
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/28e5dc7a-269a-3c29-a36c-d319550db8e2.roa
File: 28e5dc7a-269a-3c29-a36c-d319550db8e2.roa (raw, json)
Hash identifier: l/0MufzoROaZzzB08fYtZaLWyTX5dndCHdQJs6iarhY=
Subject key identifier: 55:EA:66:3D:1E:14:80:35:3B:A5:55:0F:F9:95:A8:C8:10:3D:29:62
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584EA79F976AC322F838D7583AA0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/28e5dc7a-269a-3c29-a36c-d319550db8e2.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7155
IP address blocks: 99.198.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9f:97:6a:c3:22:f8:38:d7:58:3a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=969a9ab0-f327-49cd-bf66-f341d08a19d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1b:d6:8c:d6:1c:88:99:f1:45:73:63:41:95:
0f:59:7c:e8:69:c3:41:eb:26:56:fe:9a:2e:a4:f1:
e3:6f:de:76:2c:07:e9:b9:b7:91:4d:43:d3:c2:ca:
7c:2a:e9:0f:30:32:af:c3:82:97:7d:79:8a:02:40:
e8:0e:14:f1:21:01:54:07:65:b6:30:e6:01:03:c7:
3d:ad:75:b0:dd:0c:ad:d6:f4:2b:1c:3a:0a:d7:24:
a2:c5:4b:c4:57:21:89:6c:80:3f:33:87:d9:cf:ff:
cc:c8:0b:0f:6e:74:e5:cc:4a:4e:ed:9e:aa:eb:43:
34:30:b0:73:06:b8:ee:31:09:20:fc:00:38:24:a2:
c5:34:a9:90:43:f5:2c:20:f6:af:6d:55:74:0a:5f:
99:b2:18:47:7f:b9:1a:5c:78:61:23:3c:14:89:6c:
97:27:6e:bc:63:91:4d:2a:fa:73:aa:6c:b1:12:98:
2f:81:01:af:1a:d9:ac:13:e8:66:73:25:70:2c:92:
cb:43:26:a9:5d:16:1e:8d:3d:80:09:ff:a0:07:94:
c1:4a:c1:e5:5a:a1:40:95:e0:c4:dd:13:20:9a:55:
98:bc:dd:83:b8:97:8f:1b:33:77:69:5f:f7:bb:81:
8d:6b:d8:09:b5:f4:8f:d4:9e:38:77:b7:4a:5f:17:
84:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:EA:66:3D:1E:14:80:35:3B:A5:55:0F:F9:95:A8:C8:10:3D:29:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/28e5dc7a-269a-3c29-a36c-d319550db8e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.198.6.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:4d:b8:be:d8:01:69:0c:d6:bc:20:cf:7f:1f:a8:dd:e8:1f:
6a:8c:1a:31:2d:e3:e5:b1:3b:62:2a:61:b6:10:a4:69:06:6c:
19:ad:e5:ac:e7:9d:14:f7:e9:c0:3c:14:33:b3:7a:1e:6a:00:
24:69:b1:8f:35:bb:8b:1b:b4:32:04:17:0c:71:3e:04:ea:c7:
18:ae:1b:26:44:e7:8b:8c:0a:a1:83:2d:a0:eb:fe:20:cd:d1:
ea:ef:82:92:6d:57:96:f0:50:7c:e3:fd:3c:06:61:fd:42:b8:
ff:96:3a:0f:c6:95:eb:3e:bb:e8:33:88:db:00:a2:70:e1:59:
3c:0f:85:69:43:fc:71:a8:63:43:9f:f1:26:5f:15:b2:b2:0b:
0f:fb:be:7b:cb:80:47:66:9b:f6:37:3d:f5:61:07:b1:8c:db:
e1:2b:3f:7a:1f:4c:bf:57:38:33:25:fa:28:78:04:22:01:08:
b3:d4:28:5d:51:fa:19:63:74:79:56:ef:23:c1:a5:00:dc:77:
88:34:93:b9:9e:0d:0e:9a:88:65:cd:6c:f6:f7:6b:9f:56:64:
b8:7f:b6:44:1f:b9:f4:12:ff:17:66:9b:55:56:b2:e1:cb:36:
b2:48:95:f3:a8:d2:8c:2e:46:a8:53:d4:87:63:b8:5b:9e:0e:
26:33:83:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:58:50 2026 by rpki-client