
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2aa6628c-4de4-31d6-859b-b2a0649b2a79.roa
File: 2aa6628c-4de4-31d6-859b-b2a0649b2a79.roa (raw, json)
Hash identifier: f3cj9FOIyQs7JBUSFWOO4eW2EyBOpZKMwXlbzgJ6afg=
Subject key identifier: DB:65:BC:73:EB:48:A3:95:30:99:C9:C7:2C:D0:D4:FA:20:29:55:40
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584EA79DFE4A2027964BC2771940
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2aa6628c-4de4-31d6-859b-b2a0649b2a79.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7155
IP address blocks: 99.198.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9d:fe:4a:20:27:96:4b:c2:77:19:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=27b10594-ee80-48d4-8997-190553fbb083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:45:10:23:bc:fb:bc:33:df:35:4c:cf:3d:11:
16:fc:5c:7a:4c:7f:8a:f8:ae:50:3d:19:74:c2:06:
b0:17:d2:32:a1:b4:55:ab:20:af:69:b1:09:c9:d9:
b0:9b:7b:71:a4:aa:24:a8:0d:4e:f9:49:46:ec:ae:
44:e3:08:2f:22:87:ad:c3:5f:59:ec:48:67:bc:0c:
88:01:bb:b4:38:ee:b5:7d:20:59:61:d1:bf:b4:14:
3e:e1:f1:2b:aa:b6:97:08:18:a4:8a:32:b4:7c:b8:
96:fe:ea:38:c5:e0:82:df:4c:a3:7c:f4:27:3e:f3:
1c:fe:10:fa:4a:f6:7a:ed:e1:83:5a:fe:0f:d2:87:
3d:2a:da:bd:1d:93:37:1e:2f:0a:58:cd:88:62:05:
32:3c:95:b6:eb:ab:0d:b6:05:b8:8f:f2:eb:b9:93:
e3:c9:79:f4:df:2c:87:db:5f:7c:e7:1d:69:4d:58:
46:76:1a:f0:79:61:b5:32:f8:fd:a1:cd:92:47:73:
65:11:ca:10:bd:5d:f5:5b:e5:9e:09:b0:16:ce:1f:
e2:69:20:36:7e:fc:6c:5c:5c:3c:5d:6b:28:8b:17:
95:87:f5:37:94:c2:e2:74:1f:1d:ca:18:78:ad:24:
ed:a1:13:f3:78:80:aa:51:36:37:e3:c7:bb:ca:63:
73:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:65:BC:73:EB:48:A3:95:30:99:C9:C7:2C:D0:D4:FA:20:29:55:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2aa6628c-4de4-31d6-859b-b2a0649b2a79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.198.57.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:be:dc:0d:07:c0:dd:0c:bf:3d:51:63:fc:25:34:00:99:5a:
e2:9d:19:f4:a7:3c:36:d5:94:c1:55:7b:0b:1c:04:5b:b3:6d:
42:d8:aa:26:eb:92:a0:05:46:2e:e4:c5:7b:7c:ca:10:cb:c2:
0d:54:3b:c9:f2:f4:9c:2e:e8:bf:75:59:98:33:05:8e:58:90:
37:c7:73:e9:02:0c:88:34:c1:21:59:7f:8b:0e:ad:29:c5:04:
fa:5a:62:0f:4b:bd:4f:8e:3e:68:22:d0:43:03:dc:df:1d:11:
90:85:a9:0b:95:b3:6f:ef:93:27:88:b0:9a:34:18:f0:0a:36:
fa:47:ed:52:1a:3f:44:c5:8c:a2:6c:35:3c:6f:89:eb:b4:d5:
2a:0a:60:e9:c2:8c:16:45:88:55:db:63:f2:e0:60:1b:32:ee:
a6:45:73:c0:23:b8:11:99:31:b0:96:ce:88:96:fe:98:d0:53:
fb:b8:6a:d4:09:72:d7:cc:a1:5c:34:71:7b:bf:c2:09:84:73:
ff:77:d6:d5:43:d7:12:7b:6e:70:a4:03:d2:f9:ee:54:4a:d1:
61:1e:64:ef:01:be:29:50:7f:45:54:a3:fb:b9:93:eb:6e:2c:
c2:93:09:73:f5:b8:24:d8:6d:41:2d:ce:85:c6:9d:2c:86:1d:
e1:09:d4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:39:52 2026 by rpki-client