
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2b9499e6-3d5c-3727-a8ea-91f822370041.roa
File: 2b9499e6-3d5c-3727-a8ea-91f822370041.roa (raw, json)
Hash identifier: mxGhNPjZtM0Y6AVW3qI5SvaLRaon6hRjuDpSGR0EYOg=
Subject key identifier: EC:7A:FF:05:65:A5:9B:7F:FB:02:98:A3:B9:54:24:56:0C:E6:C1:43
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584EA79DFB50813314FC01D76880
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2b9499e6-3d5c-3727-a8ea-91f822370041.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7155
IP address blocks: 99.198.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9d:fb:50:81:33:14:fc:01:d7:68:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=65c6fddc-b2a0-4836-9ac6-5f11ad2ddafc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d7:9c:42:53:18:02:61:50:5f:89:0c:ae:de:
d7:5d:ac:bc:10:09:32:03:fb:6f:8e:d1:38:24:f5:
84:78:68:0a:18:1e:95:f5:2d:9f:af:7d:48:61:7f:
3a:f4:18:5f:0a:c1:a7:54:14:61:a9:13:53:13:aa:
bd:14:64:09:0e:78:21:47:6a:e9:88:f6:c9:50:f4:
94:93:b8:c8:cd:8f:91:40:aa:06:e5:d0:98:d7:3e:
b4:bc:22:59:2e:87:f5:55:b5:78:bb:c7:c2:49:88:
13:a2:50:d3:6a:5b:f6:c2:51:1a:eb:68:ce:b3:8b:
38:6b:34:c1:0b:09:81:9c:d2:83:c8:2a:f1:33:f0:
ad:a9:f7:90:f7:5e:e8:7d:28:23:f6:b6:13:76:e9:
f4:9d:af:32:75:a6:04:73:04:ec:5b:11:ed:09:c5:
23:b7:3b:19:84:e9:c7:99:d7:df:cf:73:10:ca:39:
ed:08:56:f7:ab:2c:ca:d7:cc:d2:d8:7f:a6:3d:ee:
ba:a2:a0:c3:6f:ba:5a:4a:6a:41:99:ff:8f:18:6a:
82:c4:cb:a9:d3:6b:03:61:df:e3:16:21:97:05:f3:
c1:9d:2b:97:9c:49:0e:06:08:18:9e:ac:4f:f8:97:
c8:07:6f:23:da:f7:e1:8b:c5:8d:30:0b:84:27:5a:
86:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:7A:FF:05:65:A5:9B:7F:FB:02:98:A3:B9:54:24:56:0C:E6:C1:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2b9499e6-3d5c-3727-a8ea-91f822370041.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.198.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:9a:2f:4b:f0:48:fd:3c:57:48:d6:b2:1c:c8:05:44:79:7a:
eb:c6:b6:d4:8c:d2:84:ed:0b:a5:e5:f8:00:cf:e8:fd:89:89:
b9:bf:20:10:19:62:7d:52:40:fd:4c:cb:45:bd:6e:d8:86:57:
f8:b0:57:a6:dd:92:c7:a6:08:1c:3f:ad:6e:82:a7:ab:d8:ac:
ea:16:d2:2f:92:ad:d5:9f:47:99:a2:5e:eb:8f:85:58:04:83:
a1:a6:3b:e6:26:63:3b:f7:5b:c2:8e:7f:84:13:c9:9b:a5:44:
2c:8a:5f:47:ac:80:c3:0f:c2:30:64:53:8e:23:ce:2a:dd:93:
0f:fd:62:b2:b6:dd:3f:f4:24:49:01:f9:36:76:48:c3:53:e4:
b8:13:46:b5:26:76:d8:fc:cf:9a:52:dc:52:e5:07:c2:b1:1a:
41:49:8f:ce:e6:ff:7d:15:f5:e1:9c:f3:c0:b0:10:7d:97:8e:
2a:0c:e5:21:d8:de:ce:92:57:db:3b:cd:a9:2c:ff:24:2d:31:
72:cb:33:64:cf:30:5d:80:4c:f4:4c:59:6d:92:32:94:0c:ae:
f5:66:01:5e:de:ca:41:11:22:17:a1:53:bb:c2:bc:f0:42:da:
b9:07:6b:b4:41:6c:a6:96:64:92:b1:d5:0e:d6:d0:4d:f0:3a:
96:a9:20:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:00:32 2026 by rpki-client