
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2aa9a847-5b6d-36a5-9cb3-535ec61e34d1.roa
File: 2aa9a847-5b6d-36a5-9cb3-535ec61e34d1.roa (raw, json)
Hash identifier: 405RlwdZf1n6Gvkx/+rAaJ9ecEb5iLfcySa5DQT9p+A=
Subject key identifier: B8:DD:84:43:71:94:E2:0A:30:95:EE:32:E0:00:70:FB:C9:BC:47:41
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584EA79DF2FD82282386A9F47880
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2aa9a847-5b6d-36a5-9cb3-535ec61e34d1.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7155
IP address blocks: 99.197.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9d:f2:fd:82:28:23:86:a9:f4:78:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=4f574c8b-94fe-4104-8049-f2d8b5be5816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7b:81:3b:eb:a3:8a:1e:29:7d:b4:9b:61:3e:
ef:c5:4d:bc:40:dd:34:db:f5:aa:7f:d4:4c:bb:07:
22:ad:d8:cc:66:5f:94:03:fb:21:b8:0a:32:6c:7a:
f2:10:2b:2b:97:99:42:50:6a:65:36:ed:e2:89:2d:
da:7d:b3:71:1a:60:2e:60:5c:41:02:6a:b5:47:84:
15:3e:79:ad:e5:f5:ac:3d:42:a0:cd:05:50:bf:7b:
f8:18:08:05:84:20:7b:f2:f5:05:4e:30:3a:30:24:
85:66:50:54:3b:0c:95:5d:a4:a7:8d:14:45:e5:ae:
1c:03:5a:05:1f:4c:08:71:c6:09:8e:ce:41:9d:5f:
00:e0:01:0f:e9:67:c6:38:da:ee:7e:bf:42:a6:dc:
f8:63:d4:6b:f1:45:a7:40:c5:a4:78:9e:53:69:fb:
80:0d:a1:f2:56:39:9a:cf:dd:d4:d1:e5:83:84:f7:
5a:e1:c5:4a:95:f8:4a:5b:22:d5:2a:28:ab:de:0d:
cb:f3:a4:69:59:25:fb:1e:93:3c:c7:7b:c7:e7:1c:
7a:05:c7:98:f5:d6:7e:ae:cb:d0:3c:ab:8a:4a:ba:
fa:7e:f7:fa:d2:7b:e7:d3:2c:63:db:fc:f3:f0:ed:
c4:10:12:30:3f:82:f9:5e:18:62:61:07:1a:06:6b:
1b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DD:84:43:71:94:E2:0A:30:95:EE:32:E0:00:70:FB:C9:BC:47:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2aa9a847-5b6d-36a5-9cb3-535ec61e34d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.197.119.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:01:a7:73:c7:34:e3:98:50:06:9e:96:5a:1f:3d:fe:71:61:
fc:2b:06:d9:5b:fc:b3:02:2d:63:07:aa:32:c2:59:e1:68:1e:
25:4b:0f:b8:8b:d1:6a:fd:d9:c5:32:1c:5a:7f:2e:7f:99:70:
2e:f9:95:14:58:98:14:98:93:c9:a9:16:1b:1c:dc:49:0d:ed:
d6:fc:fc:34:46:77:a3:d8:32:aa:8d:8b:46:4a:ba:6a:eb:cd:
95:df:66:08:bb:ae:99:b4:66:df:5a:7a:92:a5:f7:01:5d:d3:
0c:cd:e7:94:7f:3b:8c:ed:e6:1d:16:00:0b:37:f9:cd:3c:3b:
3a:6a:0b:91:2e:40:0a:42:41:11:8c:5a:ba:75:a2:70:e0:0c:
e0:ea:fc:f7:ca:9d:92:62:97:b3:5f:5a:ca:f7:87:e7:b5:ef:
58:df:b7:f9:4d:85:a6:f7:bb:77:70:d8:fe:e5:45:93:27:8a:
17:b0:8c:fc:fe:7e:c5:c2:6a:74:01:52:e7:64:91:61:3c:51:
fd:ec:8b:66:c2:96:f9:e9:b0:d2:0e:39:ba:88:34:24:d5:e8:
7c:24:66:a1:b1:17:cc:4e:b7:dc:3b:fc:9b:7f:b6:ed:f4:3a:
90:8b:56:f5:33:e2:c6:de:44:f0:b3:4d:67:79:f4:f5:a4:4f:
ea:81:81:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:15:42 2026 by rpki-client