
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2fe55928-9366-3ef0-8a24-60d06e008e74.roa
File: 2fe55928-9366-3ef0-8a24-60d06e008e74.roa (raw, json)
Hash identifier: WTkHXRhlV2UrVbjIm0Bao56jBHphKHiP6+qBW9Gg4IQ=
Subject key identifier: 9D:94:0F:0E:49:63:0B:47:67:EF:15:C8:13:76:04:89:0C:1D:1B:0F
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584EA79DFCA71386ECC5A2F343C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2fe55928-9366-3ef0-8a24-60d06e008e74.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7155
IP address blocks: 99.198.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9d:fc:a7:13:86:ec:c5:a2:f3:43:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=066658c2-2243-4a4b-9e84-e686962ea59d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8e:f9:e7:cf:f5:28:53:f4:96:2e:48:f8:31:
65:52:5b:c4:5d:dc:e8:fa:f7:2a:c6:a5:eb:9c:cd:
87:ad:a1:0d:59:c4:9f:f9:1f:ce:ed:f1:e3:38:8a:
80:24:87:9f:2b:6a:37:7d:66:a1:16:29:dc:72:5e:
01:2b:a7:82:5f:a2:4c:5b:77:c5:a7:12:0a:c6:49:
eb:d9:e0:5a:b7:bf:4a:f0:af:96:5f:f9:1b:c2:8e:
6e:86:bd:45:53:a5:53:bc:0b:9a:8a:f7:bc:93:05:
cc:eb:c1:db:73:c1:89:eb:2f:0c:46:8b:79:38:b4:
28:3b:bb:94:71:59:15:3e:e1:e6:83:d9:02:fd:f5:
4f:1a:5b:ea:d5:1b:65:f9:75:26:7d:fd:8c:11:8e:
e8:a9:c8:ba:fb:8b:02:0d:b4:c7:73:7c:bd:86:e0:
22:56:99:26:e7:2b:2c:9f:9e:be:f7:4a:8a:6c:d6:
e2:cb:ca:fb:cc:5f:48:c1:7c:43:ce:b2:b8:79:63:
b6:bf:d2:a8:c2:dc:b5:9d:6c:3b:89:ce:02:60:ce:
a0:5d:8d:b6:2a:6d:96:a4:00:46:17:aa:aa:1f:1a:
8f:ab:76:a7:44:44:d2:cf:c6:68:b0:88:f6:0a:4c:
1a:95:ec:ac:15:1c:91:94:cb:76:f0:c5:19:b4:e3:
6d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:94:0F:0E:49:63:0B:47:67:EF:15:C8:13:76:04:89:0C:1D:1B:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2fe55928-9366-3ef0-8a24-60d06e008e74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.198.38.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:f5:9d:2b:f6:62:ca:bb:41:d5:0e:3a:7f:04:cd:fc:42:8a:
36:58:f4:21:3f:c3:78:f8:96:d2:40:02:c3:a0:84:da:ce:c5:
ed:f3:8f:d7:5f:d0:8b:72:28:aa:5c:d0:f3:c1:55:50:ed:52:
71:56:3e:5b:99:63:f1:a5:7f:bc:47:48:13:ff:65:8d:10:57:
d1:a6:da:df:12:80:3f:d8:9e:2e:84:8f:16:5e:a2:b9:4a:a3:
65:ab:b3:56:34:1a:cf:1d:94:ba:b6:cc:12:a0:29:70:a7:8a:
ab:2e:21:d4:f9:e2:b0:f5:58:19:73:5e:13:e7:c8:b9:74:b7:
d3:28:a7:ed:8d:ed:41:0e:16:b1:26:40:32:63:b2:17:d9:51:
c1:14:21:1c:01:82:6d:c8:e8:4d:73:4b:1c:b4:f4:86:6c:9d:
11:04:bf:03:24:df:2c:ba:68:ab:cd:d0:19:8a:95:2d:fd:5a:
84:e1:f2:a9:95:5e:54:d8:22:f2:7e:7a:7f:5e:1d:57:c3:f0:
75:19:c7:21:32:95:ba:5a:97:9d:37:f1:4d:78:be:fd:40:0e:
f8:1b:f3:01:48:d7:cd:1d:68:f4:5f:36:4b:07:ad:9f:01:02:
b5:db:2e:c0:30:3d:0b:96:fa:ff:6a:3c:14:a3:e5:81:ed:52:
a2:ec:e3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:59:17 2026 by rpki-client