:76:c3:80:23:a5:
8c:b8:f4:34:cf:33:04:e2:f3:c6:9e:60:94:6f:fa:
14:60:b8:fd:da:8d:d2:45:de:b8:e1:52:44:14:cb:
47:52:c9:e2:1a:a0:d8:26:8c:8c:a9:24:70:77:c0:
b9:8d:01:d4:e6:02:37:e0:25:ec:90:16:f1:c4:33:
e5:5e:ad:d8:c6:e7:37:89:e3:5d:14:90:43:fe:7d:
b6:01:de:04:54:54:1c:16:7f:08:aa:b9:0f:57:0e:
71:ba:d0:a0:20:eb:ae:3d:a4:42:44:10:bd:53:6c:
86:97:50:10:0c:98:b7:72:ec:f2:f2:b6:9a:8c:e4:
7f:26:71:08:77:4b:19:9f:aa:ec:c7:ec:d9:f9:97:
f6:7a:89:1b:1b:6d:34:67:f5:0f:b4:3d:0e:13:8d:
d7:e3:18:99:cc:7c:53:24:fa:17:ab:de:36:cb:7b:
8f:c0:77:24:f3:83:3f:2f:27:11:55:eb:db:50:ad:
6f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:67:69:C5:E6:F4:FA:1A:30:F8:61:11:4B:E1:EB:C5:86:39:80:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ff309459-c434-3e8e-881b-083ef3c22705.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.196.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:e0:8a:d5:13:ab:bb:d3:d7:91:c0:41:21:eb:2c:88:c3:b0:
f0:84:3e:5f:5e:c1:02:9d:97:2a:95:6e:e8:45:f0:30:80:0e:
44:b8:7f:90:45:52:35:64:7f:5c:d7:21:51:86:34:df:c1:74:
de:b9:b9:38:0d:17:af:17:47:9e:83:f8:f4:69:1a:3c:71:94:
26:c6:73:13:38:0b:27:5d:fb:3d:8c:11:37:ef:21:65:42:95:
2b:59:06:a1:9c:7d:e6:ed:35:84:35:e0:88:80:d7:65:18:3c:
93:18:11:c3:2f:d0:d6:ca:f7:ca:a0:b8:6e:9f:1d:18:fd:53:
87:3a:d5:84:c3:e0:b4:41:cf:3a:25:f7:cc:42:cf:c9:a3:78:
02:d0:0b:46:a7:17:da:da:fe:5a:04:be:a0:ab:b0:d4:c7:0f:
c4:56:34:fd:f4:cf:35:3b:3f:c1:de:ea:b8:1a:8e:77:b8:14:
c3:0c:02:be:1b:13:79:07:21:ed:b6:89:84:76:bb:5d:78:32:
63:8a:45:07:d9:cd:91:ef:8d:48:86:8b:de:10:76:f2:03:f4:
87:06:d8:21:6d:7e:22:a9:c1:2d:b2:f2:5d:e4:cd:5e:e0:11:
89:77:1a:15:78:38:5e:b4:2c:50:ed:26:1f:f2:6b:8c:1f:32:
1b:e7:02:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:00:25 2026 by rpki-client